Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323939353236.roa
File:                     323830343a363566633a3a2f33322d313238203d3e20323939353236.roa (raw, json)
Hash identifier:          g10uClWBCz7BfNMI/0Idhcp5g+45Ri6FVlAOlHb1Y0c=
Subject key identifier:   B8:A1:2C:0E:F4:2E:A8:69:DC:50:D5:B5:18:8A:CE:63:A6:36:E8:8B
Certificate issuer:       /CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
Certificate serial:       0D42A4F2D38237CE9602ABF503F11178CA8353AB
Authority key identifier: 3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323939353236.roa
Signing time:             Wed 31 Jan 2024 16:06:03 +0000
ROA not before:           Wed 31 Jan 2024 16:01:03 +0000
ROA not after:            Wed 29 Jan 2025 16:06:03 +0000
asID:                     299526
IP address blocks:        2804:65fc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:42:a4:f2:d3:82:37:ce:96:02:ab:f5:03:f1:11:78:ca:83:53:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
        Validity
            Not Before: Jan 31 16:01:03 2024 GMT
            Not After : Jan 29 16:06:03 2025 GMT
        Subject: CN=B8A12C0EF42EA869DC50D5B5188ACE63A636E88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:08:5c:ed:1d:01:65:87:05:b5:3d:50:52:
                    c5:51:6c:d3:27:3f:2d:52:2d:a4:32:71:67:17:01:
                    15:6c:d7:51:53:40:06:aa:98:8e:26:79:b2:d1:6c:
                    8d:fd:9b:93:16:97:e3:6e:e6:55:d8:34:37:07:b2:
                    ba:19:99:09:f6:53:91:c8:c2:3e:b4:d0:7a:ff:cc:
                    11:74:f7:56:f8:d3:f0:ec:f5:bb:59:95:22:30:70:
                    83:80:c3:07:87:ab:d3:8a:66:d2:86:11:1c:b0:2b:
                    37:2b:2f:a5:94:fa:50:8b:01:0f:2f:1a:d2:fb:6b:
                    a0:68:4c:b4:11:32:66:0c:0f:23:fe:e2:43:7c:3f:
                    a5:ea:6c:4e:d3:fd:4b:36:70:59:2b:e2:12:61:2b:
                    5d:d4:af:f9:29:74:fe:b6:ac:8f:da:ec:81:22:d9:
                    0e:da:fd:ae:31:3b:a0:e9:1c:50:2a:cc:13:da:d3:
                    2e:c5:f1:fc:5b:03:ac:7f:27:32:f4:f5:90:55:01:
                    98:2e:50:6c:2f:1a:cb:b0:fd:e1:87:16:98:2f:98:
                    b5:4c:70:6b:3c:0c:07:6f:0b:88:da:d6:e4:b0:e6:
                    53:32:7e:60:55:f0:3e:69:43:c1:e1:50:dd:00:63:
                    7d:6f:86:60:fb:ea:59:f5:38:41:82:ed:5d:dc:58:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:2C:0E:F4:2E:A8:69:DC:50:D5:B5:18:8A:CE:63:A6:36:E8:8B
            X509v3 Authority Key Identifier:
                keyid:3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323939353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:29:eb:31:d7:c7:3e:2c:eb:7c:d0:be:fe:45:57:24:8e:
         b7:0d:4c:cb:34:7a:26:6a:04:a5:f5:1e:9a:bf:87:41:ca:e9:
         bf:f2:16:0f:3b:76:98:e6:51:e4:bf:86:71:83:99:c6:c5:e5:
         4b:55:98:75:ec:f9:e1:b9:fe:d9:25:4e:0e:b7:40:98:12:4f:
         81:70:99:0d:a9:74:47:83:48:ca:19:fc:97:cd:c9:05:59:28:
         d8:8b:0e:cc:45:c4:1c:36:c7:73:d4:3b:1f:37:2b:bc:b5:70:
         fd:a7:c3:02:1f:ce:74:a8:de:f1:1f:4a:52:7c:2f:79:6c:4e:
         b1:08:8c:d4:30:13:01:4a:77:8b:63:62:4e:c5:4d:2a:b7:0b:
         1b:0d:3e:a6:42:51:5c:11:9f:71:06:80:db:19:d1:3a:78:3f:
         8a:9b:1a:44:79:c1:a7:5a:cb:13:1c:2b:8b:bf:21:9d:a2:ca:
         80:bb:98:3a:fd:ad:ab:bd:1d:e4:4b:50:56:15:94:1d:02:7e:
         3d:73:4d:a9:46:b2:78:66:d8:7b:8f:40:66:76:ea:b1:19:1d:
         6c:98:0d:c8:32:24:5a:9f:b6:4f:68:1d:7d:1a:15:ef:71:85:
         33:de:d3:a6:29:37:15:0f:56:cf:94:c0:bc:60:6b:3c:12:6c:
         2d:92:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org