Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33322d3332203d3e20323636333839.roa
File:                     323830343a333731383a3a2f33322d3332203d3e20323636333839.roa (raw, json)
Hash identifier:          jdPn7NjqAjJCgXDDQI/o3Nuqb0uaT4xW98+3Rs5ZGn0=
Subject key identifier:   43:CB:BF:CF:E6:7C:34:16:C5:95:D4:4F:76:19:BF:FE:89:53:11:F2
Certificate issuer:       /CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
Certificate serial:       4FA36B3F5348A0E640B4B66484FC6D98B610AC5C
Authority key identifier: B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33322d3332203d3e20323636333839.roa
Signing time:             Wed 29 Mar 2023 16:07:59 +0000
ROA not before:           Wed 29 Mar 2023 16:02:59 +0000
ROA not after:            Wed 27 Mar 2024 16:07:59 +0000
asID:                     266389
IP address blocks:        2804:3718::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a3:6b:3f:53:48:a0:e6:40:b4:b6:64:84:fc:6d:98:b6:10:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
        Validity
            Not Before: Mar 29 16:02:59 2023 GMT
            Not After : Mar 27 16:07:59 2024 GMT
        Subject: CN=43CBBFCFE67C3416C595D44F7619BFFE895311F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:31:fb:71:ac:ba:2e:92:14:64:bd:f5:39:
                    13:94:b3:41:88:7e:d3:e7:bd:44:88:83:09:ce:d2:
                    47:60:92:5b:5b:7e:5d:83:ee:41:1c:7a:80:ba:f2:
                    f6:f0:57:dc:44:cd:bb:51:59:fa:9c:3d:82:a1:99:
                    d0:b9:39:c2:a6:ff:aa:c6:db:77:90:19:ee:a9:51:
                    89:5f:02:1e:cd:58:75:8a:69:cd:0c:31:a8:e6:62:
                    86:f9:fd:50:7f:b5:74:fa:c9:23:fb:ff:f1:b6:22:
                    b2:9f:38:3f:0d:e6:48:fd:b7:84:b8:d2:3e:4f:88:
                    e8:a7:35:05:b7:35:62:37:e1:23:7b:c5:98:70:dd:
                    c2:72:db:1e:da:4a:96:0c:e2:43:81:5f:6f:cf:a2:
                    68:a0:2c:8c:78:bb:b0:53:83:3e:50:86:7a:5c:d1:
                    d9:71:09:5b:22:ee:78:31:a3:3e:ec:b4:f2:31:7b:
                    1b:4d:ed:30:f0:86:5a:57:12:db:ac:65:5f:bd:54:
                    32:fa:26:be:ed:7f:e6:31:ac:b9:5d:1d:66:83:f2:
                    6d:46:80:12:89:04:4f:d9:c2:f2:ce:78:a5:6b:83:
                    5e:47:43:b0:33:c6:4f:f1:51:f9:04:f6:e8:0c:18:
                    83:33:98:75:d4:56:82:bf:d8:3c:f6:fe:de:d9:90:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CB:BF:CF:E6:7C:34:16:C5:95:D4:4F:76:19:BF:FE:89:53:11:F2
            X509v3 Authority Key Identifier:
                keyid:B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33322d3332203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3718::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:1e:44:89:f3:34:ca:00:60:99:4c:b6:67:a0:a4:8b:d5:
         5c:1f:49:fc:e0:68:80:93:9c:f0:a5:b5:1f:18:58:5e:5c:3c:
         b1:28:bd:81:e1:14:99:cf:a5:b7:c1:75:d0:03:0d:b2:b1:4f:
         2d:a2:d8:8c:0f:d9:ad:a0:36:f2:92:08:ea:fc:e3:07:1d:6d:
         6e:62:1e:89:65:ec:75:58:e2:b4:88:b7:e7:97:a9:85:31:6a:
         25:da:2a:48:fd:33:8c:b5:f3:c1:69:c4:92:ce:f5:18:ca:3b:
         ec:04:d7:10:a0:bc:c9:64:15:f6:64:3d:39:10:73:a3:ce:95:
         1e:be:1c:8b:bd:bf:63:d2:aa:64:d4:1d:19:64:0f:2d:d2:45:
         cd:cb:e5:51:6e:da:da:e5:a7:fd:79:92:7f:14:55:15:e7:6a:
         84:96:86:59:a8:8f:b0:2d:b9:4f:06:ca:2b:47:38:d5:a5:94:
         37:ae:eb:b0:d3:c1:ce:93:a0:65:43:dc:37:8a:2a:f7:3a:8f:
         49:6d:e4:6f:02:be:0f:d4:2c:0f:3d:e2:8b:cf:7e:66:83:41:
         74:b8:59:c9:41:48:23:54:13:62:85:a1:f1:31:ab:41:93:ea:
         4d:12:0c:a4:a0:6b:12:9a:cd:a0:7f:db:84:e2:a5:22:47:77:
         40:0a:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org