Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          2LAN1wn2Lm48RGWkaSUXjjDOmBFYotFgEzJf5e8YkjU=
Subject key identifier:   82:DE:DA:A0:BC:98:F1:F7:C5:0B:34:67:4B:18:85:15:CD:39:23:CC
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       30C118283723F546CE71F3EE601756E47C478B05
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:04:11 +0000
ROA not before:           Fri 02 Sep 2022 11:59:11 +0000
ROA not after:            Fri 01 Sep 2023 12:04:11 +0000
asID:                     264425
IP address blocks:        2804:1e60::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c1:18:28:37:23:f5:46:ce:71:f3:ee:60:17:56:e4:7c:47:8b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 11:59:11 2022 GMT
            Not After : Sep  1 12:04:11 2023 GMT
        Subject: CN=82DEDAA0BC98F1F7C50B34674B188515CD3923CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:53:18:28:92:da:04:69:c7:1d:e6:b2:ab:
                    d2:33:a6:c3:e8:3f:41:98:c6:a4:45:7b:02:6d:fd:
                    07:fe:24:83:b7:cf:9e:0c:38:39:1f:86:ae:31:c0:
                    6e:f3:08:31:d7:29:5e:26:cd:18:ed:74:68:e4:dc:
                    bc:28:34:dc:7e:97:01:6d:19:79:da:2a:d9:78:7e:
                    d0:1d:8e:e8:f0:dc:d5:cd:64:9b:d6:95:91:1e:58:
                    d6:1b:ff:71:9e:b2:ad:5f:64:c3:b9:6f:19:02:a3:
                    a5:5f:72:07:ed:0d:bc:f9:63:36:ec:bb:39:68:7c:
                    8a:89:bf:fc:1a:61:2c:56:dc:20:2b:fb:46:fa:a3:
                    6c:81:f5:dc:f5:74:22:9e:e7:d5:17:14:13:78:ac:
                    d2:fb:1a:cd:c5:ba:a1:b1:8b:86:ee:41:73:db:12:
                    40:f0:e8:2a:56:43:b9:78:f3:53:f9:38:c5:71:b5:
                    60:cc:a1:0e:46:59:87:04:59:8f:1d:db:36:5d:e0:
                    03:87:0b:35:0d:c7:07:78:79:2b:65:33:90:33:1c:
                    f7:d0:54:c0:8a:63:bf:ff:6d:5b:47:10:d3:35:a2:
                    c5:06:1a:92:b0:24:02:45:e7:02:7f:4d:3b:6c:48:
                    2d:a3:7a:14:72:d2:19:d6:94:e5:1c:9e:96:ce:2d:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:DA:A0:BC:98:F1:F7:C5:0B:34:67:4B:18:85:15:CD:39:23:CC
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:da:fa:e6:1c:9b:03:7b:10:2b:47:e1:0a:f6:78:21:58:f5:
         c4:d0:c0:18:03:cd:2a:09:eb:c5:6f:b3:a9:b6:f7:ce:05:af:
         cf:e4:4b:10:b8:ed:f5:d5:e8:5f:99:70:8c:2d:53:23:a4:fc:
         80:94:c1:f8:df:75:95:82:3b:9e:4c:20:cc:41:a0:6c:d8:88:
         4d:bd:bf:17:30:94:b6:83:73:0f:48:68:75:ae:e7:32:15:78:
         5e:8b:fe:33:80:ac:77:f1:33:9b:64:05:c9:91:ba:ad:30:ea:
         f5:86:07:e0:f6:12:8b:75:fd:40:4c:2c:2e:23:85:67:45:09:
         b7:fa:79:8c:4d:85:de:82:f3:b6:5b:b1:fc:7a:2f:d3:97:bd:
         df:14:d6:bd:e5:21:b2:93:28:d4:01:57:11:31:27:83:58:d0:
         38:13:e8:c3:0b:3f:f3:e3:82:bf:f9:24:6e:0e:6d:43:f5:a5:
         32:72:fb:d4:c2:44:e7:ee:cd:08:76:eb:24:46:55:84:f9:3f:
         8e:68:9e:fa:5b:94:7a:4a:b0:1e:c6:78:5d:f3:dd:ec:50:51:
         a1:a8:48:49:df:af:76:4a:77:7c:5f:e7:91:e7:f4:9d:25:36:
         9e:67:ac:c5:e5:42:ff:f5:ab:6d:4f:84:25:cd:b7:9a:f5:e0:
         07:4b:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org