Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          09Iqoabv0KgYrWsWYWAZ4n2tcKsTyWhsQlBhawQwglw=
Subject key identifier:   2E:CE:D7:72:EB:0E:B8:D3:88:89:E1:28:AE:A3:38:3C:9D:A9:22:BD
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       6B502440AFE444AABE85765E107480B088F27743
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:04:34 +0000
ROA not before:           Fri 02 Sep 2022 11:59:34 +0000
ROA not after:            Fri 01 Sep 2023 12:04:34 +0000
asID:                     264425
IP address blocks:        2804:1e60:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:24:40:af:e4:44:aa:be:85:76:5e:10:74:80:b0:88:f2:77:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 11:59:34 2022 GMT
            Not After : Sep  1 12:04:34 2023 GMT
        Subject: CN=2ECED772EB0EB8D38889E128AEA3383C9DA922BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:3a:78:d8:5d:99:fb:35:03:63:d3:61:08:
                    95:f7:d2:58:ac:2a:c9:86:61:9a:f8:24:6f:71:a2:
                    8a:97:b2:2d:2f:02:d5:d2:35:ea:55:98:0f:c9:74:
                    cc:a3:e7:9b:c7:c9:ac:c1:6b:d5:37:11:20:29:0b:
                    b2:44:c7:73:d9:1b:fb:ce:99:31:08:18:b6:5d:06:
                    4a:37:ae:58:b0:30:56:78:0a:d7:41:d0:a8:6f:a4:
                    1f:39:75:69:c5:47:08:90:52:ea:fa:9a:95:4f:29:
                    14:7e:ca:66:bd:59:0f:3f:93:08:ac:9a:2c:23:8d:
                    54:80:6d:9e:6a:6c:03:40:58:d5:6b:cb:c8:d9:ed:
                    2d:d8:99:ee:65:49:a3:a1:80:96:ed:50:24:e9:7c:
                    f0:01:cb:f0:d8:ed:14:72:ef:a2:37:a2:84:46:b2:
                    2e:c3:4f:aa:66:f1:5c:0e:43:bd:07:83:00:dc:3b:
                    ec:2a:ef:0a:d8:4d:34:94:f7:ff:0b:26:5b:ce:9a:
                    5e:3b:0a:1b:30:fd:f3:fa:2d:33:ea:05:43:fd:90:
                    c0:7a:04:80:69:68:a6:69:5d:9d:2c:ff:af:ea:a9:
                    06:ef:10:31:b2:b3:1d:b1:b1:30:44:9e:06:e3:73:
                    37:3f:27:4a:bf:d9:49:f0:8a:4d:4c:44:d8:f9:11:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:D7:72:EB:0E:B8:D3:88:89:E1:28:AE:A3:38:3C:9D:A9:22:BD
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:c3:b1:fa:65:cd:92:7f:b9:54:e8:87:5c:7f:c9:99:95:
         26:a8:e8:d0:9f:9b:bc:08:9f:2b:a6:e2:f9:c9:19:92:2c:9d:
         c0:0a:d1:71:ce:c2:7e:a0:2a:e6:e3:50:a8:d6:f3:47:dc:a7:
         3f:f9:03:29:50:9d:26:7b:15:82:f4:ee:5b:61:d7:30:87:74:
         3f:9c:df:71:5d:2b:26:db:8b:95:6a:11:69:22:21:bc:78:ef:
         1e:5e:6a:e1:65:94:72:fe:0b:34:bc:aa:86:e9:dd:2d:66:7c:
         a5:5e:30:61:f0:d4:6c:1f:db:40:be:10:6d:35:22:d0:98:d8:
         38:6b:fb:e0:a5:2a:83:d5:51:75:bb:ba:99:8a:89:7f:7e:af:
         e1:9d:ec:42:3b:7c:7b:48:6b:ea:5c:82:ea:13:56:a0:f0:3f:
         09:4b:12:2b:fb:9b:9c:17:1d:6f:6d:ee:55:6e:7a:71:29:e9:
         d6:19:16:b4:3e:cf:63:2a:af:d6:17:79:e0:4a:10:61:b0:13:
         18:53:85:10:7b:09:54:d1:ca:ab:3b:e4:47:41:54:f8:11:b2:
         78:b8:7f:79:a8:40:36:61:93:fe:03:5d:c1:bf:94:73:ae:da:
         ce:9c:1c:42:ae:84:92:a9:1f:05:40:04:5c:14:bc:0b:e1:ae:
         23:0d:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org