Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/323830343a363033383a3a2f33322d3332203d3e20323639313533.roa
File:                     323830343a363033383a3a2f33322d3332203d3e20323639313533.roa (raw, json)
Hash identifier:          T53l2buqrOAm7dmQoNeyBxjIMsQkxwKrryeyjGJZwhw=
Subject key identifier:   1E:54:A5:EE:08:28:7A:F7:7F:18:DA:C6:1F:39:71:92:DB:F5:D2:61
Certificate issuer:       /CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
Certificate serial:       390257258CB33A571D68849608D1F9908ECF5659
Authority key identifier: 3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/323830343a363033383a3a2f33322d3332203d3e20323639313533.roa
Signing time:             Tue 29 Aug 2023 13:30:57 +0000
ROA not before:           Tue 29 Aug 2023 13:25:57 +0000
ROA not after:            Tue 27 Aug 2024 13:30:57 +0000
asID:                     269153
IP address blocks:        2804:6038::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:57:25:8c:b3:3a:57:1d:68:84:96:08:d1:f9:90:8e:cf:56:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
        Validity
            Not Before: Aug 29 13:25:57 2023 GMT
            Not After : Aug 27 13:30:57 2024 GMT
        Subject: CN=1E54A5EE08287AF77F18DAC61F397192DBF5D261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:d8:6f:d7:c9:60:bc:b1:1d:e7:17:53:3c:
                    89:ee:f8:b5:a6:e6:4a:c3:3b:06:df:02:ac:2f:cf:
                    65:82:e1:3f:50:57:04:58:13:70:64:1f:b1:0e:a7:
                    a8:63:0d:bf:0d:17:5a:d6:fe:e3:d5:27:75:6c:37:
                    35:9b:54:af:f8:b5:11:38:b9:f8:fb:d7:00:97:cf:
                    86:3b:01:59:8d:06:f8:3a:c5:50:2f:20:a8:64:3d:
                    aa:08:f1:5f:63:bd:e5:0f:a2:d0:96:a6:9b:f6:49:
                    e6:4a:6e:d0:aa:9d:21:b9:48:2f:4b:59:13:1d:23:
                    91:27:c6:ad:99:b7:3c:fd:46:30:a5:4a:55:07:99:
                    2f:59:97:07:12:6b:e1:62:4c:73:8d:9d:4e:82:d5:
                    20:a3:b7:ec:a6:ce:62:d0:0f:bf:b6:09:ce:b9:26:
                    89:19:8a:35:af:d3:b5:dc:84:95:9f:33:30:cd:63:
                    f1:72:4e:c2:d8:7e:80:8f:b4:3d:77:38:a7:49:41:
                    bf:20:05:ad:ee:91:5e:b1:65:4a:6e:09:fc:d3:24:
                    ff:dd:bc:bd:8d:aa:d7:28:95:56:b1:47:e7:4e:30:
                    fa:a9:00:8d:e0:57:64:de:39:4e:41:fd:6d:e8:f3:
                    79:05:24:cb:40:05:27:d0:2f:16:ab:7e:32:1f:03:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:A5:EE:08:28:7A:F7:7F:18:DA:C6:1F:39:71:92:DB:F5:D2:61
            X509v3 Authority Key Identifier:
                keyid:3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/323830343a363033383a3a2f33322d3332203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6038::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:60:da:7c:cd:18:de:83:bc:17:a1:02:a2:17:57:ec:64:db:
         94:35:56:66:bd:4f:da:71:ff:e7:15:ca:fd:29:4d:9f:93:2e:
         d3:3c:ac:d8:23:e1:1d:c0:02:32:3b:8c:27:31:f9:08:d8:46:
         df:f9:23:6f:96:04:d3:7a:fc:33:38:87:9f:fb:20:fa:f9:00:
         17:65:9c:5d:01:bb:a1:56:e4:a6:65:df:01:9d:30:63:a3:9e:
         1c:74:b5:1d:f0:48:07:c3:c3:f7:1b:a7:a6:d0:52:42:27:82:
         f1:cf:e7:26:57:6f:b4:85:6a:86:d3:71:8b:af:0b:68:d2:99:
         62:e1:16:53:a9:a2:a7:08:3c:bc:f6:42:64:6d:51:6f:db:83:
         e8:f8:51:4d:38:c7:3d:87:c4:83:f6:2d:00:7f:b7:ad:53:ce:
         2f:18:e5:a0:48:0a:04:1f:0b:86:b2:49:c4:ba:4f:82:75:08:
         ef:ed:30:1e:66:68:00:ee:62:42:35:de:ea:0a:62:09:e8:6e:
         c6:b7:f9:30:a5:6b:cd:67:c6:d8:00:a9:2e:04:42:cd:e4:aa:
         eb:cd:a4:81:0c:97:69:e6:bc:f0:ae:a7:c5:11:40:0e:60:30:
         85:55:c9:9a:8a:9c:cd:96:25:49:5f:e9:1a:cb:0c:7a:7c:8b:
         25:ad:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org