Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3a2f33322d313238203d3e20323636363336.roa
File:                     323830343a336630633a3a2f33322d313238203d3e20323636363336.roa (raw, json)
Hash identifier:          FdvK6yVOaL/Et+dY15bNpwxgh2UVQHkPtt/6wTsXzHY=
Subject key identifier:   9E:51:13:A4:81:78:B6:B6:5D:E2:63:8F:34:C5:F6:56:C4:9D:F5:CA
Certificate issuer:       /CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
Certificate serial:       0AC4C68DC4EBA4071C0D64F7C43E3A1A84B865A7
Authority key identifier: 9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3a2f33322d313238203d3e20323636363336.roa
Signing time:             Mon 06 Mar 2023 03:06:43 +0000
ROA not before:           Mon 06 Mar 2023 03:01:43 +0000
ROA not after:            Mon 04 Mar 2024 03:06:43 +0000
asID:                     266636
IP address blocks:        2804:3f0c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c4:c6:8d:c4:eb:a4:07:1c:0d:64:f7:c4:3e:3a:1a:84:b8:65:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Validity
            Not Before: Mar  6 03:01:43 2023 GMT
            Not After : Mar  4 03:06:43 2024 GMT
        Subject: CN=9E5113A48178B6B65DE2638F34C5F656C49DF5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:74:53:28:f6:39:23:82:b8:e1:fa:bf:35:
                    66:a5:c1:0e:2f:8b:35:75:e7:ed:cf:44:21:b2:fb:
                    82:b8:7c:a0:bd:d3:c8:73:35:79:bf:47:ae:f2:65:
                    86:97:8c:ec:85:94:71:8f:92:60:dc:59:b3:ba:7b:
                    2c:b4:ae:76:6f:91:25:29:77:c3:3e:9d:8f:7d:07:
                    78:cf:a4:29:08:03:78:74:9b:02:bf:41:a2:99:89:
                    cc:40:d1:ff:fb:10:78:89:5b:6e:3b:8e:58:a1:f9:
                    eb:a9:14:3e:5c:65:7f:cc:dd:fc:20:1f:01:c5:63:
                    c9:bc:3f:b3:8e:66:9f:34:5e:9c:68:55:09:e1:6c:
                    da:c7:03:65:a0:54:44:60:51:2e:15:c5:64:61:c6:
                    7a:ca:66:64:6e:7f:db:8d:f0:26:45:57:00:50:9e:
                    5f:ba:14:00:90:82:dd:45:d7:12:7b:8e:5b:66:44:
                    b9:51:67:fc:7a:98:36:aa:ac:a3:c5:63:37:58:41:
                    d5:59:ac:c6:53:ba:0c:c7:ec:52:59:16:97:89:f3:
                    bc:b1:79:a7:27:d2:e9:4f:2d:a4:de:47:d1:32:44:
                    3f:80:5a:b9:a5:6c:2f:1b:f0:f4:f9:85:37:e1:18:
                    86:35:fc:41:e6:45:46:47:33:8a:34:39:37:b9:61:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:13:A4:81:78:B6:B6:5D:E2:63:8F:34:C5:F6:56:C4:9D:F5:CA
            X509v3 Authority Key Identifier:
                keyid:9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3a2f33322d313238203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:26:ac:3b:42:ab:be:ae:61:5a:a6:d5:8c:16:ad:db:c0:46:
         11:3a:f0:51:ac:eb:3f:b4:d3:58:17:0d:7d:4d:16:7f:a7:d4:
         98:c8:42:e3:25:08:ac:7c:21:19:85:b4:99:7c:5a:c3:b4:70:
         cd:8a:b0:01:de:f6:7e:58:52:21:d4:dc:7a:55:7a:37:d2:0e:
         81:1d:2c:31:4a:70:e2:c1:e5:8a:42:89:82:94:79:ce:d7:20:
         75:5d:3c:4b:4a:43:f8:66:16:f2:ab:6b:f1:77:69:de:06:7b:
         bf:84:5a:39:03:6e:42:9b:85:ee:33:9d:89:24:e3:53:7b:a6:
         fe:ec:12:16:e9:ab:bc:c2:14:49:4f:e5:2d:ef:16:0f:95:c3:
         55:e1:4b:1b:55:06:a5:22:fa:a5:8b:41:20:40:9c:7b:8a:a8:
         a5:40:df:32:85:42:bd:f7:da:c1:86:20:fe:54:b8:77:9c:96:
         6d:5b:5c:c0:e1:0c:6e:fc:31:8f:59:5e:fe:06:76:a6:3b:61:
         0e:3c:f1:c4:dd:d4:3d:73:2a:3c:88:97:f8:e5:85:00:75:42:
         fa:ed:0c:af:3f:d1:cc:ff:36:5e:ab:6a:32:c0:0d:1c:12:98:
         6f:bf:69:2b:6e:f7:90:8c:b3:07:9c:f5:1b:5e:53:e2:1f:b2:
         a8:9b:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org