Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          PjsuOJdQ0mPnUZok9M5flN3fLdAh/idkWw6Y4+8n5IY=
Subject key identifier:   62:A1:F2:BD:A1:B5:B8:03:99:F1:A2:12:1D:FF:E6:C8:C8:82:C4:C0
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       36C6F34C2FA9FDC9329316E7329B871ED32D7460
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:13:04 +0000
ROA not before:           Mon 11 Mar 2024 12:08:04 +0000
ROA not after:            Mon 10 Mar 2025 12:13:04 +0000
asID:                     270340
IP address blocks:        2804:6a80:3014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c6:f3:4c:2f:a9:fd:c9:32:93:16:e7:32:9b:87:1e:d3:2d:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:08:04 2024 GMT
            Not After : Mar 10 12:13:04 2025 GMT
        Subject: CN=62A1F2BDA1B5B80399F1A2121DFFE6C8C882C4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:47:65:8f:ae:55:e5:60:6b:1f:c5:0a:08:
                    23:5a:e1:17:6e:27:58:c9:2b:7d:fd:ee:bd:4a:8c:
                    d7:d8:92:4c:fc:79:37:42:ea:e6:c7:10:d9:10:76:
                    ac:96:3e:77:1f:ff:0a:01:15:1d:db:c8:72:66:8a:
                    d4:d8:64:88:07:7c:e8:88:c7:6a:72:21:24:ec:ed:
                    f1:39:fd:30:82:5b:5f:54:f5:e4:6c:14:e7:bc:d1:
                    42:4b:cd:4e:cb:ff:b7:6d:dd:fe:77:e4:fb:0f:ee:
                    de:7f:14:7d:3c:fa:23:6f:b6:7f:02:e2:7b:17:ce:
                    fb:a9:f5:cb:68:90:1e:b9:fc:28:d4:33:a2:f2:e2:
                    bd:7d:56:68:70:14:37:9c:a7:d6:d6:c1:1b:09:21:
                    6e:2c:45:48:da:85:d2:ce:49:48:0a:31:ca:02:fe:
                    44:e5:87:ce:cf:96:37:bc:76:5c:0b:de:bb:c9:31:
                    96:e4:f6:98:21:83:19:c6:75:c6:c6:7b:09:be:07:
                    b4:37:93:18:e9:ab:52:9e:1e:ad:fa:6d:aa:7d:45:
                    cf:e8:e9:85:ec:ec:d2:23:c8:71:a2:8e:48:af:bd:
                    0b:49:40:f1:51:03:73:13:21:47:ef:8c:ad:ec:39:
                    ab:0b:65:91:f7:4c:4f:ee:57:5a:4e:da:5f:3a:c7:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:F2:BD:A1:B5:B8:03:99:F1:A2:12:1D:FF:E6:C8:C8:82:C4:C0
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3014::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:b8:ff:b7:28:de:60:a9:06:1a:09:34:af:58:16:6f:99:
         b1:8b:59:ef:a2:81:79:21:a3:78:a9:3d:54:a8:d0:ac:19:d0:
         5e:a7:04:52:31:e2:09:ea:9f:0a:e3:de:aa:55:c1:e1:fc:3f:
         91:91:1a:db:10:67:bc:9b:83:25:e3:3c:46:32:ab:f9:0d:c3:
         90:ec:26:17:56:ec:e9:d7:0d:3d:56:b8:77:03:9d:e2:68:f7:
         59:c8:6b:bc:53:9f:d3:99:77:63:85:f0:2e:9f:48:27:a6:50:
         9f:e7:99:b5:56:e4:72:f3:7e:a9:38:62:77:42:c2:e7:2a:fe:
         72:c4:45:ce:3b:c4:cb:5e:48:7f:d8:6e:03:78:55:81:87:fc:
         ff:e9:c3:68:26:1c:60:7d:a6:c2:9e:91:ba:d1:d1:4e:4e:f3:
         7a:89:88:9c:3e:ae:65:8d:8d:8b:7b:9a:b6:0f:ff:69:42:de:
         e6:6d:1a:04:11:1a:1d:b9:10:59:aa:35:b4:1e:72:91:21:b3:
         d9:66:b7:9f:f7:54:a0:a6:32:ea:51:d9:3a:58:90:10:eb:4d:
         31:2c:57:96:b2:a8:73:4a:fb:2f:38:fd:db:bd:42:ac:9d:05:
         31:30:0d:3b:f2:70:b5:33:a4:ca:20:c8:64:cb:6d:7b:9c:a8:
         71:06:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----