Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/323830343a346661633a383030303a3a2f33332d3333203d3e20323638333432.roa
File:                     323830343a346661633a383030303a3a2f33332d3333203d3e20323638333432.roa (raw, json)
Hash identifier:          qOVWcdEiGe59BCeXolwWJwK0HtjYDmtHlcM/m6yJ5aM=
Subject key identifier:   10:FD:D0:BB:46:4C:D0:6E:68:E1:8C:33:8F:9D:D4:26:4F:19:F0:B9
Certificate issuer:       /CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
Certificate serial:       3F410450A9F8006E2D22BCDD5DCFE77FA81E044C
Authority key identifier: 3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/323830343a346661633a383030303a3a2f33332d3333203d3e20323638333432.roa
Signing time:             Sat 20 Aug 2022 07:18:52 +0000
ROA not before:           Sat 20 Aug 2022 07:13:52 +0000
ROA not after:            Sat 19 Aug 2023 07:18:52 +0000
asID:                     268342
IP address blocks:        2804:4fac:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:04:50:a9:f8:00:6e:2d:22:bc:dd:5d:cf:e7:7f:a8:1e:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Validity
            Not Before: Aug 20 07:13:52 2022 GMT
            Not After : Aug 19 07:18:52 2023 GMT
        Subject: CN=10FDD0BB464CD06E68E18C338F9DD4264F19F0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:c8:50:78:ee:b7:21:80:c7:0f:e1:55:11:
                    ba:29:2c:1d:26:bb:aa:ed:c4:33:ba:af:d3:b8:23:
                    dc:5b:b5:dd:69:c8:ad:45:20:74:e5:98:c1:f5:8e:
                    b2:47:da:56:ad:a8:a4:4c:9a:ce:7d:3a:50:9c:c3:
                    3b:38:f1:cd:d3:c3:f7:0a:2f:6d:01:46:bc:b2:b8:
                    41:00:0a:67:78:42:d5:4b:41:46:71:56:60:36:19:
                    02:16:9e:7e:0b:d5:9d:48:a4:36:36:a4:c8:ab:d5:
                    af:33:e8:61:32:eb:a6:64:d1:16:ee:e2:5c:5f:da:
                    b5:15:65:a8:24:03:4b:75:03:21:48:22:da:03:f7:
                    19:61:a9:6f:3a:f9:50:b4:c1:f9:bb:ea:4f:e9:90:
                    3d:0c:17:52:b1:3d:64:e1:62:9b:70:0c:39:8c:4f:
                    77:a7:c3:71:db:63:b4:79:39:67:f6:3d:e7:3d:f7:
                    db:36:47:cf:f2:3f:be:63:13:03:a5:fa:f4:ed:a3:
                    c3:d9:35:c1:a5:7c:64:07:9e:18:0b:1f:fa:b1:1c:
                    96:4a:74:fe:8f:d3:bb:9f:ca:72:2e:32:00:55:c2:
                    93:67:3a:92:9f:9f:96:c9:2f:41:30:d0:7b:ae:2f:
                    46:a5:82:c3:66:ca:f4:74:f5:82:26:8b:3f:ec:f4:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FD:D0:BB:46:4C:D0:6E:68:E1:8C:33:8F:9D:D4:26:4F:19:F0:B9
            X509v3 Authority Key Identifier:
                keyid:3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/323830343a346661633a383030303a3a2f33332d3333203d3e20323638333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:01:3d:ce:35:ba:bd:ea:51:30:42:77:ed:c0:71:f0:c2:
         1f:d5:6e:aa:b9:b1:e3:21:84:5c:ce:07:54:d5:72:1b:7b:1f:
         08:6d:92:24:a7:ec:1f:65:4e:95:0b:c0:7a:23:36:4c:63:9c:
         8b:42:00:3e:36:e2:66:fa:6b:29:2b:b8:b3:12:9f:e3:ae:99:
         fa:f3:dd:6b:6c:fb:5c:13:45:21:4f:2e:4d:a7:c2:23:b0:1f:
         3c:c1:f9:b0:c5:93:a5:f1:a6:3d:b4:e9:9f:4e:d8:8a:9a:03:
         fc:fa:26:51:87:01:2f:f7:aa:44:42:ca:2c:33:37:17:60:54:
         5c:f4:e0:0c:7a:35:dc:bb:c7:59:02:b1:c5:ff:4f:56:e0:37:
         1d:a2:06:82:f8:47:44:7a:f0:99:7f:05:fd:b9:a9:66:af:3a:
         c8:68:0e:0b:74:b9:e3:5a:2d:92:28:9c:02:f0:45:80:e6:7f:
         42:1a:10:99:a2:73:d7:84:15:9a:81:ab:db:2d:63:5e:fe:4d:
         25:f9:ae:57:3c:95:82:9e:18:01:81:ab:1b:32:b9:fe:1a:78:
         b3:7a:ba:b4:12:de:2c:0d:a8:8c:c1:aa:41:be:7d:96:c9:b2:
         28:5b:ea:e5:48:a5:da:a1:58:ed:ce:e0:44:fd:08:ab:12:e0:
         49:10:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org