Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          86nhHca/KgY7iF1cbvSYTpwotk1f/dHk6oUwe1rlykE=
Subject key identifier:   D0:74:FF:86:2F:8E:7D:24:86:0F:6E:34:D4:C0:2F:7E:B0:8E:25:A5
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       51C130BDA7C1DE39E8A05E6FDCEC2012E34428
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:04:39 +0000
ROA not before:           Fri 02 Sep 2022 11:59:39 +0000
ROA not after:            Fri 01 Sep 2023 12:04:39 +0000
asID:                     264425
IP address blocks:        2804:1e60:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c1:30:bd:a7:c1:de:39:e8:a0:5e:6f:dc:ec:20:12:e3:44:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 11:59:39 2022 GMT
            Not After : Sep  1 12:04:39 2023 GMT
        Subject: CN=D074FF862F8E7D24860F6E34D4C02F7EB08E25A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:4d:59:88:48:d0:45:2f:89:92:d9:f6:2f:
                    da:07:5f:4f:12:95:ec:04:85:f8:b9:3e:45:71:18:
                    91:86:26:d4:07:80:53:81:bc:fd:65:4f:1a:43:fc:
                    98:38:88:55:81:78:0e:d7:50:aa:f5:c9:d4:a7:76:
                    9b:39:3f:2a:5f:97:06:58:65:34:f7:22:6c:fd:d5:
                    2f:af:69:ea:0d:42:0e:39:64:18:f2:fb:89:f2:5d:
                    52:0a:1a:0c:28:20:13:fb:75:9e:c3:ac:e4:47:15:
                    1b:67:98:10:7a:96:94:73:81:71:6e:da:93:b4:4d:
                    9b:9b:b6:94:11:16:54:a3:74:8c:3a:25:bf:30:e6:
                    e2:4c:58:a4:25:70:83:20:1d:14:fe:d6:a6:cc:fe:
                    22:4d:ff:c7:de:7b:7e:ff:4e:3f:ef:4e:22:b8:aa:
                    eb:34:44:75:b0:6b:6d:37:7c:27:d3:0f:0e:16:33:
                    b8:2a:17:fd:f1:fa:83:71:16:be:7b:83:22:90:82:
                    0d:ec:da:e0:5b:b3:85:74:dd:44:e4:f4:f3:88:20:
                    3e:93:4b:18:6c:ff:74:81:69:e5:5e:2d:c7:28:27:
                    0b:f5:27:3d:24:b0:ff:09:42:ca:04:73:63:72:27:
                    e5:c0:84:4e:45:c5:81:5d:67:3e:53:bb:02:90:0c:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:FF:86:2F:8E:7D:24:86:0F:6E:34:D4:C0:2F:7E:B0:8E:25:A5
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:35:e4:62:f1:83:bd:4e:24:4c:ee:2b:0a:fe:e9:8f:31:f1:
         8a:6e:be:ad:e2:66:99:e0:c6:25:84:fe:a4:b7:cc:33:20:b9:
         87:25:ed:d9:4e:44:d1:4b:b2:ac:70:9c:95:71:ef:cc:85:15:
         2e:c6:d5:4a:0f:e3:db:d0:0d:fa:89:7b:56:67:7d:22:a8:c9:
         38:e4:34:18:2c:2a:fe:be:d7:0d:c6:a6:3e:a6:33:f6:26:6f:
         3f:a8:99:a9:76:42:09:b6:be:a8:73:03:6f:9e:02:94:18:c5:
         a1:30:cb:17:e2:fc:53:c9:fb:86:9f:e2:50:5f:9b:b2:34:6d:
         e1:d6:1b:4e:de:7c:1a:53:85:b1:37:86:79:e8:67:86:1d:5e:
         30:53:58:d0:54:51:1e:c5:e4:fc:a7:b2:35:2b:bc:21:2e:ad:
         40:f8:fc:7e:2f:9d:c1:f8:96:15:d2:85:d2:54:cb:94:4f:b4:
         5c:9c:db:5d:11:dc:dd:c6:fb:b7:26:b2:36:7e:1b:0f:77:3c:
         33:91:5d:46:68:d8:64:a5:9c:21:04:29:19:09:61:cf:4c:bf:
         f2:25:f7:81:d3:57:18:4b:41:ff:10:70:ae:51:6b:4a:b6:b9:
         18:45:67:d1:c1:51:df:3d:9c:4d:07:10:26:eb:44:05:5e:1c:
         23:b2:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org