Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/323830343a343130633a3a2f33322d3332203d3e20323636303030.roa
File:                     323830343a343130633a3a2f33322d3332203d3e20323636303030.roa (raw, json)
Hash identifier:          VyY4LYBY7opTTOU4WB/sqf7pmNHhbvsfhXYtqAEIqXw=
Subject key identifier:   A5:94:23:37:32:1F:9C:76:EB:A9:0E:06:EA:21:8D:AA:EB:B6:63:EE
Certificate issuer:       /CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
Certificate serial:       46850F0BB1EF5869548DC7CE4993B10E4853DF14
Authority key identifier: D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/323830343a343130633a3a2f33322d3332203d3e20323636303030.roa
Signing time:             Mon 18 Dec 2023 16:16:03 +0000
ROA not before:           Mon 18 Dec 2023 16:11:03 +0000
ROA not after:            Mon 16 Dec 2024 16:16:03 +0000
asID:                     266000
IP address blocks:        2804:410c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:85:0f:0b:b1:ef:58:69:54:8d:c7:ce:49:93:b1:0e:48:53:df:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
        Validity
            Not Before: Dec 18 16:11:03 2023 GMT
            Not After : Dec 16 16:16:03 2024 GMT
        Subject: CN=A5942337321F9C76EBA90E06EA218DAAEBB663EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2a:79:64:de:e2:f0:98:bb:6d:c4:78:66:d2:
                    73:fe:ff:81:0d:01:7f:45:71:db:8f:53:22:60:6d:
                    2d:c5:71:e2:67:6e:16:03:be:f1:fd:3a:f8:53:ac:
                    3d:51:4a:70:5f:32:79:24:f5:4f:4c:a8:45:b6:34:
                    54:da:c8:55:90:d0:05:31:a7:08:5d:26:bc:bc:11:
                    bb:9d:fd:66:fb:ff:b3:d4:13:a2:a1:ae:00:20:0a:
                    0d:1d:7d:1e:3e:1f:42:b3:85:be:71:7e:fe:a7:c8:
                    ef:0e:7e:b1:75:4e:e3:b6:ea:d1:3e:bb:31:3c:63:
                    67:8d:05:22:5c:13:09:87:a0:1f:0c:33:a1:ea:58:
                    e6:2a:df:7e:f8:36:2a:71:d8:ae:0d:09:0b:03:7c:
                    c2:c6:3c:c7:44:4d:6d:60:66:b9:10:32:49:7c:a3:
                    94:ed:e9:48:64:94:98:f0:61:56:39:fb:b1:74:3a:
                    a0:2c:b7:46:b6:69:7e:fa:d0:72:a4:b4:42:d5:d1:
                    f0:0b:3b:de:13:d0:5d:5e:de:62:b3:5c:34:0f:dc:
                    7f:0e:f5:16:49:7f:dc:41:54:2a:08:1b:d9:ff:05:
                    01:2e:b9:20:f4:cb:77:b7:6a:09:ca:ec:4d:93:6b:
                    df:7c:ae:07:d5:e9:21:b7:bb:04:6d:4c:24:68:a5:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:94:23:37:32:1F:9C:76:EB:A9:0E:06:EA:21:8D:AA:EB:B6:63:EE
            X509v3 Authority Key Identifier:
                keyid:D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/323830343a343130633a3a2f33322d3332203d3e20323636303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:410c::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:04:a1:93:1a:4a:30:50:7d:65:cc:4f:3b:8a:64:43:79:cc:
         b3:0f:9e:b8:60:9d:39:4b:ae:10:c8:48:59:83:25:ca:f9:34:
         d1:f4:ce:d0:27:0e:fb:65:96:69:fa:ae:cd:f3:1f:19:25:d3:
         20:71:65:8a:92:fa:a8:fb:e6:30:0e:ab:15:e8:54:25:16:cd:
         f5:2e:97:8e:7a:05:a5:6d:6d:57:d0:ee:2d:97:f3:b4:8a:bb:
         70:23:a8:9a:49:15:5a:c8:39:c6:01:14:fa:7c:4a:62:4c:bd:
         1c:53:c8:d2:fd:f2:e2:49:9e:79:32:2d:f5:b9:37:ea:82:a6:
         62:63:12:58:98:ed:43:c9:12:81:7d:4e:5a:33:34:9a:90:de:
         5b:25:3e:f6:7c:8d:02:0e:d9:47:da:67:b4:46:a8:62:23:07:
         ee:5a:97:6d:33:27:e6:57:41:66:8d:56:5d:eb:8f:59:4c:9a:
         eb:eb:70:ea:2b:cb:a1:77:a6:f1:fb:1d:21:6e:d1:df:06:3d:
         12:51:38:15:51:42:bd:61:3c:6d:46:7a:75:82:07:2b:34:2a:
         e7:84:94:9d:e7:37:38:95:91:99:fe:a6:85:60:25:ed:93:5b:
         f4:bb:4e:69:37:b6:9d:ec:5a:ae:f9:21:aa:f2:44:2f:0d:a1:
         ba:76:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org