Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/323830343a326563343a3a2f33332d3333203d3e20323635333635.roa
File:                     323830343a326563343a3a2f33332d3333203d3e20323635333635.roa (raw, json)
Hash identifier:          x8zUqrWw8YUI9+6xkF7IN4i8yuNjmJPJ7oeVXABBxko=
Subject key identifier:   BA:3F:B1:31:36:19:44:19:71:10:D8:18:09:02:D8:65:72:AE:AE:AB
Certificate issuer:       /CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
Certificate serial:       0471C39828148E89187A38FE28F42DB636A6D966
Authority key identifier: 3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/323830343a326563343a3a2f33332d3333203d3e20323635333635.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     265365
IP address blocks:        2804:2ec4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:c3:98:28:14:8e:89:18:7a:38:fe:28:f4:2d:b6:36:a6:d9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=BA3FB131361944197110D8180902D86572AEAEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:f4:45:97:b7:a3:ce:fc:69:83:fd:e6:68:
                    38:f0:9e:66:81:7e:32:42:a6:a6:32:a1:8a:d9:3c:
                    ea:a7:e4:ae:ac:0d:b7:fb:c5:34:dc:d8:44:e8:26:
                    41:77:ef:ac:25:da:78:d4:50:33:e0:ea:41:32:48:
                    9e:ff:9d:56:a7:0e:72:0c:3d:32:ab:a9:e8:81:b3:
                    dc:32:ac:67:95:f5:5b:99:ae:8f:08:83:38:ab:0f:
                    3c:4c:94:e2:42:cb:35:c9:3b:80:09:fe:a1:ae:71:
                    9e:d6:7d:bf:e7:c3:47:df:35:93:b2:20:71:5c:ec:
                    81:5a:fb:6d:db:14:62:b8:84:16:98:dc:91:08:f7:
                    ed:56:45:3e:7a:bd:6a:9a:93:1d:da:ca:ef:81:a2:
                    87:7b:7e:10:d4:65:8e:de:7b:d6:4c:87:3b:46:33:
                    5c:7e:99:a0:91:57:bd:1d:a0:3a:14:05:56:d3:a5:
                    db:8b:a3:89:5e:10:58:f3:56:94:39:f7:fa:30:8a:
                    6e:62:64:9e:6f:87:9d:7e:ce:6c:78:34:23:a5:80:
                    1f:fe:57:e0:29:90:6c:55:bc:67:63:29:e3:92:13:
                    bc:90:fe:42:ec:c7:15:17:ea:5e:a5:a0:50:63:f0:
                    a2:b7:81:3f:07:a3:37:b1:17:81:d2:c8:e2:a9:33:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3F:B1:31:36:19:44:19:71:10:D8:18:09:02:D8:65:72:AE:AE:AB
            X509v3 Authority Key Identifier:
                keyid:3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/323830343a326563343a3a2f33332d3333203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec4::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:d3:87:37:9b:71:e3:7e:ee:d9:d5:0b:35:bc:ac:c1:6b:
         45:58:48:d0:ae:ff:92:e8:a0:d2:da:11:48:25:9c:a4:d1:d7:
         ed:12:be:8c:1f:08:ca:f4:8d:81:78:c6:30:29:14:b1:54:25:
         bf:ed:21:aa:64:93:37:1e:1c:05:90:7a:0c:56:c5:54:41:ac:
         8d:2c:38:d0:a3:84:a3:7e:93:ba:7b:1f:3f:75:02:80:81:89:
         a2:8c:3c:f7:96:e6:36:fd:c6:26:2d:8c:c1:f2:ab:f5:f5:fe:
         44:eb:6b:16:e0:ec:96:2c:43:3d:76:e4:b2:57:45:d8:1c:4c:
         12:3e:0b:69:34:f8:89:f8:e3:0a:4f:5d:f6:63:44:44:c7:b1:
         e0:47:e1:71:3e:e0:5d:82:99:42:03:95:87:5d:77:e5:78:9f:
         a4:32:46:08:c3:3a:25:d9:f6:cf:35:ba:34:ca:d1:3b:0b:41:
         96:a4:5d:a8:90:95:cc:ea:a2:34:82:d0:52:68:eb:75:ae:75:
         77:3a:aa:5a:05:57:33:1f:3c:e9:bd:92:0f:d2:0a:2e:a1:2c:
         6f:ee:ce:c6:d1:1f:2c:39:3e:30:17:46:6b:d5:63:c3:85:1a:
         a3:55:92:95:3c:a9:63:1a:76:83:0f:ff:41:82:c1:38:8f:13:
         f8:61:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org