Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          uPJ0dCPfWyHcD8qV4LVT8+ccVrDHmjFVmUybLfM9e2Y=
Subject key identifier:   36:8E:E5:4F:50:88:F1:3A:3A:53:5F:ED:FD:EA:46:0C:E6:1D:B4:C7
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       4E6055745996476A78FDE829E4D6729A94854CC6
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:05:59 +0000
ROA not before:           Fri 02 Sep 2022 12:00:59 +0000
ROA not after:            Fri 01 Sep 2023 12:05:59 +0000
asID:                     264425
IP address blocks:        2804:1e60:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:60:55:74:59:96:47:6a:78:fd:e8:29:e4:d6:72:9a:94:85:4c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 12:00:59 2022 GMT
            Not After : Sep  1 12:05:59 2023 GMT
        Subject: CN=368EE54F5088F13A3A535FEDFDEA460CE61DB4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:dd:e2:f2:2f:a8:53:14:e9:14:47:3d:cd:
                    d9:ff:cd:4d:51:66:99:92:88:97:ff:e4:b7:9f:4e:
                    3f:9f:ee:0e:0c:47:6c:cd:05:32:0b:d1:9f:11:fd:
                    cc:bc:b6:ab:78:6a:f0:83:b2:fb:d9:f8:9a:8a:db:
                    3c:92:ad:7f:ca:9a:be:1d:e4:ad:a6:41:29:d4:71:
                    80:50:08:20:36:74:bd:17:67:ca:05:dd:51:a7:95:
                    41:54:4d:a2:3a:b8:ba:ac:7c:ef:27:26:4f:82:1e:
                    f9:6c:55:ed:54:76:a4:11:9e:7f:2d:45:63:ae:2b:
                    e1:04:ec:b3:7a:68:92:41:d9:56:d2:8e:25:2a:2f:
                    95:1f:13:cd:2a:42:21:a7:c8:60:7c:cd:b0:54:78:
                    73:6c:0d:a9:92:e6:94:d7:03:f6:97:9c:4f:ac:7b:
                    e0:92:5d:14:a4:dc:31:e0:58:c4:31:be:8c:17:1c:
                    8e:f5:66:3e:33:24:1b:01:40:8c:8c:cf:3e:97:27:
                    8f:1c:7b:35:9c:c1:bc:fe:64:eb:f5:d4:ef:a0:54:
                    b1:f9:b3:5f:e1:d7:ae:3a:4c:b1:c7:fe:b7:cb:41:
                    e1:16:db:e3:c4:de:3d:3f:df:01:08:b9:a9:71:db:
                    0a:c4:97:b6:0b:8e:86:01:24:64:58:64:82:e8:e8:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8E:E5:4F:50:88:F1:3A:3A:53:5F:ED:FD:EA:46:0C:E6:1D:B4:C7
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:25:35:38:b2:45:de:75:03:b6:bd:90:69:91:c9:1a:1e:de:
         5e:05:67:19:1f:6d:4f:20:2d:37:d0:19:df:d2:72:6a:2f:c8:
         f6:91:68:18:45:0e:0b:97:c0:a8:4c:33:94:c2:39:33:eb:5a:
         bb:42:65:f3:40:b7:9e:13:25:64:de:fa:61:bf:92:a3:fb:4e:
         d7:9c:77:8d:e6:60:b8:87:a5:ac:c3:9a:98:e9:9e:aa:98:64:
         5a:14:c7:76:d9:42:84:13:e5:a0:e3:b9:ad:df:03:e2:0b:c7:
         05:45:32:14:e8:b5:65:ba:55:f7:6e:00:ab:8a:76:34:57:07:
         22:ec:e7:e8:1b:06:1f:46:36:93:09:6e:60:60:5e:9c:b2:81:
         49:4f:b5:67:d7:5b:7e:84:b4:10:3d:aa:8e:13:9e:60:29:b8:
         74:81:43:45:c1:52:57:f1:a8:60:fd:dd:a8:d1:75:31:04:2a:
         bc:e6:f7:0b:c0:ac:60:d0:2d:cf:6d:53:c5:a1:06:a2:7d:8c:
         eb:ad:e7:c7:ce:78:fb:99:4c:f3:28:f5:e1:ea:3f:7d:29:3d:
         58:a5:0e:bf:43:cc:db:2c:a4:9c:ab:22:5d:b7:79:5a:15:83:
         b3:5f:fe:da:44:a9:a8:cb:c8:e8:39:44:77:a8:70:ce:09:9d:
         cf:08:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org