Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          UOyJKekcGYi+HVgbSoOWSHGuiRaWdC/u7086EZShqyM=
Subject key identifier:   77:FC:8B:20:D2:EF:A6:38:7D:E1:34:F2:0F:50:BB:81:B0:56:CA:84
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       418987136C6091518755EE97A683C671DF33AE11
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:05:55 +0000
ROA not before:           Fri 02 Sep 2022 12:00:55 +0000
ROA not after:            Fri 01 Sep 2023 12:05:55 +0000
asID:                     264425
IP address blocks:        2804:1e60:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:89:87:13:6c:60:91:51:87:55:ee:97:a6:83:c6:71:df:33:ae:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 12:00:55 2022 GMT
            Not After : Sep  1 12:05:55 2023 GMT
        Subject: CN=77FC8B20D2EFA6387DE134F20F50BB81B056CA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:5e:86:88:e9:79:9a:09:e4:ff:d1:53:60:
                    8f:a7:7a:8b:36:3c:49:4e:7c:19:de:e1:91:81:0f:
                    3a:c1:48:98:c4:14:e6:66:02:ce:57:9f:e4:10:8a:
                    88:56:de:e3:a3:50:d2:1c:5c:6e:aa:e7:dc:84:5a:
                    a6:55:a4:19:7f:bd:9c:d9:d9:fe:a0:64:c0:b5:cd:
                    97:b1:17:8d:66:d1:1b:1f:04:11:0e:9c:e3:de:9a:
                    03:42:3c:25:1b:35:b3:e8:a6:a5:ca:2d:3d:84:9e:
                    f7:b1:67:13:28:a1:03:98:8a:43:f7:72:3b:fd:ac:
                    8c:83:0e:83:42:90:f5:a6:76:34:5d:98:3b:d9:31:
                    5b:8b:de:03:ab:ab:a3:7d:39:63:aa:af:85:f4:98:
                    61:b0:4a:46:fb:de:86:a5:52:a5:74:a6:af:0a:89:
                    c8:3f:1d:1b:7e:ca:c5:8a:d7:e4:cb:a8:18:2f:a0:
                    ec:45:fc:d4:a4:13:0b:04:ba:17:eb:e4:7c:cb:f8:
                    38:4e:68:3c:9d:01:f7:86:2d:35:c2:d2:61:27:b9:
                    cf:54:64:d9:dc:e9:ee:2b:ca:f0:24:4b:5a:73:07:
                    43:36:2c:4a:d1:56:ea:57:65:1e:b7:69:a6:7e:b7:
                    56:c1:9b:95:c7:fc:0a:e2:a2:64:de:b8:f5:e8:12:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FC:8B:20:D2:EF:A6:38:7D:E1:34:F2:0F:50:BB:81:B0:56:CA:84
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:69:30:1c:d2:0e:89:f0:0e:fd:f3:ef:f1:8b:a4:29:49:c3:
         b3:ba:b2:5b:18:2f:90:c7:5f:9d:d0:1a:51:9c:df:1c:fb:ce:
         1f:a9:23:09:54:67:63:d9:66:dc:1a:cb:37:fa:d1:8d:04:b1:
         ca:92:d1:3a:65:79:d0:9d:e3:5f:31:98:cc:f5:32:e7:78:04:
         61:13:e9:44:64:72:a5:63:d3:98:77:cf:f2:6c:22:3e:f7:59:
         33:b3:d4:53:35:6a:22:02:e2:2c:4b:8d:a3:11:e3:89:54:2c:
         a9:c5:03:86:c0:c1:03:d2:5c:87:19:01:12:9f:0a:8a:40:c1:
         a2:de:47:00:80:99:fd:e6:1e:dd:ec:e7:04:16:44:ac:97:e4:
         cb:8b:d3:75:d6:e8:96:ab:8e:9b:fa:ce:c9:fa:42:d7:28:76:
         f7:94:6a:1d:50:bd:3b:4b:fa:28:df:6c:6b:44:aa:5d:5c:f8:
         ed:3b:5d:dd:04:53:c2:f3:c1:c3:91:92:83:15:dd:7e:35:78:
         1a:04:74:90:76:c4:69:7a:76:47:e1:42:e3:ae:71:1e:93:e3:
         e6:16:13:c0:e1:97:ba:bd:c9:cd:d6:8d:10:59:b0:1c:23:32:
         81:b5:ca:c3:d0:50:3f:47:2a:fa:a2:41:be:b6:54:9d:44:e0:
         11:eb:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org