Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          Xc6+VXLbeaeQ7tFmkCPzv6N3SfXJp5oxzZm6d/1tr1Y=
Subject key identifier:   3D:8B:2B:25:7A:C7:6F:81:F0:A3:9B:ED:7F:59:8F:59:C2:6F:CD:6E
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       71E88708482189419C246CD75AFF4ED725127F82
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:12:55 +0000
ROA not before:           Mon 11 Mar 2024 12:07:55 +0000
ROA not after:            Mon 10 Mar 2025 12:12:55 +0000
asID:                     270340
IP address blocks:        2804:6a80:3010::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e8:87:08:48:21:89:41:9c:24:6c:d7:5a:ff:4e:d7:25:12:7f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:07:55 2024 GMT
            Not After : Mar 10 12:12:55 2025 GMT
        Subject: CN=3D8B2B257AC76F81F0A39BED7F598F59C26FCD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:80:4c:ec:9d:f6:43:99:bf:53:b1:3a:89:
                    00:3e:5a:8f:fa:88:7a:d7:9e:b1:11:ff:e1:1b:ed:
                    75:5b:d1:51:ee:8d:f5:b7:38:c2:2b:c1:a9:9e:d9:
                    71:89:b3:e3:bf:d0:67:f5:9b:81:40:71:f4:69:0f:
                    73:d8:48:90:03:23:f8:74:e0:3f:29:c0:9e:b6:80:
                    2a:b0:c2:20:93:45:8f:d4:1e:dc:8b:c1:25:a1:a1:
                    d5:b7:75:39:18:2b:b0:4b:47:f1:ff:50:84:66:7f:
                    e8:05:2e:2c:fe:4c:26:6c:74:72:f0:51:ef:d8:d8:
                    27:c0:cc:42:77:4b:70:f5:c3:da:ff:27:f3:5e:ba:
                    ac:90:8d:7c:35:7a:a4:70:b7:c2:13:71:10:9b:88:
                    12:bf:b3:ab:7d:b3:0f:9b:84:20:64:7a:4c:1f:bb:
                    8e:44:08:ca:70:ed:03:e5:ed:e1:d6:c7:48:00:b5:
                    69:cb:6c:33:36:1e:fb:29:86:95:55:7f:22:ca:9c:
                    61:9d:9d:f8:5c:23:50:d6:dc:97:46:9b:01:d3:a6:
                    94:7b:1c:fe:cd:b6:44:8b:8f:02:02:a9:be:43:3d:
                    54:67:22:58:5e:f2:17:67:ee:27:7b:21:85:ca:47:
                    5e:24:c7:3a:1e:4d:18:4f:44:46:1b:8c:0f:ba:d2:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:2B:25:7A:C7:6F:81:F0:A3:9B:ED:7F:59:8F:59:C2:6F:CD:6E
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3010::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:42:3c:70:cf:c5:b9:7c:fa:31:15:28:6c:b2:79:d1:58:
         f7:bb:42:6c:8a:c0:00:a9:8e:10:93:4c:37:96:4e:6a:92:4e:
         99:37:81:02:d4:02:be:ba:6f:df:ec:0a:aa:27:9b:86:65:af:
         6e:4d:55:6e:fb:a9:b4:44:a4:b3:dc:c9:44:67:b4:72:ea:fa:
         7e:6c:2c:ac:08:98:ad:f8:40:92:c4:b1:a1:c6:96:3e:e5:2f:
         90:47:99:3e:26:aa:a1:ab:b2:dd:53:eb:ed:79:e2:45:8c:a2:
         62:21:e7:c5:a8:15:e3:da:e7:ab:7f:b3:4a:f2:a2:d8:7a:52:
         b3:9f:e8:1e:36:28:5b:e7:6d:69:fc:8f:46:79:0c:a2:d1:bc:
         79:26:98:82:55:49:34:24:f2:c8:9d:df:20:42:da:5a:13:7b:
         d8:95:35:c2:1f:07:ad:4a:81:56:7c:e7:5d:c5:98:67:b2:48:
         ca:34:f2:15:0d:39:e2:b8:45:75:65:b5:5d:05:b3:8f:bc:05:
         f5:33:3c:cd:c1:f9:6e:80:54:18:ea:3c:e9:41:9a:f8:63:45:
         39:1f:c1:1e:40:6d:da:87:46:66:c6:ee:c4:5d:71:77:9d:77:
         dc:55:e6:27:59:bb:9b:2f:ca:41:2b:57:6c:59:45:9a:ba:ef:
         dc:f9:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----