Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Lemjiy6nQPVauxEjS3Z5xQMfjRrGVpeHw5TK2QXiZR/0/323830343a386133633a3a2f33332d3333203d3e20323733363536.roa
File:                     323830343a386133633a3a2f33332d3333203d3e20323733363536.roa (raw, json)
Hash identifier:          3CHbRT5UIqu6FQGRnhtDEJrgEaQ3jMTFPd3WJTE9R34=
Subject key identifier:   3E:FA:EC:10:C6:F8:28:B4:92:6C:1D:0C:C9:8E:15:73:0C:CC:3F:95
Certificate issuer:       /CN=E02749665E163C2AD4CE14398922120810D9AC7B
Certificate serial:       11F5117BCE43C37A49968C8C6B5EB8F492C48E64
Authority key identifier: E0:27:49:66:5E:16:3C:2A:D4:CE:14:39:89:22:12:08:10:D9:AC:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E02749665E163C2AD4CE14398922120810D9AC7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Lemjiy6nQPVauxEjS3Z5xQMfjRrGVpeHw5TK2QXiZR/0/323830343a386133633a3a2f33332d3333203d3e20323733363536.roa
Signing time:             Wed 05 Apr 2023 15:49:06 +0000
ROA not before:           Wed 05 Apr 2023 15:44:06 +0000
ROA not after:            Wed 03 Apr 2024 15:49:06 +0000
asID:                     273656
IP address blocks:        2804:8a3c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f5:11:7b:ce:43:c3:7a:49:96:8c:8c:6b:5e:b8:f4:92:c4:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02749665E163C2AD4CE14398922120810D9AC7B
        Validity
            Not Before: Apr  5 15:44:06 2023 GMT
            Not After : Apr  3 15:49:06 2024 GMT
        Subject: CN=3EFAEC10C6F828B4926C1D0CC98E15730CCC3F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:40:6b:67:28:e6:82:80:87:7d:b1:75:0d:
                    3e:ec:92:26:4e:e3:b4:b0:d1:06:ff:19:9d:82:75:
                    00:61:8c:43:ab:22:66:2f:e0:11:e5:ff:ad:84:3d:
                    34:9d:4f:c5:d9:9c:1a:3b:bc:32:cb:f6:7c:ff:e8:
                    76:d4:e8:91:55:e0:c9:a9:d8:38:26:58:92:52:1b:
                    7e:4d:e3:f5:d6:ee:e9:61:4c:5e:50:cf:e0:f2:b7:
                    c9:40:50:c8:03:7e:16:df:8b:6c:0f:af:b8:90:85:
                    b1:e5:bc:ab:4a:7a:3d:db:be:b6:3e:60:f6:de:7a:
                    f3:7a:0b:93:2a:0e:b8:de:24:d9:16:d8:c8:26:3d:
                    99:92:21:32:a1:6a:d6:b6:59:15:d2:c6:9f:c4:5d:
                    31:5b:f2:29:e3:f3:07:b6:49:b6:b4:ef:74:fb:e4:
                    63:12:55:d8:91:2f:d9:06:e5:ec:47:ac:e2:14:b7:
                    7c:df:74:eb:24:9b:ae:b5:92:1a:2a:8d:fa:2a:e2:
                    5f:6a:5e:3c:d9:b5:66:94:7d:92:db:29:5b:5a:ab:
                    17:4e:28:aa:c5:c4:1d:49:ff:22:24:80:4e:54:ce:
                    22:7d:f7:a0:4e:c3:c8:cb:81:07:52:b8:b0:74:34:
                    02:35:51:5a:89:99:71:0d:90:0c:cc:95:91:12:1c:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FA:EC:10:C6:F8:28:B4:92:6C:1D:0C:C9:8E:15:73:0C:CC:3F:95
            X509v3 Authority Key Identifier:
                keyid:E0:27:49:66:5E:16:3C:2A:D4:CE:14:39:89:22:12:08:10:D9:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Lemjiy6nQPVauxEjS3Z5xQMfjRrGVpeHw5TK2QXiZR/0/E02749665E163C2AD4CE14398922120810D9AC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E02749665E163C2AD4CE14398922120810D9AC7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lemjiy6nQPVauxEjS3Z5xQMfjRrGVpeHw5TK2QXiZR/0/323830343a386133633a3a2f33332d3333203d3e20323733363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:0e:e8:a6:35:06:c7:21:85:57:99:5d:2b:da:f7:09:aa:
         e1:80:83:46:ec:b2:a7:d1:59:83:7f:a1:9c:f4:80:5e:88:9b:
         03:ac:50:ee:06:9e:77:40:fd:e7:2f:f7:93:45:ce:83:fb:99:
         bf:fe:75:ba:33:0f:5e:49:76:6f:d7:1d:e5:56:cc:57:f4:9e:
         3a:5e:82:c3:48:71:47:8f:27:9c:34:5d:90:89:eb:e4:89:c3:
         06:40:43:c4:c2:11:7c:4c:05:d8:0b:53:9e:3d:77:7f:7d:e5:
         b6:78:f6:ac:4a:81:89:9d:94:a5:dd:b8:b8:9e:c8:4c:42:c3:
         30:81:48:55:c8:0d:ed:e8:37:19:33:03:64:a3:68:9f:a8:f0:
         44:af:4c:5c:66:c1:dc:13:0b:26:4b:63:ea:99:4c:28:fd:27:
         52:27:90:7d:70:a9:66:2b:29:7d:b8:b8:94:d4:ad:8a:54:68:
         2f:e9:b4:8f:e9:69:b4:7b:c2:ee:d4:37:b0:3b:97:5f:08:59:
         27:49:de:51:6f:45:69:39:46:3d:f7:03:15:68:e7:1c:79:81:
         1a:53:62:a4:e4:d9:9a:d2:28:2f:0e:5c:12:7f:d0:41:e3:cb:
         78:68:0d:a2:b5:98:e2:9f:0d:69:97:e3:27:5d:16:a8:d1:ec:
         3f:c4:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org