Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/323830343a326439343a3a2f33322d3335203d3e20323635323930.roa
File:                     323830343a326439343a3a2f33322d3335203d3e20323635323930.roa (raw, json)
Hash identifier:          bucSEy5VwgQMC51bNWP/hkYLjZSdPdPKHxr7g8S+qVs=
Subject key identifier:   8A:E3:56:FE:3E:BD:7D:A5:98:55:03:E3:7D:41:4D:C1:BD:09:2A:C4
Certificate issuer:       /CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
Certificate serial:       66EDB5AFFEF431B8B4E14FE66B72BE943D2F1C03
Authority key identifier: 3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/323830343a326439343a3a2f33322d3335203d3e20323635323930.roa
Signing time:             Sat 26 Nov 2022 13:05:29 +0000
ROA not before:           Sat 26 Nov 2022 13:00:29 +0000
ROA not after:            Sat 25 Nov 2023 13:05:29 +0000
asID:                     265290
IP address blocks:        2804:2d94::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ed:b5:af:fe:f4:31:b8:b4:e1:4f:e6:6b:72:be:94:3d:2f:1c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
        Validity
            Not Before: Nov 26 13:00:29 2022 GMT
            Not After : Nov 25 13:05:29 2023 GMT
        Subject: CN=8AE356FE3EBD7DA5985503E37D414DC1BD092AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:dc:d9:66:30:0b:90:8f:83:50:7f:52:5c:
                    5c:d0:1a:c3:3d:38:b7:4c:18:ee:65:50:3d:42:d0:
                    b4:c1:ed:c8:9c:5b:87:a6:4e:cf:37:d7:20:51:66:
                    2f:15:a2:d0:ea:f4:88:f2:8e:b9:8c:63:58:89:09:
                    37:32:22:6e:17:38:61:5f:4d:dd:4c:e5:b0:f4:ad:
                    0b:e0:8a:b3:18:34:63:ae:0e:d7:e1:46:90:b3:86:
                    cc:48:f6:51:19:21:c3:38:d8:bd:34:87:cb:41:0b:
                    ab:5a:d8:56:ba:7f:b6:78:9b:91:67:b0:bd:a3:85:
                    20:94:3e:f4:d4:0e:d1:a5:a6:44:26:df:28:e1:9f:
                    f1:12:9e:d3:5b:1c:12:ca:49:6d:17:8d:13:bb:dd:
                    d8:4b:2e:17:73:b4:09:8b:0a:a0:92:4d:8a:b8:40:
                    3f:ae:83:6c:ce:cc:a5:36:59:8c:e5:83:3f:32:47:
                    9c:2c:94:27:2e:5d:c0:48:e4:e5:44:e3:8b:47:aa:
                    e6:f3:ab:1d:8d:f8:fe:2b:88:5f:e1:25:0c:29:70:
                    14:3d:f5:9e:ac:a2:3a:56:5d:7e:74:3c:1e:fb:77:
                    a8:fd:30:65:a9:02:d2:d3:28:46:2c:35:ac:c4:64:
                    fc:e1:ed:9f:21:93:16:b1:cd:2c:fa:c6:d8:94:cf:
                    b1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E3:56:FE:3E:BD:7D:A5:98:55:03:E3:7D:41:4D:C1:BD:09:2A:C4
            X509v3 Authority Key Identifier:
                keyid:3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/323830343a326439343a3a2f33322d3335203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d94::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:62:9f:32:3e:66:df:6d:ff:36:22:94:01:48:d6:27:a9:
         98:9b:35:67:db:c0:78:0f:12:2f:4b:f5:e1:ab:23:b9:ad:9f:
         be:97:d1:01:3a:6a:03:3d:51:aa:08:9e:b2:2b:99:5c:e7:06:
         54:d2:d1:6f:7e:29:93:08:91:c8:70:97:d5:9d:82:f8:fa:a1:
         75:82:a2:fd:f7:f4:0b:53:b2:70:2a:6f:4a:b8:0d:16:13:71:
         6d:99:17:63:ac:57:83:96:bf:35:07:40:1f:ff:a2:57:44:ed:
         4b:48:f4:b7:39:ac:f6:bd:0d:01:75:27:13:65:5e:78:9e:a6:
         a6:e1:8a:7a:8a:2c:2f:20:a3:53:f8:94:9c:0d:96:4f:25:fc:
         f6:9f:71:c0:ea:13:22:89:92:47:d5:35:9f:7d:2f:6d:14:63:
         ca:fd:ea:8f:54:db:d3:a0:a7:be:e2:1a:51:ea:22:f9:67:ac:
         c3:e0:83:a1:9a:97:91:b7:ad:93:f6:7d:ea:92:45:92:17:bd:
         30:37:c9:ca:1d:65:ac:52:cf:4b:d8:34:d3:41:e6:ea:dc:7a:
         c5:59:ef:ec:ca:fb:ea:d6:07:a5:41:48:80:08:71:8a:5f:ba:
         c3:da:05:40:e2:48:d3:52:9f:4b:31:27:3f:9a:f4:28:8f:56:
         b6:a3:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org