Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          QDPJ8P+5A5ihHQJV6S2KGqQ9Cr4kaZ1Bj0U+/mpygRw=
Subject key identifier:   E5:54:A4:BB:65:75:2E:13:84:18:34:49:09:61:B4:80:3F:C0:32:49
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       58635DA744BCCBB639ABC008771F52626F852CA5
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:56 +0000
ROA not before:           Sun 07 Apr 2024 03:16:56 +0000
ROA not after:            Sun 06 Apr 2025 03:21:56 +0000
asID:                     269514
IP address blocks:        2804:65c8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:63:5d:a7:44:bc:cb:b6:39:ab:c0:08:77:1f:52:62:6f:85:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:56 2024 GMT
            Not After : Apr  6 03:21:56 2025 GMT
        Subject: CN=E554A4BB65752E13841834490961B4803FC03249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:83:5a:db:e6:6f:7e:91:99:42:2a:fb:4d:
                    2e:44:1a:0d:d8:52:58:67:a2:1f:82:d9:4b:bd:b6:
                    a7:c1:ee:c4:68:ad:00:1b:0f:df:14:a2:1a:fd:93:
                    d3:72:71:2c:5f:d2:05:f5:7d:59:ee:3a:ac:e4:41:
                    12:4c:be:b4:aa:a7:52:da:21:7d:a3:3c:28:4e:80:
                    7d:27:a3:1f:f7:49:55:80:f7:c5:89:9a:0b:28:4b:
                    6c:eb:4e:0f:1d:cc:36:e0:65:3d:9d:fb:29:e5:a3:
                    12:e4:2f:66:78:ef:87:09:8d:04:ed:a0:53:5b:1e:
                    62:23:77:91:a8:c7:b9:d1:ab:32:66:a7:62:29:59:
                    b4:a5:2c:11:b8:14:0e:d2:95:95:a7:e8:5f:c0:01:
                    c3:3e:21:b0:74:1b:8c:3a:48:61:3e:36:a0:30:a6:
                    2b:d5:14:b6:8d:c7:0a:ae:4f:c4:7d:14:5f:33:53:
                    8f:1c:61:52:8a:95:2b:eb:68:65:67:85:d2:20:82:
                    09:97:21:c7:48:5c:a9:53:d0:9d:ec:7e:a4:62:e8:
                    cb:41:9a:13:d9:d8:7e:fb:1e:be:8a:37:1f:e5:d8:
                    3f:49:32:9d:64:0a:99:63:f1:04:3d:6a:ab:69:9a:
                    82:57:14:32:c3:f0:11:d0:ad:fa:40:23:bb:c4:a7:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:54:A4:BB:65:75:2E:13:84:18:34:49:09:61:B4:80:3F:C0:32:49
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:03:ee:66:23:0a:4d:6e:13:9a:02:74:5f:7a:b6:a6:42:
         b6:a2:b1:a5:8e:99:14:14:94:48:c2:c1:ae:1f:d2:a2:da:6b:
         46:3c:47:8d:d9:5e:ed:5a:52:8b:4e:70:a1:0f:d7:c6:13:fa:
         ed:d9:c3:71:ac:0b:1b:0d:c9:35:ab:71:e9:a9:6f:12:fa:ad:
         ec:30:46:87:4f:34:34:79:4f:32:6d:40:8c:a0:a7:ec:a1:37:
         08:ed:82:88:62:c3:ce:85:b3:a6:d1:63:19:bd:4e:fa:0a:6b:
         9a:8e:32:d3:34:eb:a0:93:91:eb:9b:33:74:91:9f:d6:a2:48:
         4d:61:08:2f:ac:0b:05:78:b5:5e:76:89:b4:ad:05:b0:42:f3:
         85:e4:2a:16:8f:55:d0:1d:56:69:df:60:9a:b9:12:bc:fb:fb:
         9d:b1:6f:51:64:9f:af:99:6d:61:76:10:7a:73:b7:26:79:ba:
         2b:5e:a7:f2:cc:af:fb:0a:9e:b1:61:f1:a3:64:ad:e2:f0:c6:
         96:a1:78:a2:32:45:43:cf:a6:8c:6f:75:9d:bb:63:30:f8:a6:
         13:66:17:9c:95:0b:7b:60:7e:6b:37:22:80:c2:85:83:02:1a:
         c1:88:01:fe:3e:73:5e:aa:05:99:d4:15:ee:28:bc:85:57:06:
         2b:c7:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org