Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          X4YNhe/W7NUHBVIO8+087PWm05rVNeAdVZO27iff4wg=
Subject key identifier:   79:A6:CC:34:D5:D2:C4:B2:0F:C2:78:24:D3:BF:76:AD:E9:10:7F:05
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       1CAFFFCDFF9A3E78A1D293CA520096C50391E31F
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:06:03 +0000
ROA not before:           Fri 02 Sep 2022 12:01:03 +0000
ROA not after:            Fri 01 Sep 2023 12:06:03 +0000
asID:                     264425
IP address blocks:        2804:1e60:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:af:ff:cd:ff:9a:3e:78:a1:d2:93:ca:52:00:96:c5:03:91:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 12:01:03 2022 GMT
            Not After : Sep  1 12:06:03 2023 GMT
        Subject: CN=79A6CC34D5D2C4B20FC27824D3BF76ADE9107F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f7:7d:6d:0c:6e:57:c1:5b:d4:a8:c3:8f:1c:
                    45:10:46:c8:2e:14:24:bf:da:29:de:5e:80:9d:cc:
                    60:c2:44:89:97:5c:1a:55:9e:34:85:1e:4f:64:2e:
                    2e:63:51:3d:50:67:2a:e3:eb:9a:0c:2c:1e:c0:dc:
                    d5:f7:e2:d3:4f:7d:10:04:b7:bb:d1:64:50:0c:4f:
                    9b:de:93:86:92:eb:0d:33:f5:55:a8:96:91:82:3b:
                    ff:6f:a1:70:37:7f:97:4a:cf:9b:16:25:e3:68:4e:
                    a6:39:23:b5:9a:57:72:8e:c7:ce:f6:c1:d0:21:c7:
                    d8:59:8d:ef:1b:e2:79:a4:f5:ac:7b:43:62:cf:e5:
                    3c:08:1e:e2:83:9a:ca:ad:69:b4:16:be:98:a8:2e:
                    85:d2:25:64:04:eb:1a:26:bd:0a:0e:36:71:23:39:
                    bc:98:02:85:a4:b0:a7:49:b8:e1:04:3f:58:07:3a:
                    c3:97:62:f7:e6:5e:3c:ba:de:a3:bf:91:27:d0:24:
                    db:16:05:24:68:da:cc:64:ae:5e:1e:e4:e8:f2:56:
                    2b:f7:96:bf:4c:21:f1:2d:35:4a:3a:fc:c0:6f:7d:
                    33:ed:25:f2:f7:c4:17:2e:aa:85:2c:58:a5:15:3c:
                    4b:85:4f:00:3b:86:fd:bf:c1:fb:3c:6f:23:42:ac:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:CC:34:D5:D2:C4:B2:0F:C2:78:24:D3:BF:76:AD:E9:10:7F:05
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:b0:2d:3a:2a:e6:71:db:7f:74:bc:d7:5c:1c:9a:f6:08:22:
         67:d8:44:47:f4:94:70:11:d2:cf:3e:37:d3:03:08:74:e5:44:
         82:7c:d8:08:93:48:54:ca:22:3e:0e:09:33:34:f2:f5:35:64:
         6e:93:11:4e:03:00:38:48:77:ef:f2:68:e7:b0:f5:c4:61:cc:
         ce:b3:1f:09:43:d3:24:40:77:10:6c:0b:73:70:2c:73:2d:cb:
         34:b3:25:45:44:6f:6b:57:52:fa:1d:a3:7e:c6:8a:fd:4d:d3:
         e9:ce:b2:d1:44:9b:75:a7:7a:67:18:10:4e:d8:75:9b:da:04:
         44:6b:95:ee:b5:bc:81:04:31:1e:e5:f9:c2:e4:b9:96:20:32:
         70:55:7b:d9:08:c6:91:c0:96:40:c5:25:b3:4b:fe:36:c1:4a:
         4e:14:21:dd:05:c0:e0:16:c1:93:77:3d:13:f6:0f:17:a4:d6:
         5d:81:ed:ef:ef:71:3a:fa:da:fc:33:94:a6:24:27:64:f8:8e:
         f1:16:51:a2:38:87:55:84:7f:5a:da:43:c3:d3:da:3f:ff:f0:
         0b:4c:0e:b1:b5:8b:9e:8c:cf:d6:92:8b:84:c9:c3:9c:53:07:
         ab:64:65:b7:8e:78:8a:8c:c8:3c:62:07:a2:36:ad:2f:de:5d:
         23:7f:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org