Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/323830343a336531303a3a2f33322d3438203d3e20323636353731.roa
File:                     323830343a336531303a3a2f33322d3438203d3e20323636353731.roa (raw, json)
Hash identifier:          cW542TysUhiNW7aUsci//mzV3WIohoWXzTTXpG92YXk=
Subject key identifier:   98:FF:94:7F:1C:73:1B:A5:5A:3A:5A:1D:F7:0C:A2:14:EC:E9:9F:2C
Certificate issuer:       /CN=3A44B331C6A6EDF262A5A9C01AC913CA35960F41
Certificate serial:       0DE3B27658D90D7A9945AE6C9D0AA37FC70A9F29
Authority key identifier: 3A:44:B3:31:C6:A6:ED:F2:62:A5:A9:C0:1A:C9:13:CA:35:96:0F:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A44B331C6A6EDF262A5A9C01AC913CA35960F41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/323830343a336531303a3a2f33322d3438203d3e20323636353731.roa
Signing time:             Wed 14 Feb 2024 19:48:00 +0000
ROA not before:           Wed 14 Feb 2024 19:43:00 +0000
ROA not after:            Wed 12 Feb 2025 19:48:00 +0000
asID:                     266571
IP address blocks:        2804:3e10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e3:b2:76:58:d9:0d:7a:99:45:ae:6c:9d:0a:a3:7f:c7:0a:9f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A44B331C6A6EDF262A5A9C01AC913CA35960F41
        Validity
            Not Before: Feb 14 19:43:00 2024 GMT
            Not After : Feb 12 19:48:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:14:d6:53:e9:64:73:07:de:1b:cc:40:29:
                    47:3c:94:af:15:0b:bd:93:ee:0a:50:3f:9b:ff:b5:
                    ff:4e:e0:be:ee:64:8a:1a:1d:a2:eb:b7:cf:bf:25:
                    db:d1:59:82:b3:1b:d0:98:b3:9f:eb:86:05:53:35:
                    39:da:ac:f6:5d:60:9b:15:1b:40:f2:e7:02:92:f8:
                    5d:82:d9:42:4a:90:30:f0:06:e4:4d:0f:5b:b8:9a:
                    53:e7:b6:4d:18:c7:fb:1d:ae:68:3b:06:fd:21:95:
                    55:01:5b:80:a2:a7:09:4b:ef:e3:76:65:df:b7:24:
                    95:e3:b6:d6:4a:c2:94:70:9d:be:51:63:e1:4f:81:
                    3c:f8:57:1c:59:46:0d:6e:1c:67:f8:f4:89:f7:1e:
                    b4:dc:12:90:1d:49:92:b3:32:89:54:63:8a:c3:3d:
                    73:ea:d7:f0:d0:e5:a7:1f:1d:69:e5:19:dc:45:b4:
                    b8:8c:e2:32:1d:82:19:eb:77:7a:a4:db:74:7d:e2:
                    51:3c:a3:7a:d1:71:4a:78:a9:b1:4e:fd:e1:6a:5d:
                    cf:50:32:c1:a0:13:31:0f:b3:c0:52:09:10:e7:c8:
                    b3:a1:26:ab:6a:81:b9:65:b9:61:f1:a8:81:e3:7d:
                    5f:67:78:ae:33:7d:c2:d0:ec:5b:e7:84:cb:80:bc:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FF:94:7F:1C:73:1B:A5:5A:3A:5A:1D:F7:0C:A2:14:EC:E9:9F:2C
            X509v3 Authority Key Identifier:
                keyid:3A:44:B3:31:C6:A6:ED:F2:62:A5:A9:C0:1A:C9:13:CA:35:96:0F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/3A44B331C6A6EDF262A5A9C01AC913CA35960F41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A44B331C6A6EDF262A5A9C01AC913CA35960F41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/323830343a336531303a3a2f33322d3438203d3e20323636353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:1c:dc:bd:b5:3a:76:ac:9f:89:6b:c4:80:b5:6b:37:9a:7b:
         13:39:6e:56:f4:81:ec:c9:1c:bc:6d:a9:e2:04:c8:f1:95:71:
         c3:a0:f0:50:f2:f6:5b:48:1e:b9:1e:83:ec:26:0e:1e:a0:ac:
         76:92:7f:49:20:93:d6:b7:6b:37:0d:e8:a0:f4:ab:0f:0a:f9:
         ad:26:c8:06:13:83:c8:38:22:6b:76:ab:4d:e8:14:e1:47:55:
         89:76:a6:68:fc:0a:79:ce:73:ce:e5:9c:38:e5:14:f6:79:4b:
         0f:36:ab:f8:73:fa:bb:30:35:cd:8b:c1:98:d3:d0:dd:52:74:
         9c:88:9a:a8:66:ad:b0:18:20:7f:3e:01:71:7c:9e:c1:88:9d:
         5c:5a:a5:b2:58:4b:94:da:73:2c:7f:6d:ea:aa:14:73:db:01:
         2d:25:bd:f9:43:fd:3e:67:d9:97:77:bb:1d:a6:dd:68:d6:c3:
         a7:65:68:93:77:08:e8:bf:4d:66:9a:9c:5d:4d:43:44:a9:15:
         e3:84:db:ed:5a:78:33:8f:43:ec:de:bb:8d:43:1e:dc:0f:43:
         fd:a4:5a:48:5d:31:1f:73:8f:b8:49:1f:68:1e:84:a5:c2:a4:
         1f:a1:55:b4:0b:1f:59:52:ee:71:1f:fa:e2:57:4e:28:c2:fb:
         e5:00:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org