Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
File:                     323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa (raw, json)
Hash identifier:          nP70b6h+9wlyWPheRi3bdE2IXbDU4K4oN/dBmvjkVOA=
Subject key identifier:   02:7E:8D:24:AB:44:0E:DF:01:E5:29:92:18:42:11:17:35:27:4C:B8
Certificate issuer:       /CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
Certificate serial:       79E1DC8C91766C0435BD28842F8D772B65462679
Authority key identifier: 33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
Signing time:             Mon 04 Dec 2023 18:44:19 +0000
ROA not before:           Mon 04 Dec 2023 18:39:19 +0000
ROA not after:            Mon 02 Dec 2024 18:44:19 +0000
asID:                     267035
IP address blocks:        2804:4728:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e1:dc:8c:91:76:6c:04:35:bd:28:84:2f:8d:77:2b:65:46:26:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
        Validity
            Not Before: Dec  4 18:39:19 2023 GMT
            Not After : Dec  2 18:44:19 2024 GMT
        Subject: CN=027E8D24AB440EDF01E529921842111735274CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:6b:76:fd:c0:e9:f6:ba:59:dc:76:75:ac:
                    31:d6:d0:b3:62:75:d8:ba:dd:49:b1:db:59:31:b2:
                    8f:9a:0f:86:91:58:96:1f:da:39:fe:21:62:bb:18:
                    09:26:51:a9:83:4b:9d:1d:49:8b:1b:45:73:64:28:
                    ee:6f:3d:e2:f0:5b:6b:ac:e5:5e:a2:5a:db:bf:85:
                    4c:c7:b1:3a:80:f5:26:a5:e5:44:77:36:76:59:67:
                    7c:e6:a4:86:9f:89:ab:34:e1:50:77:e8:5b:9a:69:
                    84:5a:47:68:47:a3:53:d1:6e:fe:98:45:47:a7:63:
                    49:8d:34:46:68:42:83:7f:33:84:68:b1:67:b0:da:
                    e1:84:5c:9f:30:7d:d2:5d:f2:97:50:ca:bb:0e:da:
                    ab:ef:e0:63:84:e3:0e:84:0c:38:37:b6:e2:06:6e:
                    02:a9:e5:17:7c:0f:33:e9:d3:5a:23:5f:c3:a0:93:
                    1f:82:f5:40:f3:ed:44:83:95:2b:fd:f5:08:33:0c:
                    77:fe:e9:7b:21:65:20:38:f4:5e:bd:d5:a2:06:33:
                    59:ea:a1:2d:f1:33:e9:70:a3:a7:98:73:a0:e7:30:
                    0f:23:55:51:ef:10:1c:99:71:10:e0:56:ae:6b:59:
                    ca:7a:a5:57:87:da:54:2a:bd:39:59:6f:49:34:65:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7E:8D:24:AB:44:0E:DF:01:E5:29:92:18:42:11:17:35:27:4C:B8
            X509v3 Authority Key Identifier:
                keyid:33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:97:23:0b:7d:99:83:c0:cc:46:e6:d5:33:9e:22:da:2b:
         fd:b1:61:c9:e6:e9:a4:7f:fd:b6:bd:0d:ca:57:44:d0:3a:5f:
         ca:5e:62:3a:26:ce:c1:ff:11:bb:3e:fe:ce:78:4b:44:a5:ea:
         b7:4c:1f:f7:4b:4e:10:48:6d:b8:a0:7b:9a:0d:f6:78:65:0b:
         15:58:db:89:10:d7:5c:71:71:a2:7a:28:4c:f6:21:a5:69:69:
         d1:a0:f4:14:11:e2:61:30:fb:a7:f2:d0:e4:d7:6f:bf:14:91:
         4f:8e:7c:bb:bc:07:b2:30:92:f6:b9:08:d6:95:00:35:02:15:
         fc:bc:db:c7:8b:2a:31:3c:9b:66:84:42:15:41:0d:bd:5e:72:
         62:ce:f6:fc:a9:05:6c:85:03:af:91:b2:84:ce:5c:7d:5a:16:
         69:a0:bc:a6:a2:43:b5:97:5c:5b:4a:23:f6:1c:14:94:0c:63:
         93:6a:54:7c:90:27:db:2b:ba:83:8a:00:31:46:76:c6:26:7f:
         fa:df:a4:bb:03:99:82:d9:28:39:e5:cb:b9:66:c5:1e:90:ca:
         fb:ee:2e:0e:eb:7c:26:52:cb:26:a6:e1:14:ab:cf:82:f4:52:
         0e:f9:c0:e6:05:e8:00:4d:c9:08:e4:f6:4a:3e:43:6b:d6:cb:
         47:a2:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org