Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          6a/JtjELRFteDl6AY5LX6F7bf7dh9pvJXOsy41C10mQ=
Subject key identifier:   B2:69:E6:38:AF:94:50:E8:BF:94:11:B5:86:7C:6C:1A:76:3F:43:6B
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       07851A8C7D2997B82CC6F1FBFCE08242C3B3D457
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:04:49 +0000
ROA not before:           Fri 02 Sep 2022 11:59:49 +0000
ROA not after:            Fri 01 Sep 2023 12:04:49 +0000
asID:                     264425
IP address blocks:        2804:1e60:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:85:1a:8c:7d:29:97:b8:2c:c6:f1:fb:fc:e0:82:42:c3:b3:d4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 11:59:49 2022 GMT
            Not After : Sep  1 12:04:49 2023 GMT
        Subject: CN=B269E638AF9450E8BF9411B5867C6C1A763F436B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:0d:be:64:a4:4f:e0:69:a2:98:9a:65:34:
                    f3:1a:af:9b:fc:4f:f6:cc:fa:ff:d8:e9:0e:45:bf:
                    44:bc:7c:88:92:86:16:66:71:e3:74:8e:45:ec:8b:
                    bf:e2:a3:98:43:9f:84:fc:06:1a:74:e2:a6:db:37:
                    3f:f2:23:82:35:8f:90:2e:be:fa:9b:16:1d:79:d0:
                    be:52:86:05:b3:8e:00:e4:9f:8b:83:08:d6:34:95:
                    e6:59:5c:ff:74:0a:9c:b9:26:08:99:e2:d4:8a:6d:
                    13:3a:9f:9d:10:96:b1:3d:df:2a:5b:cc:06:78:73:
                    5d:73:1c:3b:08:4e:b0:22:8f:7d:f0:d5:e3:7e:a3:
                    86:11:35:60:75:aa:2f:8c:67:b2:c4:b6:59:7b:cf:
                    87:92:35:8f:a4:a7:05:49:c0:0b:9e:d8:cf:70:aa:
                    a8:3e:8d:84:a8:4b:9e:ed:92:f8:73:14:fd:fc:28:
                    76:3d:17:98:59:9e:f0:da:62:18:7b:aa:c9:56:ab:
                    2a:0d:f5:1a:02:ed:88:ee:a6:20:8b:85:fe:06:64:
                    e5:f6:02:15:56:7e:d6:62:ff:ab:d4:ba:72:b5:09:
                    b5:9c:6c:77:0f:e2:15:91:c4:3f:06:76:6d:68:88:
                    82:6d:88:24:89:87:74:0a:33:82:78:09:f7:ee:2d:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:E6:38:AF:94:50:E8:BF:94:11:B5:86:7C:6C:1A:76:3F:43:6B
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:08:34:04:26:30:14:4e:14:de:5d:e6:0d:06:ed:5a:f3:81:
         3b:b3:13:81:c7:4e:bb:97:8b:ee:e4:c7:89:34:e6:15:ef:57:
         9f:0e:9b:ae:b1:41:3a:91:c1:6e:d7:e3:61:15:85:f6:59:47:
         5e:b3:bc:32:66:80:5a:2b:01:ec:28:9d:b5:68:c3:cd:b0:25:
         bb:37:c8:0f:da:c5:74:d1:c5:08:be:ac:40:f1:eb:be:fa:af:
         71:8f:a5:ec:9d:a3:34:33:89:b4:9e:16:12:7d:0a:b7:8c:29:
         b1:ed:ce:96:d0:05:a4:bb:d9:78:d6:8e:cb:b4:43:21:08:45:
         a4:f0:50:fd:dc:a0:48:a6:78:fd:88:62:d0:17:36:70:71:50:
         16:d5:ed:7a:07:a6:42:09:c8:94:fd:be:ba:1f:3d:cb:33:70:
         de:9c:f9:12:af:c8:9c:f1:01:af:43:b5:88:b2:e0:44:bc:98:
         09:8f:b9:ba:70:b0:9c:63:c1:1c:d8:8d:dd:c0:d1:7d:48:a8:
         d1:23:3d:52:74:ab:37:d0:61:8b:17:ef:65:7e:3c:51:2d:39:
         a6:0d:24:8f:c6:84:64:6d:e1:60:ae:4c:ab:9b:77:15:47:c6:
         ff:44:a1:fb:53:0e:e5:62:b2:df:81:6d:14:61:cc:55:40:64:
         d9:48:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org