Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          3HS2WK4al06wVFrzxVEUyY3sf4jSOBUBh5gkVVpRHTA=
Subject key identifier:   E7:F9:C4:D0:ED:D3:4D:DB:8C:5A:40:54:C4:33:8A:3E:60:3B:82:5F
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       0EAFD2BDC6C5586EA2BA45810DF985CF7F436C90
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:05:25 +0000
ROA not before:           Fri 02 Sep 2022 12:00:25 +0000
ROA not after:            Fri 01 Sep 2023 12:05:25 +0000
asID:                     264425
IP address blocks:        2804:1e60:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:af:d2:bd:c6:c5:58:6e:a2:ba:45:81:0d:f9:85:cf:7f:43:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 12:00:25 2022 GMT
            Not After : Sep  1 12:05:25 2023 GMT
        Subject: CN=E7F9C4D0EDD34DDB8C5A4054C4338A3E603B825F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:a7:af:36:52:d2:de:97:66:aa:42:7c:3d:
                    c0:a0:62:df:89:ad:e3:af:6e:b8:c2:b6:c6:3c:b2:
                    1c:17:66:2c:82:60:09:69:0c:dc:d6:24:d3:69:4b:
                    8b:a0:96:9a:d8:bd:97:56:de:ad:b1:cc:00:29:38:
                    87:b1:87:b0:7a:a4:30:19:c6:ce:85:92:84:14:d1:
                    2d:c8:60:4a:e4:82:69:9f:47:54:da:9d:7c:0e:42:
                    3c:57:d3:18:04:10:06:3b:af:88:c7:5d:9f:9e:7e:
                    46:f3:a3:cb:ce:e0:cc:cc:cf:b0:56:24:fe:f3:be:
                    ed:0c:55:e3:ef:c5:94:ce:b0:1b:49:a7:a6:ac:d6:
                    35:83:bc:aa:bc:f6:c0:18:44:c0:64:2a:16:9b:ad:
                    ac:0c:3e:e7:c8:0d:e8:18:d5:3d:cf:99:72:13:19:
                    74:f6:90:2e:52:1d:e8:ee:d9:11:30:d7:9f:78:db:
                    58:b6:6b:c3:d1:fa:6a:5c:ea:05:b4:e0:2e:8f:6e:
                    47:d6:1f:c1:e9:4f:4b:60:98:55:ff:31:bc:35:86:
                    23:24:f5:a0:05:b5:3a:9e:2b:de:f1:fb:ba:b0:27:
                    6f:7e:58:43:fb:12:de:51:21:5c:f7:f5:a6:13:b5:
                    1d:4e:b3:11:38:d6:4e:7d:bb:d5:51:68:45:b0:10:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F9:C4:D0:ED:D3:4D:DB:8C:5A:40:54:C4:33:8A:3E:60:3B:82:5F
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:70:29:a8:c8:7e:c8:2e:a0:7c:33:34:30:aa:19:2c:48:
         d1:e3:92:ee:f2:90:3c:1a:17:57:60:da:19:0f:3b:65:6d:a9:
         52:a2:d0:71:dd:ca:94:cc:20:4b:17:8a:c3:55:fd:b4:60:a4:
         10:7f:46:d3:2d:49:34:9f:56:22:39:ab:85:cb:76:22:90:03:
         43:33:81:8b:23:26:8d:2a:c9:4d:17:ef:86:63:6f:11:cc:65:
         f0:21:db:a4:23:12:66:6e:cd:07:d4:75:8f:14:fa:fe:e7:66:
         66:71:32:91:57:b0:2b:05:25:fa:8b:50:62:a2:6e:53:26:5a:
         c6:87:48:1f:ed:96:04:26:a8:fa:d3:97:5c:bc:f2:db:2b:bc:
         85:7e:dd:bb:c5:45:24:61:19:2a:5e:c4:43:9c:12:77:05:22:
         92:e8:fa:88:87:e4:26:f8:e0:77:67:f3:ac:a2:dc:e4:1e:95:
         6c:50:be:d6:43:f1:63:38:4c:e1:df:37:9f:f8:99:88:eb:9e:
         ef:9d:a8:00:51:06:d5:46:ad:78:9f:50:2b:68:11:e7:a0:21:
         3a:de:a1:ff:4d:b5:02:b2:0f:2c:86:39:dd:2b:ce:eb:72:25:
         04:1f:c8:fb:c2:3a:9a:a2:cc:7d:f4:1b:4c:1c:56:46:b1:d6:
         a4:98:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org