Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          0EIWxVXbiyG5whnKzx6/U8z0F4So1f1er3efrQF2crk=
Subject key identifier:   64:B1:7E:FC:9A:13:FF:F7:64:B2:A4:0E:E6:83:E9:3D:76:4E:3E:95
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       60DF54A6781E1FB7381C87B5DE04575BDD2F11EA
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:12:50 +0000
ROA not before:           Mon 11 Mar 2024 12:07:50 +0000
ROA not after:            Mon 10 Mar 2025 12:12:50 +0000
asID:                     270340
IP address blocks:        2804:6a80:3009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:df:54:a6:78:1e:1f:b7:38:1c:87:b5:de:04:57:5b:dd:2f:11:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:07:50 2024 GMT
            Not After : Mar 10 12:12:50 2025 GMT
        Subject: CN=64B17EFC9A13FFF764B2A40EE683E93D764E3E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:32:3a:78:d8:c6:72:84:c0:1b:92:f1:0e:
                    f4:36:25:d0:06:c2:48:ad:f1:c7:63:0c:16:d7:c5:
                    2b:f8:86:df:bb:02:fd:fd:2d:87:fa:c3:22:ae:bb:
                    d9:ef:28:8e:e7:8e:b3:4a:f1:29:a6:0a:33:f8:d7:
                    54:5d:63:0d:2c:bb:12:e0:57:03:da:b9:9e:a4:0c:
                    15:fc:80:72:0e:88:e7:5d:b5:ef:20:00:a0:19:12:
                    70:3a:e2:67:93:7a:38:f9:ea:cc:35:96:5f:8c:36:
                    b1:0e:c1:bd:12:bf:be:33:05:d1:7d:51:6e:df:f9:
                    44:71:a6:56:21:b0:77:92:81:aa:3e:73:54:10:73:
                    20:5d:88:87:bb:6e:ab:45:4b:e0:46:16:0b:25:9d:
                    c9:65:03:af:19:b2:ff:01:9f:1e:ef:23:fe:43:a7:
                    d8:66:d3:25:ff:8d:40:fb:68:a7:cf:2e:23:96:6c:
                    35:6e:20:c0:6c:f7:c6:8c:ad:07:dc:94:97:96:04:
                    13:4d:8a:92:b8:95:9e:7a:cd:08:d7:ff:23:e4:41:
                    17:bf:3e:cb:96:82:77:eb:34:6a:96:7f:89:8a:9f:
                    c7:27:4d:d3:d1:d1:f0:c2:e6:61:9e:55:9d:c6:02:
                    8e:f3:f8:03:7f:7d:d4:a1:60:64:0a:e9:56:15:38:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:7E:FC:9A:13:FF:F7:64:B2:A4:0E:E6:83:E9:3D:76:4E:3E:95
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3009::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:10:29:ad:39:14:3d:de:fb:57:fa:cc:5a:44:4f:8f:90:
         7f:8d:8c:3e:df:71:a0:0f:80:b3:d9:67:c3:68:40:77:3e:b1:
         89:7a:e7:ac:3a:4c:46:1d:b5:1f:f8:70:93:2e:95:df:e9:ee:
         d6:36:3b:69:2e:7c:00:5e:a3:32:9a:2c:e2:84:c2:46:71:e0:
         59:e8:89:f7:b9:26:fe:93:63:ac:2f:1b:b0:e7:1e:39:54:85:
         1e:49:d0:4d:c5:1c:8f:54:c4:e5:13:f7:d9:3f:24:05:24:26:
         e1:04:95:eb:e0:6b:cd:d1:90:4d:78:74:02:27:8a:3f:ef:5b:
         b2:5d:2e:cf:27:8f:fa:e9:52:92:3a:08:03:27:2e:1c:80:3f:
         df:b2:30:29:7c:3a:b7:2b:6f:1a:50:e6:a3:70:c5:58:ec:db:
         50:5e:7e:d5:6e:c0:42:85:92:2d:7e:bc:1f:14:ed:87:5d:b6:
         76:f6:96:89:4b:13:2b:e7:89:27:5c:1f:20:28:09:b1:82:de:
         41:bc:1d:4b:50:2b:1a:56:09:ac:0d:8f:2e:73:af:a9:c6:13:
         10:20:b7:a9:a9:9d:a7:7d:33:44:56:19:3b:9c:a5:7a:9f:ed:
         b3:95:02:f1:3a:7a:fe:1d:4b:d5:b5:5c:e9:5c:56:57:af:69:
         8a:89:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----