Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3239303a3a2f33322d3438203d3e203238363639.roa
File:                     323830343a3239303a3a2f33322d3438203d3e203238363639.roa (raw, json)
Hash identifier:          hkwrL+0vzyF2b5rfTRLyiA4eFQYR2jcRy+0kzCYtmnQ=
Subject key identifier:   A0:0E:60:4C:15:87:53:18:19:4B:CA:FE:15:FD:64:94:A2:66:8E:73
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       09F46B59DE5E0F416E06FC53C315282B6525106C
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3239303a3a2f33322d3438203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:36 +0000
ROA not before:           Fri 03 May 2024 19:39:36 +0000
ROA not after:            Fri 02 May 2025 19:44:36 +0000
asID:                     28669
IP address blocks:        2804:290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f4:6b:59:de:5e:0f:41:6e:06:fc:53:c3:15:28:2b:65:25:10:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:36 2024 GMT
            Not After : May  2 19:44:36 2025 GMT
        Subject: CN=A00E604C15875318194BCAFE15FD6494A2668E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:cc:82:ab:f5:3f:6b:55:b5:04:39:20:0b:
                    75:73:b3:40:bd:70:fe:b5:d8:f3:15:6c:bb:b8:e5:
                    30:8c:dc:3e:b0:c7:39:c7:24:a6:71:1c:b9:08:89:
                    40:e0:f0:54:f1:42:90:9d:be:74:e6:84:ba:98:24:
                    a8:69:e6:1b:4b:ff:e7:c1:6b:6c:94:c9:f7:e8:82:
                    6e:c5:0f:bf:09:ac:6a:45:4a:e2:b1:9e:5d:a5:a1:
                    73:18:5c:ad:f2:51:d9:c2:6d:87:9a:2d:bb:c5:b8:
                    dd:bc:4f:d0:05:63:8a:6c:14:93:ff:5e:55:42:f3:
                    8c:8f:a6:b3:e0:3b:95:ae:46:f8:fd:99:b8:75:dd:
                    22:5e:72:42:4e:dc:cb:f7:8f:2a:d6:d1:c4:88:a6:
                    1f:ed:b4:5e:c1:12:fe:fe:4c:37:01:d8:c9:8d:11:
                    86:f7:42:b7:1b:0e:df:7d:25:bb:9f:38:32:fc:79:
                    f4:a4:8e:b6:99:b2:29:12:51:87:5b:e2:40:6d:35:
                    d8:01:bf:38:81:90:72:3c:1e:ff:01:9c:f0:84:a7:
                    7a:df:9d:d1:83:24:cb:5c:86:49:9b:ea:83:fc:c5:
                    52:02:f1:57:0f:6a:cf:2f:73:be:7f:c4:2c:71:5b:
                    38:6c:62:90:ef:25:e9:57:cd:13:3a:47:74:58:0f:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:60:4C:15:87:53:18:19:4B:CA:FE:15:FD:64:94:A2:66:8E:73
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3239303a3a2f33322d3438203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:ae:f3:d8:6b:56:10:e0:81:f4:56:78:90:5f:17:37:32:
         0a:7c:74:c8:5b:37:14:16:98:4a:0b:c8:2f:af:63:e6:73:66:
         e4:68:b2:20:d0:4a:a6:c2:13:f7:78:8c:00:4f:a2:ad:b2:e6:
         24:eb:3f:3d:6a:f6:c9:a3:9d:d1:98:b6:3c:02:4e:76:0f:21:
         3f:ed:73:d4:d4:c9:04:de:5b:9c:d7:a1:b3:65:57:63:b8:e5:
         c8:5f:ae:c5:55:d3:c0:fc:7c:09:a2:d1:0e:87:5f:c5:15:b9:
         21:98:74:76:2c:73:57:ef:29:c7:31:5d:a5:ed:02:9c:f3:d3:
         62:62:47:8d:47:e3:a9:17:35:4e:0a:a9:6c:8a:fa:ce:3b:b3:
         0d:6b:4a:8a:4c:30:16:ee:63:91:a4:53:f5:46:aa:f4:ea:86:
         43:76:2f:e3:a0:87:ae:d3:bf:b4:e2:bc:b3:0a:4d:76:e3:07:
         46:b8:1a:fd:0d:fe:8d:c9:58:cf:59:02:ef:86:89:a0:26:a3:
         54:a5:e2:8a:29:4a:7a:ac:f9:21:16:d3:7c:15:d6:bd:83:fb:
         73:74:2c:f5:bb:70:b9:aa:a0:b9:e8:41:ad:7d:51:32:ce:aa:
         f0:52:1e:56:36:54:90:c5:39:22:1b:3d:15:c7:6e:1e:e5:91:
         0f:e8:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org