Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/323830343a323938303a3a2f33322d3438203d3e203533313732.roa
File:                     323830343a323938303a3a2f33322d3438203d3e203533313732.roa (raw, json)
Hash identifier:          rC2+tRSbu32LywIzTS64gYoyfy82kSP97n3cDFjLOWA=
Subject key identifier:   6D:9D:3B:30:28:5E:DE:C3:6D:5D:A6:7F:89:C0:85:8F:30:08:8F:64
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       52C04CEDB4C47184A5DEDA9EEB22939710CFFC5D
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/323830343a323938303a3a2f33322d3438203d3e203533313732.roa
Signing time:             Mon 19 Dec 2022 13:52:00 +0000
ROA not before:           Mon 19 Dec 2022 13:47:00 +0000
ROA not after:            Mon 18 Dec 2023 13:52:00 +0000
asID:                     53172
IP address blocks:        2804:2980::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c0:4c:ed:b4:c4:71:84:a5:de:da:9e:eb:22:93:97:10:cf:fc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: Dec 19 13:47:00 2022 GMT
            Not After : Dec 18 13:52:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:29:58:14:6b:a2:56:4d:d7:a3:3a:e5:da:
                    aa:b6:13:38:99:94:9b:35:c9:69:51:83:9d:28:27:
                    86:69:82:6e:90:d1:d2:59:d0:5c:8e:eb:65:fc:b7:
                    34:e2:ba:44:2b:46:64:6d:a3:dc:d3:66:a6:0b:67:
                    84:b1:9d:26:0e:6b:77:c2:0a:0d:37:d8:29:f6:f8:
                    96:46:c2:89:a8:4b:29:e6:eb:90:54:af:e9:0a:96:
                    3b:c1:2a:f5:48:bd:2e:24:58:cf:59:44:04:5b:63:
                    f8:4f:d9:8a:73:55:70:08:39:b1:bb:17:f9:ad:d5:
                    c8:e4:d8:09:c6:be:05:e2:8f:76:60:52:81:c3:fb:
                    c7:80:a5:88:b4:99:7c:e0:e6:35:c4:65:59:a7:bf:
                    18:c2:08:9e:f0:50:d6:65:8a:18:29:2b:e4:96:eb:
                    8f:a0:f2:71:08:bf:1d:4b:5f:75:41:97:ef:8f:7f:
                    bd:ea:f7:15:10:0d:5b:f4:2c:5e:50:07:d4:c8:9b:
                    59:95:bd:fa:4d:9e:6f:9f:c2:a6:ea:3c:0b:fa:c5:
                    68:aa:85:df:2a:87:e6:95:4f:01:06:78:39:55:7d:
                    3d:a7:17:1d:d8:9e:93:a2:d0:0d:7c:47:c6:08:4c:
                    6c:76:4f:1a:c0:83:3b:80:00:39:bd:58:77:1f:1f:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:3B:30:28:5E:DE:C3:6D:5D:A6:7F:89:C0:85:8F:30:08:8F:64
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/323830343a323938303a3a2f33322d3438203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2980::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:72:11:a6:74:06:0e:36:43:b4:e7:ca:58:2d:45:6c:e2:04:
         ba:58:f6:14:c8:a5:4a:0b:b3:a2:be:5a:f1:cb:bf:01:b1:3b:
         09:df:6c:9a:de:a5:bb:77:bb:da:f8:88:a9:3b:c3:c0:9b:5e:
         cb:11:5d:21:b8:62:9c:bf:6a:53:80:6c:86:30:ab:9d:8f:f3:
         1f:9f:9a:5f:8b:a9:3a:02:5a:90:5f:11:0f:1d:c9:b2:18:39:
         6c:f4:4c:48:cf:73:4f:67:84:ab:ee:bd:9b:6c:f8:f5:be:ba:
         6f:aa:91:a3:d7:fc:e3:0b:ce:33:03:6e:73:d8:56:dd:05:37:
         69:6b:33:21:a4:a1:da:60:c7:db:a8:9b:ce:76:a3:5b:e3:07:
         48:3b:9c:72:76:a4:31:ef:fb:91:2a:7c:6d:4e:fd:46:8b:e3:
         d1:2c:26:13:70:3c:fd:e2:84:0e:57:58:6f:e6:dc:d9:7c:d5:
         05:d0:d3:00:ff:ae:d1:a5:6f:50:47:38:48:33:78:8c:dd:4e:
         37:62:1a:69:d0:7e:4b:e0:e8:2c:b7:df:85:4a:c9:c5:6b:6f:
         52:49:60:e2:df:1d:64:1f:42:88:e6:9e:2f:17:ff:8c:4b:3d:
         12:2d:58:f4:84:98:05:b4:b9:68:86:4a:21:60:d9:7c:0f:c7:
         77:e9:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org