Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a633030303a3a2f33342d3334203d3e20323636343932.roa
File:                     323830343a333861383a633030303a3a2f33342d3334203d3e20323636343932.roa (raw, json)
Hash identifier:          IT9s+FZMuq4k21c8+tTg7F+OYeUhARshxc0cSXEPPcA=
Subject key identifier:   55:9F:F6:EC:0B:A8:08:04:12:7E:91:FF:6E:BF:3C:A7:58:6C:19:F3
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       5E0B78C1AF35ACE3C98F78988B208E950B4F5876
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a633030303a3a2f33342d3334203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:01:18 +0000
ROA not before:           Tue 02 May 2023 16:56:18 +0000
ROA not after:            Tue 30 Apr 2024 17:01:18 +0000
asID:                     266492
IP address blocks:        2804:38a8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0b:78:c1:af:35:ac:e3:c9:8f:78:98:8b:20:8e:95:0b:4f:58:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:56:18 2023 GMT
            Not After : Apr 30 17:01:18 2024 GMT
        Subject: CN=559FF6EC0BA80804127E91FF6EBF3CA7586C19F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:21:8b:63:81:c1:bc:9e:8e:6c:44:1b:00:
                    01:80:71:c6:42:83:6b:67:62:4d:59:cb:46:77:9e:
                    7d:e9:ff:73:bd:8b:0c:b2:30:1e:a1:a0:11:10:c2:
                    62:71:d1:35:64:30:83:4c:56:ac:4f:8d:73:31:3a:
                    22:d1:75:08:9d:73:b6:90:1e:2a:12:f0:b1:43:be:
                    25:4d:2d:c3:be:57:30:9f:97:9f:79:bb:1c:d1:ad:
                    93:be:d0:45:f3:0c:73:9e:3a:13:ad:e6:15:a9:67:
                    90:eb:64:22:bd:35:0a:a3:2d:ec:5c:76:e2:3c:41:
                    4a:3b:87:92:73:1a:49:a7:1e:0f:6e:7f:df:d2:34:
                    e1:36:cb:e3:da:28:dc:9a:ea:b9:fa:50:81:6f:9f:
                    d5:85:5b:50:18:1b:c5:71:95:0f:65:0b:19:07:14:
                    8d:c1:6d:76:54:a7:0b:32:39:35:fe:98:aa:cb:6d:
                    bc:4a:b8:c0:91:8d:4c:c6:c4:92:e0:28:0f:ec:07:
                    6a:14:0e:8b:a2:5c:05:9e:a5:7b:31:40:67:72:66:
                    0c:cc:fd:6e:c0:1b:fb:23:ac:d2:aa:3c:b2:9d:97:
                    28:a1:37:49:21:cc:16:82:74:d4:44:6e:bb:9c:81:
                    dc:9e:da:c8:6f:55:de:61:22:8a:ed:4b:33:30:63:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9F:F6:EC:0B:A8:08:04:12:7E:91:FF:6E:BF:3C:A7:58:6C:19:F3
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a633030303a3a2f33342d3334203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:ef:00:8e:c2:b3:a6:48:8a:94:73:af:17:a4:39:09:b6:
         01:a5:f2:63:11:3e:88:27:3a:3a:27:25:c7:93:f6:e1:13:f7:
         47:82:bf:29:c9:1b:9c:43:d6:57:ce:cc:dc:96:55:ee:6e:e4:
         a7:08:98:04:84:4d:eb:d8:fc:cb:05:7c:a2:83:f2:93:c1:96:
         9a:53:98:91:52:75:ec:79:7b:03:59:a1:f7:a0:14:50:b5:83:
         7b:37:10:8c:74:1b:e5:cf:81:80:a2:be:10:63:cf:fa:10:f0:
         7f:ad:d8:a4:db:a0:e0:45:44:37:d7:d5:40:96:1a:58:99:e4:
         11:48:77:14:9b:f4:b1:d5:78:c3:c4:40:b6:37:68:f5:53:30:
         38:5a:09:b5:6d:ff:0f:21:be:1b:ee:cf:20:59:46:2f:57:0c:
         67:56:7e:ab:36:be:32:7c:28:28:f5:30:85:9a:5d:7a:30:01:
         9a:0a:65:79:fe:de:9a:5e:85:63:10:5d:c3:ea:33:e1:93:bf:
         a1:d1:fc:72:30:e0:ef:80:b8:f0:97:ab:c7:66:c7:cc:5b:21:
         dc:ed:74:82:33:b4:96:ad:47:ea:08:ee:94:ba:b9:f8:d0:9a:
         b2:13:88:91:a4:e2:0b:cf:1a:1c:ff:3a:ae:f8:90:d1:7c:20:
         19:8c:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org