Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a633030303a3a2f33382d3338203d3e20323636353530.roa
File:                     323830343a336462633a633030303a3a2f33382d3338203d3e20323636353530.roa (raw, json)
Hash identifier:          n4XYe6fFJUCs8BUycnC7YfSXK4G8bbLJ8HE8maqJGt4=
Subject key identifier:   46:BE:65:1B:93:88:89:47:0A:DF:AC:B7:6F:98:CE:1A:F3:BC:BE:DC
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       64E80BF9887FFD3D70E3C252391444E56EF7831D
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a633030303a3a2f33382d3338203d3e20323636353530.roa
Signing time:             Mon 10 Jul 2023 13:27:09 +0000
ROA not before:           Mon 10 Jul 2023 13:22:09 +0000
ROA not after:            Mon 08 Jul 2024 13:27:09 +0000
asID:                     266550
IP address blocks:        2804:3dbc:c000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e8:0b:f9:88:7f:fd:3d:70:e3:c2:52:39:14:44:e5:6e:f7:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Jul 10 13:22:09 2023 GMT
            Not After : Jul  8 13:27:09 2024 GMT
        Subject: CN=46BE651B938889470ADFACB76F98CE1AF3BCBEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:82:6a:f9:43:15:51:63:7c:39:20:d9:c7:
                    f4:a4:45:d9:b0:3a:f8:19:66:fb:64:c2:0f:12:18:
                    ca:6c:0a:79:32:01:be:77:b7:41:e4:d8:ea:2a:74:
                    53:45:27:67:b0:e1:56:26:c6:f6:03:8c:8b:cc:d6:
                    5a:db:be:9d:af:4a:70:f3:ab:24:97:2b:7a:3b:51:
                    97:f7:ee:1b:f2:3a:e4:96:2d:d9:f1:66:64:ff:4b:
                    bf:72:9d:67:97:a3:d9:b9:4c:44:85:92:6f:50:d9:
                    db:40:34:64:be:40:7e:af:0d:19:12:d1:ad:f1:54:
                    e3:09:8f:a3:a9:36:54:c1:87:97:28:ac:d2:bd:f4:
                    0e:3d:39:a3:ed:1f:ae:9f:92:51:85:5c:33:c7:3d:
                    cc:97:8b:09:aa:bc:38:57:bc:a6:3a:1e:80:03:3a:
                    08:7a:94:fa:5f:77:59:36:24:a6:66:6b:9a:e4:e4:
                    62:a9:c0:cb:3f:cf:21:a0:51:c3:f7:f1:58:c0:0e:
                    01:67:16:ad:0e:5c:ff:11:d4:4b:0a:9b:de:04:4a:
                    a8:55:4a:3d:ad:78:f4:ae:94:35:73:ed:55:49:d0:
                    74:4b:e5:aa:f5:40:1a:cb:ff:be:69:66:42:a4:74:
                    27:81:d5:8a:20:8f:39:13:cb:cb:9f:9d:1b:39:b9:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:65:1B:93:88:89:47:0A:DF:AC:B7:6F:98:CE:1A:F3:BC:BE:DC
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a633030303a3a2f33382d3338203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc:c000::/38

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:80:ba:1e:e0:d9:ce:c9:92:34:ff:70:1c:77:b4:c9:3a:
         2b:be:9a:79:e0:fc:c0:bd:3b:fc:9b:54:8b:6a:91:c7:45:eb:
         cd:a8:8a:95:e7:8d:fd:d9:ff:34:1a:47:69:8f:0f:59:f7:da:
         1f:f8:8a:ec:c1:b4:e7:c5:a1:38:2b:1f:15:3f:61:3f:f2:e5:
         ba:65:40:f7:c9:a7:a9:7c:79:70:b8:06:1a:ab:b5:d6:8d:b8:
         68:6d:7a:30:fc:1e:0e:66:4c:f0:2f:33:ff:76:a7:0a:1c:b9:
         88:10:96:0a:40:3d:66:99:1b:61:37:cc:01:c0:ad:08:9e:25:
         27:05:cf:f7:d1:fc:0e:59:1d:89:e3:99:2e:3d:9d:1b:59:af:
         98:9f:db:b8:38:d5:ac:65:92:28:45:f3:f0:b9:99:79:e1:ce:
         1b:f7:82:ae:48:2c:2d:70:71:f8:bf:d3:2c:23:04:9e:f4:de:
         4c:a6:c1:e8:39:7d:cc:2c:57:09:a1:8b:e1:70:77:3c:1e:76:
         0b:9a:93:2e:c7:33:22:ce:5d:20:d7:aa:52:98:03:55:b7:63:
         4c:79:fd:63:07:84:e4:a7:a2:6f:de:32:4f:28:39:2f:d0:95:
         d9:dd:77:64:1e:ec:d3:29:db:6d:61:12:44:29:df:5f:c7:6e:
         ba:dc:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org