Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          vITsoBDQvpA37OKbkPE/zUbxh/qv5pUEB0QKKC0KdIM=
Subject key identifier:   A6:18:0F:2D:49:DE:1E:ED:9F:9D:5C:04:00:67:63:AD:86:F3:5D:2D
Certificate issuer:       /CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
Certificate serial:       3976C22FF43EB66F93B7F157C4A00EFE78227C0A
Authority key identifier: D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Thu 09 Mar 2023 19:09:09 +0000
ROA not before:           Thu 09 Mar 2023 19:04:09 +0000
ROA not after:            Thu 07 Mar 2024 19:09:09 +0000
asID:                     269261
IP address blocks:        2804:61dc:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:76:c2:2f:f4:3e:b6:6f:93:b7:f1:57:c4:a0:0e:fe:78:22:7c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
        Validity
            Not Before: Mar  9 19:04:09 2023 GMT
            Not After : Mar  7 19:09:09 2024 GMT
        Subject: CN=A6180F2D49DE1EED9F9D5C04006763AD86F35D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:3f:dc:c9:35:ab:60:43:98:87:6d:94:3d:
                    94:e6:b7:5e:0b:49:e7:29:52:78:65:18:a6:eb:7d:
                    43:78:c3:67:96:a3:80:7c:4b:b0:82:90:f3:93:e7:
                    19:4a:b9:7f:6f:4a:71:ec:7a:4d:0f:be:6f:af:f7:
                    6f:ea:76:c3:07:34:fd:d6:19:a9:a6:2e:d4:b5:75:
                    f1:58:56:8b:65:f0:79:96:71:aa:94:df:39:ab:f1:
                    bb:2f:d2:0e:96:01:65:cb:96:42:5b:db:ff:81:ee:
                    79:df:74:e7:64:9e:f0:63:f8:9c:00:7d:c2:13:75:
                    27:75:76:7f:11:0f:30:b7:1e:b5:bc:a3:3e:38:b0:
                    54:b9:df:99:da:44:09:bc:85:a5:11:be:2b:8f:16:
                    be:90:bb:9e:e3:b0:0f:27:84:99:d3:66:c8:fb:0e:
                    e1:6d:77:9e:1b:a1:bc:b1:bf:01:c6:7c:c9:74:b0:
                    a2:d1:08:35:60:e9:13:6e:d1:33:8e:a6:c8:0e:e1:
                    f3:bd:4a:0d:9e:86:02:32:dd:6f:4e:5e:6c:1f:ee:
                    51:95:11:03:56:a5:5a:cd:da:4b:93:f1:f6:1d:e4:
                    0f:b3:67:a4:5b:56:68:40:7b:be:2b:c0:3c:29:61:
                    bd:10:48:56:e0:5d:44:16:ce:38:14:3d:6d:80:3e:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:18:0F:2D:49:DE:1E:ED:9F:9D:5C:04:00:67:63:AD:86:F3:5D:2D
            X509v3 Authority Key Identifier:
                keyid:D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:31:db:99:18:dd:af:2e:6e:fb:44:d6:07:31:3a:86:6f:f7:
         a1:06:53:74:56:96:c1:fe:19:47:ac:b1:26:41:c4:da:6e:a4:
         43:45:f4:f4:c0:d6:9c:a9:ff:ed:f3:78:4f:14:ef:0f:c0:da:
         f7:a0:b2:42:6a:82:44:96:ad:c5:da:e9:d5:58:78:3c:0d:dd:
         a9:86:0d:09:f8:86:f3:93:f5:62:ea:a0:5b:66:aa:c2:c3:c8:
         fd:94:47:b7:3d:5e:24:3e:8b:a7:d7:39:a2:4e:12:a4:06:5e:
         be:76:16:52:26:ca:64:e2:76:09:c6:d4:98:40:73:c4:7e:e1:
         38:3d:ce:06:71:3d:d2:85:88:4c:ee:05:98:26:73:5e:c0:a1:
         41:61:b4:f6:fd:30:21:93:b4:09:c3:cd:9c:f5:34:08:4f:41:
         93:9a:a8:f0:ca:d2:5f:d2:56:e5:2a:c6:be:bd:65:17:69:0c:
         54:27:c4:1e:90:33:24:55:19:c9:9a:ef:f2:7e:8e:16:86:d2:
         07:26:14:40:8f:75:90:d8:a4:09:38:89:46:1e:9c:c8:d9:10:
         f4:55:92:86:b4:c1:3a:96:40:ea:c2:88:cf:bb:01:10:30:25:
         f9:78:f2:56:61:e0:db:8c:05:6f:26:76:f4:67:9c:45:4a:d6:
         d9:38:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:23 2023 by rpki-client on console.sobornost.net