Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3438203d3e20323638323335.roa
File:                     323830343a346530383a3a2f33322d3438203d3e20323638323335.roa (raw, json)
Hash identifier:          XkhjFK7xYX8A1TpJbr1fPns2F81cmmt8v02IyQ3iu0k=
Subject key identifier:   7C:5B:CA:BF:61:6C:D5:38:E0:8E:D4:3C:74:A5:8C:26:8D:6D:9E:18
Certificate issuer:       /CN=11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B
Certificate serial:       1F34BFA4E94352DFF90552F429023E8724652DB2
Authority key identifier: 11:EC:3F:AF:C4:B2:34:C0:5A:44:39:51:C7:BD:C1:F0:E9:89:BF:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3438203d3e20323638323335.roa
Signing time:             Sun 04 Jun 2023 20:00:00 +0000
ROA not before:           Sun 04 Jun 2023 19:55:00 +0000
ROA not after:            Tue 04 Jun 2024 20:00:00 +0000
asID:                     268235
IP address blocks:        2804:4e08::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:bf:a4:e9:43:52:df:f9:05:52:f4:29:02:3e:87:24:65:2d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B
        Validity
            Not Before: Jun  4 19:55:00 2023 GMT
            Not After : Jun  4 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:0f:61:b8:0b:30:7e:8d:e5:53:61:9d:0a:
                    b8:88:4c:9b:06:8f:8e:c0:7b:0a:00:d7:c4:47:6b:
                    a0:e7:3c:86:61:bf:be:30:5f:9e:2c:20:d8:b3:4c:
                    79:09:af:9d:c8:08:26:65:1d:10:5a:5b:b9:d0:67:
                    ef:f4:4e:23:49:4e:8e:14:b6:b4:dc:a6:cd:f0:0c:
                    28:73:24:ac:af:b5:bb:4d:6a:66:33:74:25:5a:cc:
                    93:d9:a7:9f:20:bf:12:72:c5:83:54:8b:b1:64:ea:
                    cb:3e:7d:56:23:4d:09:68:f4:dd:9e:5a:4f:9a:8b:
                    ef:23:cb:e6:9b:f5:ba:42:7e:b3:72:c5:22:c3:c6:
                    90:cd:6c:27:d9:f9:74:30:b8:b6:6f:e4:27:2e:f6:
                    be:b3:ca:5f:e2:61:0b:d6:d9:58:de:ca:34:5f:94:
                    aa:0c:23:a9:b9:c7:38:d6:c8:5f:29:78:d8:0b:c0:
                    10:bd:ed:c3:c3:42:fd:2c:dd:31:2d:a3:5e:48:11:
                    9b:57:c5:fe:c0:81:21:06:c7:ff:80:5f:94:4b:f4:
                    aa:ce:35:6d:ab:64:0f:25:02:b9:b3:c7:89:92:69:
                    41:f0:0a:bd:89:4c:ae:b8:7d:d1:1b:18:c3:30:11:
                    50:81:d1:28:b7:de:9d:3b:df:6d:9d:57:f1:16:3d:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5B:CA:BF:61:6C:D5:38:E0:8E:D4:3C:74:A5:8C:26:8D:6D:9E:18
            X509v3 Authority Key Identifier:
                keyid:11:EC:3F:AF:C4:B2:34:C0:5A:44:39:51:C7:BD:C1:F0:E9:89:BF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3438203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:52:4a:bf:d0:d9:36:c4:f5:88:db:ac:79:38:c8:21:bb:95:
         34:28:1e:3e:97:e9:c7:8c:9c:86:0a:1e:77:ad:dc:c5:fc:b2:
         dc:28:3e:5a:bd:9e:3e:68:23:61:e7:68:a5:c5:d4:02:86:74:
         d7:8b:f7:08:43:75:2a:43:61:08:75:8e:0a:d0:b8:c7:ba:27:
         c8:5c:bc:19:ae:3a:61:9a:3f:38:7a:22:44:88:1c:3e:b7:5b:
         8a:7c:64:b2:62:10:01:f8:8e:b1:4d:d6:0d:7e:54:00:b9:8c:
         35:0c:b1:bc:0a:51:96:68:40:56:09:d1:56:4e:07:7d:ee:ca:
         e4:87:ae:2c:64:53:3c:c8:7f:da:cd:a4:16:63:72:55:9f:5e:
         31:0c:d8:8e:a4:92:ff:76:0b:07:3a:8a:51:ca:4c:d1:a9:fc:
         19:ff:11:fa:61:b5:b2:c0:8c:fa:d1:c4:09:57:61:04:e4:60:
         b9:cc:e3:4f:f9:99:a4:2f:cc:82:ba:ce:60:05:8c:64:0c:54:
         f9:12:b1:f0:c0:e7:7b:c0:bc:2d:c6:66:96:1f:81:4d:54:dd:
         fe:ad:a4:19:ea:9e:dc:16:c3:2e:92:e3:44:e8:2c:86:29:b2:
         9d:1d:36:ec:9f:7b:a1:b6:c0:56:62:45:db:ec:25:fc:ea:7a:
         63:73:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org