Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          9zi2RbIL6SyzbeKSXsqCrnt1zdUhJ4x/Q+Tm/3eikcY=
Subject key identifier:   6F:BF:C9:37:FB:CC:75:A0:ED:7B:7E:77:97:54:08:9B:62:A0:F9:EC
Certificate issuer:       /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial:       42FEA7FE0CCF4C40CF8863E334F25FCF4ECCFD0C
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:12:26 +0000
ROA not before:           Thu 03 Aug 2023 13:07:26 +0000
ROA not after:            Thu 01 Aug 2024 13:12:26 +0000
asID:                     262617
IP address blocks:        2804:3d74:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fe:a7:fe:0c:cf:4c:40:cf:88:63:e3:34:f2:5f:cf:4e:cc:fd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Validity
            Not Before: Aug  3 13:07:26 2023 GMT
            Not After : Aug  1 13:12:26 2024 GMT
        Subject: CN=6FBFC937FBCC75A0ED7B7E779754089B62A0F9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:6b:3a:1b:d6:52:ed:11:92:e2:64:91:b4:
                    2a:2f:35:ba:ef:42:55:63:3d:a4:24:16:9d:6e:d9:
                    2d:34:7e:ec:3a:80:a1:5e:39:79:97:8a:29:0a:35:
                    df:20:7f:16:e6:3c:a1:52:e0:a1:3c:f4:3d:16:96:
                    79:4f:22:f3:9b:a5:f1:f2:bd:82:8e:21:0a:70:0a:
                    4f:ba:58:17:80:cb:5a:a4:1b:d0:a0:0c:be:b8:f0:
                    5a:f8:ed:2b:04:0d:54:b1:6f:d4:59:f7:39:b2:72:
                    ef:38:5e:c3:74:d6:9d:d8:19:59:a0:86:53:31:91:
                    3a:c2:29:34:31:b2:60:f5:b1:79:5c:80:93:31:6d:
                    8f:bf:69:5a:19:0e:ec:03:3d:2c:ee:4f:58:e7:a2:
                    fe:45:75:3d:af:df:07:2b:10:f9:56:a8:ac:3c:57:
                    82:8b:31:ef:a2:f1:bc:1a:66:5f:9f:1b:bf:86:a5:
                    ab:c1:d1:a1:ae:1f:63:dd:75:df:5a:1a:04:90:3b:
                    18:95:93:0b:eb:3d:8b:17:e5:55:e8:d2:08:54:9b:
                    95:97:51:87:4f:c7:f5:d0:21:3e:9b:ef:7e:41:c4:
                    db:71:b7:66:5f:e6:81:c8:09:68:1b:13:3c:3e:6a:
                    7d:05:1d:39:d3:d9:0d:c2:75:6b:9f:bd:9e:00:69:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:C9:37:FB:CC:75:A0:ED:7B:7E:77:97:54:08:9B:62:A0:F9:EC
            X509v3 Authority Key Identifier:
                keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:b1:bb:05:b3:b7:e7:5f:d1:f2:21:df:e8:37:72:3c:e7:
         6c:8e:3f:15:32:97:ba:17:78:40:f2:cf:f8:0d:ba:33:c3:04:
         8a:47:36:37:50:30:0a:d2:e2:95:44:50:23:5a:e2:81:6a:0f:
         62:d2:fc:51:84:dd:a9:9f:90:2d:89:e3:be:96:c0:fa:62:e6:
         5c:c0:4e:4c:35:51:12:8a:da:8c:a5:bc:ac:b6:35:32:60:dd:
         43:00:c9:41:ab:9b:25:80:7a:ec:46:0f:44:20:1d:32:13:dc:
         34:8c:35:fe:b4:7f:37:13:b6:fe:f2:43:04:61:42:f2:8d:98:
         9f:06:be:34:91:0c:99:c6:e2:77:b9:92:e3:c9:d8:ad:b6:69:
         6f:86:8c:e7:14:a0:24:e2:2e:fb:b4:2e:4f:a4:69:d9:9e:6a:
         b7:5b:1b:d1:40:f2:a7:57:49:47:2e:1f:44:56:84:8b:92:c2:
         6f:32:c6:eb:b3:a8:5e:26:7b:9e:8d:d8:de:02:c7:73:5e:d6:
         89:7f:de:e8:a6:b2:62:7f:24:02:e8:db:39:0f:8b:16:4e:d1:
         4f:e3:cf:fe:4e:a2:65:71:49:de:6f:8e:6f:94:08:1a:14:e1:
         04:2d:a7:29:5c:f0:57:ca:3c:8d:e3:4f:08:22:7b:5f:5c:63:
         e9:b5:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org