Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a346265633a3a2f33322d3438203d3e203238363639.roa
File:                     323830343a346265633a3a2f33322d3438203d3e203238363639.roa (raw, json)
Hash identifier:          WJY0DMzmDK860tzyDlJJad8wj0NbJmI3NIrtijIzCFE=
Subject key identifier:   11:E8:3E:37:D2:04:77:06:FA:0C:8B:DA:63:EE:C0:9D:2C:23:88:F0
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       7DBA0D1CBB9AAE96DDD69F1BA11942CF80ABE97E
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a346265633a3a2f33322d3438203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:39 +0000
ROA not before:           Fri 03 May 2024 19:39:39 +0000
ROA not after:            Fri 02 May 2025 19:44:39 +0000
asID:                     28669
IP address blocks:        2804:4bec::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:0d:1c:bb:9a:ae:96:dd:d6:9f:1b:a1:19:42:cf:80:ab:e9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:39 2024 GMT
            Not After : May  2 19:44:39 2025 GMT
        Subject: CN=11E83E37D2047706FA0C8BDA63EEC09D2C2388F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:48:e7:2e:2d:1e:d9:21:b2:4d:45:89:79:
                    c8:c4:40:8b:e9:3d:3a:dc:5e:4c:12:49:15:c9:3c:
                    59:b8:5e:ef:b1:05:27:5e:d6:c6:c3:b2:a6:c0:ab:
                    51:03:a1:89:c1:aa:91:2b:82:ed:64:1e:41:4f:16:
                    41:b0:10:ff:74:0c:e2:f6:f5:ad:68:19:14:56:3d:
                    9a:d7:1f:86:33:30:69:67:06:89:5a:96:e0:90:92:
                    d5:68:d8:26:05:10:c4:05:65:2d:fc:91:af:df:51:
                    a9:98:ee:3b:47:c7:97:3f:ff:f8:82:fb:0b:7f:75:
                    94:ff:3e:c3:2a:f5:55:84:83:fb:63:e2:2e:65:61:
                    3a:30:58:91:ca:5a:10:58:d3:5e:db:91:6d:46:d8:
                    ba:ee:c2:50:02:4b:ed:de:31:8a:73:35:a3:c6:aa:
                    77:a6:c2:04:e0:e2:31:fb:b7:66:5e:d7:f8:a8:b4:
                    72:14:43:31:78:8b:ad:48:ab:26:7e:af:e6:13:ce:
                    7a:26:fa:4f:70:83:11:9a:f5:54:d9:04:ab:5b:38:
                    0e:8c:23:9d:b3:af:98:49:0b:8e:fe:e3:d8:86:08:
                    e7:29:d3:11:8a:2e:1b:08:0b:d0:89:d9:33:8c:27:
                    0a:6c:ba:a8:ab:14:6b:c5:8a:27:4a:96:02:3a:1b:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:3E:37:D2:04:77:06:FA:0C:8B:DA:63:EE:C0:9D:2C:23:88:F0
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a346265633a3a2f33322d3438203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bec::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:de:c1:ae:41:49:dc:a7:b8:38:5f:51:49:28:f8:be:d0:ac:
         9e:ad:7c:3f:4b:3e:c5:05:73:ca:de:47:a3:c0:ba:aa:ec:96:
         b6:aa:55:32:ce:8c:df:8f:d4:b7:96:9f:75:65:b1:e5:fd:e3:
         e0:d2:d2:df:91:b7:38:4f:26:91:7a:0c:df:1f:9e:25:d4:ba:
         7e:9b:71:c8:92:96:7b:93:f8:c3:be:2e:e2:a8:70:4b:c7:c2:
         19:9f:f4:ff:02:e8:f5:ee:8c:ba:d7:7c:f8:40:f2:ba:fd:c9:
         e6:27:0e:ab:23:fa:93:0c:5e:8e:ef:13:36:2b:08:8d:55:2b:
         c3:1d:7e:8c:9e:28:b5:aa:80:96:51:0d:fd:ee:59:78:56:63:
         58:01:13:17:e7:6c:d7:a2:b3:04:b4:89:c5:d3:48:80:31:bd:
         56:55:a1:fa:e5:9f:c8:98:ec:aa:ef:9b:90:67:20:b8:90:fc:
         15:56:22:3a:7c:d0:d8:77:8f:4b:e8:3b:72:40:49:53:43:6f:
         25:4d:a2:65:8f:e4:45:5f:bc:9a:36:f0:83:c2:24:96:e9:20:
         20:18:d0:e5:6d:ba:95:1f:b1:07:6b:0c:d2:92:cd:2d:46:2b:
         4b:3a:af:d6:cd:56:38:e2:5e:15:8e:a0:66:aa:41:fc:25:d7:
         4c:3b:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org