Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d3438203d3e20323636313637.roa
File:                     323830343a336262383a3a2f33322d3438203d3e20323636313637.roa (raw, json)
Hash identifier:          xLbtrVc0NO4hqn67ohIjERL43rZkPC81ilPnwjvILjc=
Subject key identifier:   18:EF:C6:41:95:27:49:73:10:CB:90:A5:92:61:64:9C:5C:70:FB:3F
Certificate issuer:       /CN=496CFBE8D7377C9BDF1B1437EA5A63C4033BDCF1
Certificate serial:       0838BBEC9EB61C267C9A9881AB82508B99058DD3
Authority key identifier: 49:6C:FB:E8:D7:37:7C:9B:DF:1B:14:37:EA:5A:63:C4:03:3B:DC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496CFBE8D7377C9BDF1B1437EA5A63C4033BDCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d3438203d3e20323636313637.roa
Signing time:             Fri 29 Mar 2024 17:28:00 +0000
ROA not before:           Fri 29 Mar 2024 17:23:00 +0000
ROA not after:            Fri 28 Mar 2025 17:28:00 +0000
asID:                     266167
IP address blocks:        2804:3bb8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:38:bb:ec:9e:b6:1c:26:7c:9a:98:81:ab:82:50:8b:99:05:8d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496CFBE8D7377C9BDF1B1437EA5A63C4033BDCF1
        Validity
            Not Before: Mar 29 17:23:00 2024 GMT
            Not After : Mar 28 17:28:00 2025 GMT
        Subject: CN=3082010A028201010093F80574CE00CE5382AADD3D72B5D85300835A2D130C11CE76083018406339FC536B9E91DA8BE1AA38AAEC59F265A1926A626E6BFAFE618CE6A2AE801DB04B13E8A3F36FC226423FE500773E1ADDF0F93537CDAA29E26B4F25B650874C04E854F542FA5505291A68E9E8C5481C52E2C685FE2FACA146A1F59E7D028CB1E234DAF1F9F1A0B98286DF92C68B90AF641A7AE1657DCD60E1C6876343AA45A29975221C096503860A3D0D6E51808E202E46B0F738D525B5CA0007DEE6565D4C479029E5A6FAB3248721B53FA6578EB86C51334B7ECCF1D41622734D9BCA23D3FB45C007AF6341E8DB0AFEC3C46AFD025047208A323FB5A255C7BC93FA9F0C46F831A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:05:74:ce:00:ce:53:82:aa:dd:3d:72:b5:
                    d8:53:00:83:5a:2d:13:0c:11:ce:76:08:30:18:40:
                    63:39:fc:53:6b:9e:91:da:8b:e1:aa:38:aa:ec:59:
                    f2:65:a1:92:6a:62:6e:6b:fa:fe:61:8c:e6:a2:ae:
                    80:1d:b0:4b:13:e8:a3:f3:6f:c2:26:42:3f:e5:00:
                    77:3e:1a:dd:f0:f9:35:37:cd:aa:29:e2:6b:4f:25:
                    b6:50:87:4c:04:e8:54:f5:42:fa:55:05:29:1a:68:
                    e9:e8:c5:48:1c:52:e2:c6:85:fe:2f:ac:a1:46:a1:
                    f5:9e:7d:02:8c:b1:e2:34:da:f1:f9:f1:a0:b9:82:
                    86:df:92:c6:8b:90:af:64:1a:7a:e1:65:7d:cd:60:
                    e1:c6:87:63:43:aa:45:a2:99:75:22:1c:09:65:03:
                    86:0a:3d:0d:6e:51:80:8e:20:2e:46:b0:f7:38:d5:
                    25:b5:ca:00:07:de:e6:56:5d:4c:47:90:29:e5:a6:
                    fa:b3:24:87:21:b5:3f:a6:57:8e:b8:6c:51:33:4b:
                    7e:cc:f1:d4:16:22:73:4d:9b:ca:23:d3:fb:45:c0:
                    07:af:63:41:e8:db:0a:fe:c3:c4:6a:fd:02:50:47:
                    20:8a:32:3f:b5:a2:55:c7:bc:93:fa:9f:0c:46:f8:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:C6:41:95:27:49:73:10:CB:90:A5:92:61:64:9C:5C:70:FB:3F
            X509v3 Authority Key Identifier:
                keyid:49:6C:FB:E8:D7:37:7C:9B:DF:1B:14:37:EA:5A:63:C4:03:3B:DC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/496CFBE8D7377C9BDF1B1437EA5A63C4033BDCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496CFBE8D7377C9BDF1B1437EA5A63C4033BDCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d3438203d3e20323636313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:71:ef:34:dd:26:8e:05:cd:5b:99:07:a8:15:74:ad:66:2a:
         39:27:3e:4a:6f:5d:9b:1e:31:29:3d:c0:aa:c2:17:68:bc:24:
         ca:7e:6e:b6:9a:ba:42:d5:05:eb:15:c5:82:03:ab:f2:97:66:
         61:6e:51:3a:dc:1e:7e:b1:88:30:40:ea:cb:56:4a:a6:b0:41:
         0f:05:f5:c9:17:fc:d0:12:d5:24:c4:25:3a:01:b9:ae:e8:ee:
         af:f9:f2:95:c6:6f:ff:2c:d8:e6:9c:46:12:0f:65:19:3a:4f:
         2d:34:38:ab:e4:8b:82:4d:fe:b2:70:f1:f3:c9:d2:f7:6a:de:
         12:f9:82:9e:e4:cd:be:82:06:fb:3d:eb:4f:3c:eb:49:70:ed:
         0d:04:dc:2e:97:61:80:35:bc:dd:74:bf:4b:1a:07:88:26:44:
         2b:72:fb:5e:91:5b:59:38:a9:39:0d:c1:86:fd:c1:fa:7c:0a:
         e3:6f:77:04:3c:8d:39:0d:4b:03:5e:20:33:bf:18:32:be:83:
         95:1b:69:c7:3d:30:3d:15:e6:ad:fe:8c:42:81:5b:21:92:91:
         cb:e4:b6:3d:f8:93:8a:d2:18:c9:ed:d5:1a:0d:61:a5:52:58:
         eb:fe:a3:6e:8e:29:aa:e4:ab:4b:60:9b:7f:3f:80:0c:5c:4f:
         ed:96:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org