Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a3a2f33322d3536203d3e20323636393634.roa
File:                     323830343a343630383a3a2f33322d3536203d3e20323636393634.roa (raw, json)
Hash identifier:          pZ1339IjPzhO6+4l4ck0tjZ/CAQDlcNsxK2gqRbx8m4=
Subject key identifier:   21:A0:34:CE:C6:D3:6D:B2:B2:49:7C:AA:3F:14:04:78:EE:88:FB:AA
Certificate issuer:       /CN=2709C3589B6F8A98917F8919D9B35B70ED4B3315
Certificate serial:       0845CFB3BAE2CBF25779C65A7A0F563EBAACC323
Authority key identifier: 27:09:C3:58:9B:6F:8A:98:91:7F:89:19:D9:B3:5B:70:ED:4B:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a3a2f33322d3536203d3e20323636393634.roa
Signing time:             Tue 07 Mar 2023 20:30:08 +0000
ROA not before:           Tue 07 Mar 2023 20:25:08 +0000
ROA not after:            Tue 05 Mar 2024 20:30:08 +0000
asID:                     266964
IP address blocks:        2804:4608::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:45:cf:b3:ba:e2:cb:f2:57:79:c6:5a:7a:0f:56:3e:ba:ac:c3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2709C3589B6F8A98917F8919D9B35B70ED4B3315
        Validity
            Not Before: Mar  7 20:25:08 2023 GMT
            Not After : Mar  5 20:30:08 2024 GMT
        Subject: CN=21A034CEC6D36DB2B2497CAA3F140478EE88FBAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:bf:25:e9:4a:96:a5:07:a7:30:0b:c5:5b:
                    b1:0f:1e:e1:bd:cd:e2:77:75:45:e1:b8:42:33:59:
                    e5:b8:1a:a6:06:32:4f:7a:39:90:41:00:37:6d:17:
                    03:ac:1c:f0:55:1b:a3:3d:fa:4e:ab:5e:8b:c4:0a:
                    26:0b:aa:37:80:ab:24:11:d2:b6:13:39:37:de:11:
                    3f:df:4a:e8:63:42:86:e8:6e:58:d3:f8:cd:d0:56:
                    d4:ee:f7:5a:7a:35:67:54:d1:f5:fd:91:e7:b0:86:
                    8c:b8:0c:c0:16:fd:c1:ed:5c:e3:fa:1a:40:f5:66:
                    e9:7e:fe:e1:d7:ad:4b:97:b3:ca:d0:ce:9c:7b:b1:
                    a5:8d:b8:95:0a:44:b5:d9:4f:2d:1b:d9:d8:b1:b8:
                    89:24:69:34:8a:52:68:ce:7e:cf:d6:24:77:73:14:
                    2a:55:0d:6a:71:6f:56:5a:21:fa:3a:77:e9:2c:02:
                    2e:3a:89:68:64:36:f7:4b:30:e7:37:28:88:80:a1:
                    d8:58:61:d8:c0:b4:0c:f2:e2:66:03:2d:d8:4e:58:
                    09:7d:67:62:1b:5d:d8:21:ea:8f:6e:ee:72:70:7c:
                    91:6a:0a:61:bd:5b:5c:8f:b9:a9:60:87:07:d5:79:
                    86:8a:2f:f7:7a:25:23:3b:c9:4d:37:02:25:b8:e5:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:34:CE:C6:D3:6D:B2:B2:49:7C:AA:3F:14:04:78:EE:88:FB:AA
            X509v3 Authority Key Identifier:
                keyid:27:09:C3:58:9B:6F:8A:98:91:7F:89:19:D9:B3:5B:70:ED:4B:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a3a2f33322d3536203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4608::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:e6:43:c4:af:d9:6f:39:c3:16:ec:47:d6:04:7b:29:d7:
         f3:47:db:aa:11:96:bb:0a:24:af:c6:22:64:f3:94:90:9f:dd:
         89:6f:f4:bd:15:c6:4d:32:c1:d6:f2:7d:23:bc:20:61:04:0e:
         ea:fe:bc:49:fb:b3:f9:6c:7d:b5:64:c2:39:b1:c1:c0:a3:ed:
         c8:7c:07:7d:4d:9d:8b:8d:00:f2:cd:2c:42:00:71:a6:c1:90:
         7e:95:ab:d2:45:86:84:8a:92:62:5e:df:8e:3b:17:91:5c:50:
         ef:00:f5:cd:54:4d:63:02:36:34:a7:80:45:0f:15:37:77:a7:
         de:52:fc:31:31:b4:64:90:65:13:3d:f8:8d:72:1b:5e:fd:eb:
         46:c2:19:e5:13:f2:c1:fe:8b:8f:c5:a5:6c:22:1e:55:11:eb:
         46:4b:eb:b8:e4:e8:a3:25:3c:4c:c0:66:75:ae:f1:6b:7a:57:
         56:30:f5:38:b0:10:2a:7a:67:74:4f:8f:54:f2:b3:c9:c0:4f:
         83:d0:71:e1:d2:44:3d:ce:66:41:26:fb:86:c7:a7:2d:02:8e:
         8d:23:88:3d:cc:a9:1a:23:dc:59:be:4b:83:12:f6:12:1f:14:
         24:17:dd:09:4c:d4:05:d7:c8:6e:5b:30:ce:59:29:9f:cf:97:
         cd:75:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org