Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a653030303a3a2f33352d3335203d3e20323636343932.roa
File:                     323830343a333861383a653030303a3a2f33352d3335203d3e20323636343932.roa (raw, json)
Hash identifier:          MqeDd7zarliC7vYXFxQzAxvY59ekixC7shNavdgFU5I=
Subject key identifier:   29:E4:93:45:59:94:6A:21:1B:43:E2:8A:01:4E:F0:6A:77:5A:B0:AF
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       68F7BA8E59317DF5D24D69338C11EC5CF997D9C6
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a653030303a3a2f33352d3335203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:01:35 +0000
ROA not before:           Tue 02 May 2023 16:56:35 +0000
ROA not after:            Tue 30 Apr 2024 17:01:35 +0000
asID:                     266492
IP address blocks:        2804:38a8:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f7:ba:8e:59:31:7d:f5:d2:4d:69:33:8c:11:ec:5c:f9:97:d9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:56:35 2023 GMT
            Not After : Apr 30 17:01:35 2024 GMT
        Subject: CN=29E4934559946A211B43E28A014EF06A775AB0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9e:6f:16:aa:4f:c6:48:3d:06:8d:ba:83:5c:
                    dc:b7:1c:a5:95:f1:93:db:dd:bb:8e:84:7e:ac:50:
                    19:cc:f9:34:14:50:88:6a:34:c9:be:2f:94:c0:67:
                    76:06:1c:14:29:1a:82:f8:d2:be:d4:a9:74:92:bf:
                    28:b9:76:49:85:cd:aa:9e:06:dc:77:64:1f:03:6d:
                    7b:ba:4d:7e:c6:0d:42:7d:0e:4a:0a:2c:2b:e1:da:
                    bd:8a:c3:f1:79:da:79:6d:68:71:70:b0:9c:8e:ce:
                    4b:73:0b:2d:f1:a6:ff:e6:5c:d7:7f:14:89:8f:c8:
                    ed:20:c3:55:ec:5d:e2:9b:51:b4:6b:94:99:67:71:
                    c9:15:91:87:26:40:7e:ca:96:dd:bf:1d:14:34:99:
                    2d:34:f2:b4:76:f3:30:12:60:3b:28:c7:dc:a1:4b:
                    25:c6:c5:8e:35:1c:92:42:62:68:20:84:c5:d2:4b:
                    8a:34:a5:98:79:85:df:5b:ae:57:42:61:b8:c3:fa:
                    1a:79:b5:14:42:d6:91:33:c5:42:af:0a:2c:42:ed:
                    10:ca:d9:ca:38:1b:17:42:b3:f0:23:f9:38:0f:53:
                    8b:db:cd:14:8c:4e:1b:d7:48:d0:a7:99:5f:88:ab:
                    f9:bb:b5:dd:41:0c:ea:3b:39:e3:0e:88:9b:66:5b:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E4:93:45:59:94:6A:21:1B:43:E2:8A:01:4E:F0:6A:77:5A:B0:AF
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a653030303a3a2f33352d3335203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:2b:86:5e:75:63:49:6d:1e:4b:b6:d8:f9:0d:da:b0:f1:
         d9:2d:73:8c:4f:bb:81:a0:31:61:d1:c3:a2:26:e7:69:78:90:
         6f:55:57:a4:aa:8b:5a:55:d2:18:3a:e2:0c:02:48:81:20:d9:
         d7:d4:ed:c7:c3:94:28:ad:3e:62:ef:7a:79:06:eb:55:6a:4a:
         9d:e0:20:03:5b:1c:1c:f5:4b:6b:fc:f7:5a:64:a7:0f:69:cf:
         6a:09:f2:00:c6:13:a0:ec:48:6f:0e:36:bb:d1:e5:57:0b:3a:
         2e:9e:aa:eb:12:91:c7:46:a4:2e:99:8a:28:cb:26:c5:67:99:
         a8:10:81:26:ad:18:50:a1:ec:04:62:29:03:d8:cc:d2:1d:80:
         a3:c1:08:da:9c:3a:e3:fa:21:7c:b7:08:58:72:4d:e9:dd:5d:
         5a:bb:bd:cc:ea:ea:b4:53:4b:6a:69:1c:24:46:e8:19:ba:63:
         3a:08:87:24:f9:41:d4:95:2e:5c:62:42:c6:c3:4f:62:0c:14:
         64:ae:8d:55:5c:71:f9:71:7b:7f:77:9c:41:53:4b:14:73:4a:
         3d:35:4f:7e:69:2f:41:8a:0a:1e:0e:40:de:41:1a:8e:23:39:
         b5:cb:c5:4d:d1:36:3e:ea:ac:5d:04:08:0d:5e:79:f1:b9:19:
         ed:63:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org