Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
File:                     323830343a343732383a3a2f33322d3332203d3e20323637303335.roa (raw, json)
Hash identifier:          r9+7OF4x2V5y3ka1vjSTZbWsn12tDyzvmNh9EBtDCRU=
Subject key identifier:   1D:86:71:B9:DA:98:49:40:AF:BD:CF:D2:E2:45:4C:0D:58:39:38:35
Certificate issuer:       /CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
Certificate serial:       5DF246763BE86982558EF1B71E965BD3E28C1DEF
Authority key identifier: 33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
Signing time:             Tue 21 Nov 2023 21:17:59 +0000
ROA not before:           Tue 21 Nov 2023 21:12:59 +0000
ROA not after:            Tue 19 Nov 2024 21:17:59 +0000
asID:                     267035
IP address blocks:        2804:4728::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f2:46:76:3b:e8:69:82:55:8e:f1:b7:1e:96:5b:d3:e2:8c:1d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
        Validity
            Not Before: Nov 21 21:12:59 2023 GMT
            Not After : Nov 19 21:17:59 2024 GMT
        Subject: CN=1D8671B9DA984940AFBDCFD2E2454C0D58393835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:d4:0d:1c:7b:06:a1:04:08:88:30:db:56:
                    e6:8a:25:10:21:f7:3f:2b:56:72:c8:02:1a:75:44:
                    f1:ae:12:75:7b:ba:a0:e9:58:43:09:f2:ac:ab:9d:
                    bc:33:fb:cb:e5:20:0b:8b:3c:95:78:67:33:28:e1:
                    46:9f:9d:32:57:5b:47:91:0b:02:1d:98:72:e5:b1:
                    7e:c2:e5:46:74:81:08:1e:6f:e5:21:55:bf:6b:29:
                    e9:5c:a2:9c:55:b0:7c:8b:b5:10:69:cf:3f:ae:00:
                    78:7b:16:27:07:f0:17:4a:99:4b:0a:ca:5e:f7:ef:
                    43:b7:b4:61:82:86:0a:c0:ad:9a:b3:50:76:87:92:
                    96:84:b9:67:3f:92:23:75:74:b6:71:f9:e2:e9:c0:
                    f1:ff:68:82:c0:82:7d:53:8b:22:9a:c4:f2:8f:ae:
                    56:95:5b:54:7c:96:05:9d:ab:18:98:fa:73:73:56:
                    1f:4f:75:c6:72:c6:f1:bf:00:21:04:20:9c:8a:14:
                    1a:4e:5b:da:b7:08:fa:a0:aa:30:bf:01:a3:c3:b8:
                    2d:ba:81:8c:fb:e6:b6:2f:ec:d5:8d:ae:41:f9:fa:
                    5c:db:fc:0b:05:87:a4:2f:04:09:94:72:6d:78:5c:
                    e1:6e:f2:44:e6:79:0c:07:e0:20:ca:41:ed:25:82:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:86:71:B9:DA:98:49:40:AF:BD:CF:D2:E2:45:4C:0D:58:39:38:35
            X509v3 Authority Key Identifier:
                keyid:33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:a1:ac:46:aa:3a:17:1d:2e:ad:fc:34:c2:87:f3:0a:70:
         33:39:a3:45:f1:dc:21:be:c7:6d:c7:5c:ad:bd:11:2e:4d:0f:
         ed:72:d8:5b:cf:21:ad:c5:3b:99:74:89:ac:f7:84:17:46:da:
         2c:ce:d2:c7:8f:41:85:dc:2c:03:30:61:42:e6:69:c3:5f:14:
         41:49:cb:bf:12:cf:b2:3e:b5:68:07:c9:64:ae:14:66:5b:2c:
         b6:88:48:87:00:8d:eb:92:10:2b:55:8f:5b:5c:3e:96:22:fd:
         96:33:be:ea:f0:e3:c0:d1:29:90:05:6f:89:9a:23:66:03:ee:
         ee:86:42:c1:58:22:ce:c0:c3:81:6f:fb:d6:b2:8e:f7:c4:57:
         1a:ad:94:9b:bd:c8:03:4c:2d:ed:54:41:7c:94:3d:c3:13:09:
         d8:a5:27:41:59:e9:46:08:05:a6:ca:ed:63:85:f6:f2:5b:51:
         94:9e:28:c1:99:e9:43:90:e1:ac:bd:15:09:0e:6d:bf:bc:ff:
         a9:a0:44:21:8c:61:b1:f5:16:e8:00:d4:8f:3e:5d:97:a4:5f:
         42:af:8d:ee:96:3b:30:ef:75:62:a2:2c:02:6c:58:fc:b5:b2:
         8f:ba:d8:b9:da:54:1b:6c:21:bd:91:1e:31:69:69:57:7b:6f:
         4e:36:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org