Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a623030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a623030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          SPy/7N/GsNwu9dZAPK4AgZ7jETazInXhMR4CTiIe6Nc=
Subject key identifier:   30:61:E9:CC:F9:FB:7B:5C:9D:9D:D9:2A:76:86:D5:83:E1:65:27:0E
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       645125D7B88E587F7DEFABE7F4EF15E14881EBA3
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a623030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 16:59:12 +0000
ROA not before:           Tue 02 May 2023 16:54:12 +0000
ROA not after:            Tue 30 Apr 2024 16:59:12 +0000
asID:                     266492
IP address blocks:        2804:38a8:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:51:25:d7:b8:8e:58:7f:7d:ef:ab:e7:f4:ef:15:e1:48:81:eb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:54:12 2023 GMT
            Not After : Apr 30 16:59:12 2024 GMT
        Subject: CN=3061E9CCF9FB7B5C9D9DD92A7686D583E165270E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:8a:5e:4b:e2:7c:2b:43:b9:e9:20:78:8e:
                    59:60:9a:f0:2f:64:c5:c4:00:6f:35:ff:8d:18:d0:
                    46:90:eb:3f:03:20:2b:b7:90:c4:dd:a1:94:5b:d1:
                    44:82:94:4a:7d:e2:4f:5a:40:63:1a:3f:cf:54:40:
                    ba:c0:62:df:38:b9:48:ea:ef:b9:33:fb:a9:df:50:
                    c1:15:2d:b4:4b:f5:5c:60:3c:93:77:d7:8a:df:35:
                    d1:20:3d:fc:b9:78:94:7e:90:c0:d3:15:3e:4d:16:
                    6d:1d:c4:39:16:b1:b6:af:ba:ea:bc:f3:85:88:f6:
                    fe:59:5e:11:10:29:56:56:1d:28:d8:55:f4:f6:8c:
                    68:f2:41:c6:9b:a8:48:9c:8c:01:41:2d:4d:fd:d0:
                    3f:cf:6c:9a:7b:49:92:8f:c3:67:0f:08:c5:67:28:
                    7c:62:0c:6a:84:b1:5c:fa:c7:61:f3:06:d6:39:46:
                    83:db:32:3a:68:d5:58:9c:fa:a8:2b:fa:ea:59:04:
                    c2:95:33:b9:33:05:f3:a6:08:74:41:cf:5d:4e:90:
                    85:cf:6f:98:5c:b3:3d:c5:8c:f1:00:23:e1:d5:da:
                    d6:41:53:0b:3a:d3:a1:ec:c5:a4:59:e5:a0:37:5b:
                    03:f9:a5:73:72:3e:81:6d:b2:11:a2:e9:04:da:1f:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:61:E9:CC:F9:FB:7B:5C:9D:9D:D9:2A:76:86:D5:83:E1:65:27:0E
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a623030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:f1:e7:f1:97:34:d7:16:2b:53:07:a7:05:f4:36:c2:e5:df:
         70:28:1f:c5:fa:49:fc:6d:78:be:40:ae:72:ce:24:07:89:9e:
         9f:d6:53:5d:27:06:fd:3a:7b:82:da:c3:3d:91:5a:d1:ad:bc:
         21:82:0e:3f:71:e3:59:1a:f6:55:59:4f:61:0c:0b:30:f7:6d:
         da:6b:f5:fe:f3:f9:b3:7c:0a:33:8d:29:0f:68:7a:28:6c:83:
         07:f0:79:89:9d:df:a4:89:de:7f:15:9f:46:af:45:90:c3:86:
         a9:7d:10:d1:e7:13:e6:50:fb:55:be:9c:85:84:55:37:71:39:
         83:0e:f9:4f:a2:01:79:37:40:d9:72:0d:f2:0f:c6:70:b6:51:
         bd:8b:83:a8:52:9f:91:f0:93:fe:1c:ef:e9:8c:82:d2:9e:fb:
         07:79:f5:9a:7e:a8:8a:6a:0d:78:0b:24:b2:29:6a:89:3e:cf:
         f5:70:b5:ae:8a:28:51:fa:9f:b6:33:51:65:7c:b1:af:26:3c:
         3c:9a:bf:85:0c:d8:ea:79:32:69:b4:b9:13:e7:ab:eb:d7:ec:
         bd:ab:1f:aa:61:a6:33:e0:4b:63:6b:74:e0:9e:b7:b7:07:6f:
         38:1d:a6:4b:4f:55:d8:84:c5:11:5f:1d:c1:04:b3:5c:cb:52:
         c8:e1:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org