Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/323830343a346439383a383030303a3a2f33332d3333203d3e20323638323037.roa
File:                     323830343a346439383a383030303a3a2f33332d3333203d3e20323638323037.roa (raw, json)
Hash identifier:          ySzwsdyXuhrNaePChGost/N2dE4GYPDmKPSxB01T2TY=
Subject key identifier:   1A:3C:A3:96:D8:CA:63:81:90:47:09:5E:84:16:94:54:B5:08:41:F1
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       5E3D5FDC2F9ACD3C770ABA7DB40C04E75A7D840F
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/323830343a346439383a383030303a3a2f33332d3333203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:34:51 +0000
ROA not before:           Mon 10 Apr 2023 13:29:51 +0000
ROA not after:            Mon 08 Apr 2024 13:34:51 +0000
asID:                     268207
IP address blocks:        2804:4d98:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3d:5f:dc:2f:9a:cd:3c:77:0a:ba:7d:b4:0c:04:e7:5a:7d:84:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:29:51 2023 GMT
            Not After : Apr  8 13:34:51 2024 GMT
        Subject: CN=1A3CA396D8CA63819047095E84169454B50841F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ff:c9:78:21:a8:c8:77:4d:39:29:8c:29:0e:
                    72:e7:e2:d7:7b:32:5f:96:1c:dd:b8:03:24:3f:8f:
                    3c:23:09:35:48:ed:92:0c:29:1d:0b:02:f6:77:ab:
                    71:53:d5:78:7f:39:98:b8:21:57:5a:07:b8:86:f4:
                    59:e3:f3:05:2e:c3:18:12:ea:e5:f7:74:2f:05:c8:
                    57:c5:93:e1:02:c6:07:22:9b:da:b8:99:7f:9f:6f:
                    2c:b6:12:93:0d:27:74:69:a7:b9:63:23:02:af:02:
                    c3:82:48:8e:0c:38:46:d4:98:76:e5:b4:41:44:60:
                    86:a9:88:c7:7a:ab:37:6c:57:7c:61:d8:c4:d3:50:
                    15:1f:af:07:36:c3:9d:b9:16:79:84:de:5c:5a:ba:
                    37:e5:1f:55:4b:bf:de:eb:d6:e7:00:2d:9d:c3:37:
                    1d:30:22:90:73:80:a3:1b:77:f8:d5:59:2f:68:2e:
                    27:49:be:84:6f:0a:56:e7:5c:a0:82:a3:c9:e9:e9:
                    68:06:b6:89:db:c8:83:2e:21:b8:7c:b4:ca:f5:06:
                    dc:57:04:32:9a:78:f4:9e:43:d9:cd:60:a9:0e:33:
                    64:b9:5f:86:6f:3f:1a:52:35:10:70:ea:b4:f7:7e:
                    79:24:6e:fa:ec:d9:5b:c6:2b:42:78:56:35:32:f4:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3C:A3:96:D8:CA:63:81:90:47:09:5E:84:16:94:54:B5:08:41:F1
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/323830343a346439383a383030303a3a2f33332d3333203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d98:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:7c:9a:c8:52:73:b8:4f:9d:75:00:4e:2c:10:fc:5b:af:
         06:c5:9a:94:24:a9:3b:b6:a4:4e:41:b9:c9:fb:f9:19:59:94:
         c4:fe:10:f7:2e:5c:38:19:89:68:68:f8:b2:95:21:09:27:17:
         22:05:8a:a4:7a:a1:00:eb:84:2a:7f:99:71:82:f2:df:9d:c5:
         1d:71:2b:b8:27:b9:69:c7:dd:4a:41:0c:42:70:53:7f:fc:24:
         53:98:d1:d7:40:a0:f6:72:fb:0c:86:6a:05:8d:4d:f4:7f:d7:
         fe:1b:f2:05:4b:0d:4a:54:77:4e:88:62:79:ba:ab:79:b4:b0:
         85:49:d2:fb:d9:fd:99:eb:b2:d7:c2:5f:8c:b1:27:0a:dc:e1:
         02:8f:0c:10:95:a9:87:d4:7a:ac:1c:27:0e:02:ed:d8:ce:83:
         ef:89:b0:3b:1a:3b:30:1d:6a:d5:aa:56:e7:f3:84:d4:b8:7d:
         6b:e5:db:70:be:40:84:36:a3:be:95:8b:0e:5c:02:a4:3a:7d:
         75:9c:32:0f:8e:42:27:90:88:b6:bc:5f:48:01:ca:a8:d3:cf:
         8a:96:49:fa:16:a0:c3:1f:7e:de:dd:1a:05:8f:8e:68:66:2b:
         bc:fd:2b:e5:f2:26:b7:81:55:26:ec:26:7d:9c:45:62:01:d2:
         32:90:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org