Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/323830343a313934383a3a2f33322d3332203d3e203631373834.roa
File:                     323830343a313934383a3a2f33322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          D3CExemBpIZOG5yegyB+Nk/gjK9tqcjhi3MsAACxi2Q=
Subject key identifier:   F8:9F:33:A3:26:3B:3F:45:CB:32:95:A7:EB:94:50:0C:07:F6:78:BE
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       0B83111B5D8DD816AA83747A9BEC279D67412B54
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/323830343a313934383a3a2f33322d3332203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:51 +0000
ROA not before:           Wed 03 Apr 2024 23:48:51 +0000
ROA not after:            Wed 02 Apr 2025 23:53:51 +0000
asID:                     61784
IP address blocks:        2804:1948::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:83:11:1b:5d:8d:d8:16:aa:83:74:7a:9b:ec:27:9d:67:41:2b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:51 2024 GMT
            Not After : Apr  2 23:53:51 2025 GMT
        Subject: CN=F89F33A3263B3F45CB3295A7EB94500C07F678BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:b3:47:c2:fb:24:28:65:af:9e:19:22:3d:
                    14:18:8c:60:57:a1:f5:5c:ac:89:46:07:49:9d:5a:
                    ea:ce:a9:e2:8f:a9:ee:c3:c0:3a:96:96:6f:12:98:
                    9f:93:d7:60:a9:c5:12:49:1d:49:04:63:a2:52:1b:
                    bb:f0:82:7f:81:56:fd:a0:ee:35:dd:47:29:c3:c6:
                    fb:40:99:19:db:d7:d5:08:68:ab:38:41:84:de:62:
                    68:e5:21:02:46:d2:cc:29:ea:5a:87:39:78:95:f0:
                    9a:67:c9:ab:a9:70:7e:dc:05:0b:60:d6:6b:be:51:
                    14:50:66:96:74:a2:96:f4:95:57:ce:29:ce:4d:ed:
                    5e:f2:c1:b2:ee:48:8e:6f:99:fa:86:ad:de:42:00:
                    a5:38:f7:03:c2:d6:72:ad:fb:b5:49:cc:12:b7:d8:
                    bc:6e:a9:cd:4e:6f:15:d5:83:45:1c:ff:ce:2e:0f:
                    5c:52:f7:21:65:04:f2:46:33:e6:91:ab:60:d0:d6:
                    ff:30:f6:a4:50:db:65:ae:16:3a:80:7f:9e:e9:5e:
                    d9:19:a9:a1:06:7c:7c:bb:2e:82:9d:d4:9f:bd:cc:
                    88:76:f2:a7:b9:d1:d7:6b:d1:ba:10:5b:4c:e3:36:
                    32:0d:7b:72:a3:9d:5b:3f:86:65:52:9d:84:da:37:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9F:33:A3:26:3B:3F:45:CB:32:95:A7:EB:94:50:0C:07:F6:78:BE
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/323830343a313934383a3a2f33322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:5a:0f:40:f9:e3:ed:18:f6:5c:a9:35:1f:47:c9:66:d7:
         ec:42:8c:52:ab:84:65:d4:1b:e7:98:fc:0d:34:0b:8c:26:b1:
         06:6f:c5:e6:df:7a:ce:28:9e:e4:f5:e0:c7:8a:40:06:70:55:
         42:aa:03:ff:4e:59:2f:09:81:30:28:49:e7:a8:29:e8:cd:2a:
         d5:09:f2:55:0f:96:88:5d:f1:6e:81:b8:84:45:5b:c7:d3:28:
         53:87:27:12:31:0d:80:38:bd:05:64:9a:eb:a7:28:cc:76:55:
         0c:7a:7b:91:9b:42:e8:86:72:1e:10:42:f0:c5:02:28:68:e0:
         9e:47:a6:5c:44:4c:c6:2c:1e:a4:12:c5:04:59:8e:82:8e:d4:
         bf:a2:ae:20:3e:39:23:fd:6e:75:4b:0f:bc:ec:c0:e4:16:22:
         b8:1c:48:89:c8:5c:bb:4b:1d:df:ce:c6:6b:38:20:4b:99:3e:
         50:08:a9:3b:08:37:4d:46:41:90:36:36:d8:fa:47:55:8a:70:
         21:80:02:36:e1:1d:8e:06:73:ff:72:02:db:8e:e6:ec:18:e4:
         1f:1a:c5:75:d2:8f:fd:6d:6d:db:7c:d5:e1:3f:ea:22:ea:a5:
         28:c5:c1:55:b0:ac:03:69:ba:02:c5:5b:20:dd:34:01:bc:94:
         6f:e8:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org