Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3430203d3e20323636323136.roa
File:                     323830343a336338303a3a2f33322d3430203d3e20323636323136.roa (raw, json)
Hash identifier:          AYzHgBPogBWk24UFTlHKtNAcYhI4zcT649rA0c8t9oU=
Subject key identifier:   70:B1:BE:E2:03:AA:70:B2:89:07:A4:F1:E0:B0:E6:C0:0F:CA:BE:8B
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       3ECA90B7FE4126AC78918D9735A4BC4691022852
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3430203d3e20323636323136.roa
Signing time:             Fri 17 Mar 2023 18:49:49 +0000
ROA not before:           Fri 17 Mar 2023 18:44:49 +0000
ROA not after:            Fri 15 Mar 2024 18:49:49 +0000
asID:                     266216
IP address blocks:        2804:3c80::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ca:90:b7:fe:41:26:ac:78:91:8d:97:35:a4:bc:46:91:02:28:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Mar 17 18:44:49 2023 GMT
            Not After : Mar 15 18:49:49 2024 GMT
        Subject: CN=70B1BEE203AA70B28907A4F1E0B0E6C00FCABE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:b0:af:65:39:ec:c4:a8:d5:f4:3c:3e:8f:
                    a8:af:a2:ac:62:4c:20:b2:93:7e:73:37:4e:32:07:
                    4a:58:7e:ee:18:25:6f:95:f4:91:ba:78:9b:08:9e:
                    7f:92:c1:06:ee:05:a4:13:c9:e3:7a:8b:bb:d1:9a:
                    33:68:33:f3:80:51:0f:6b:78:ea:3a:b6:56:6e:e6:
                    b8:dd:16:b5:0a:e1:19:bb:e8:8a:45:4e:b8:32:6f:
                    52:11:dc:d6:c0:a9:19:cd:31:c8:b6:9c:bc:07:95:
                    53:39:91:c2:a0:1c:32:43:bf:13:41:e0:30:23:7d:
                    01:b1:bc:8f:49:4c:d1:e1:50:4e:24:eb:c3:eb:c7:
                    77:ec:1f:57:20:f7:99:06:5e:5c:0a:53:46:ad:6c:
                    21:81:00:b3:93:b3:dc:52:a5:04:c1:51:ed:eb:c0:
                    5c:c4:34:96:ae:0a:d8:53:16:f6:d2:4c:b2:7a:82:
                    55:de:1d:2e:f7:0c:d6:3c:66:53:16:e4:dd:09:37:
                    7a:30:4a:e5:1e:92:f2:2d:2f:70:d7:11:a2:1a:9d:
                    15:09:32:c2:62:ff:8e:45:01:18:05:1c:19:cb:8d:
                    58:8e:03:e7:16:f5:98:37:a5:61:b2:aa:01:c6:09:
                    e6:f5:60:68:77:c7:f7:14:df:8c:16:f6:6f:e7:fd:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B1:BE:E2:03:AA:70:B2:89:07:A4:F1:E0:B0:E6:C0:0F:CA:BE:8B
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3430203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:f5:69:e0:56:ba:21:ce:74:46:59:7e:a3:c4:c1:a0:c2:
         c4:7e:e9:90:b7:4f:d2:0f:de:0d:a4:2b:f9:34:64:1d:f8:60:
         b7:bc:a1:26:73:8f:65:39:fc:b0:08:eb:b3:71:9b:03:0f:3d:
         f9:35:bb:09:b2:3f:3c:c6:2d:d9:2d:ba:91:c9:cd:25:67:95:
         1f:b0:43:cd:36:fa:02:c7:0f:da:da:54:a2:fb:a9:f6:b7:f4:
         7b:b9:b3:dc:8a:f5:0b:fd:42:a7:95:22:f5:16:ac:40:79:a0:
         2e:62:4f:08:ad:83:40:87:e9:00:5d:95:3d:a7:e7:d2:01:e3:
         32:a6:68:e1:38:4c:9d:da:9a:91:c1:a4:3c:89:78:69:2c:df:
         93:91:9c:45:58:db:a4:eb:df:89:a9:3f:e6:de:22:5e:8c:4b:
         25:3c:66:16:19:29:ee:16:b1:9b:9d:83:f1:53:9f:32:59:97:
         c1:17:e9:91:b1:91:ff:ba:d2:e8:4a:2a:e5:c8:16:1b:39:0b:
         64:af:4a:ec:e3:c3:ce:6d:1a:d5:1f:20:b8:9f:df:c1:3b:01:
         1d:ac:e6:9e:18:8f:9d:c4:08:d1:66:b7:dd:79:1b:e7:b6:6c:
         55:a9:18:60:b3:79:22:b6:c3:1e:7a:b1:9c:2b:60:26:d5:56:
         6d:46:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org