Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3333203d3e203532363934.roa
File:                     323830343a6335383a3a2f33322d3333203d3e203532363934.roa (raw, json)
Hash identifier:          uNyHlwGi1KpO2xRffyTHZLKWMcrTjfYfanhPciSjyk4=
Subject key identifier:   29:54:69:C3:EF:0D:A8:B4:2F:24:79:6F:F8:BD:AB:38:73:91:D5:A4
Certificate issuer:       /CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
Certificate serial:       520C271582A1DF6F6EE8D7EC48D4323904E7AAC8
Authority key identifier: 3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3333203d3e203532363934.roa
Signing time:             Thu 29 Feb 2024 14:25:42 +0000
ROA not before:           Thu 29 Feb 2024 14:20:42 +0000
ROA not after:            Thu 27 Feb 2025 14:25:42 +0000
asID:                     52694
IP address blocks:        2804:c58::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0c:27:15:82:a1:df:6f:6e:e8:d7:ec:48:d4:32:39:04:e7:aa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
        Validity
            Not Before: Feb 29 14:20:42 2024 GMT
            Not After : Feb 27 14:25:42 2025 GMT
        Subject: CN=295469C3EF0DA8B42F24796FF8BDAB387391D5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:20:9a:d4:58:d9:e2:cd:be:e5:91:01:76:
                    5c:ce:dd:b8:69:0e:bc:75:c5:07:dc:0c:d8:76:18:
                    6a:c9:17:4e:b5:0b:f9:ee:61:16:95:ac:d7:ca:61:
                    aa:ef:2e:e8:9d:db:b2:17:5d:4f:69:90:ca:b3:82:
                    97:f2:af:0f:cc:26:bb:17:2b:e0:ed:77:6b:a5:e0:
                    79:20:1f:98:f8:d3:32:37:30:73:66:3b:49:e4:f6:
                    14:72:d8:04:a4:fb:3f:08:b9:0e:5d:a2:82:46:63:
                    83:24:08:9f:ab:f5:77:0c:18:7e:45:60:9c:c5:12:
                    04:f1:f8:2f:e9:1b:c7:9e:62:c7:0d:d6:8a:6b:07:
                    78:15:eb:cb:6f:27:57:17:83:2d:5a:78:d6:8b:1c:
                    e8:94:f3:4a:b9:5b:e3:ef:c9:c0:28:50:b6:39:5a:
                    34:71:b9:89:b2:08:ac:94:09:0c:f5:bb:11:40:c1:
                    2d:69:d4:84:a5:9b:ba:c9:6a:ac:15:b2:8c:d0:c3:
                    20:76:9c:43:6a:87:be:ba:43:78:2e:48:af:10:9c:
                    41:44:53:48:ef:15:95:1d:97:c9:80:31:a8:96:a1:
                    42:86:c9:60:ef:ca:41:c3:9e:8a:08:c6:bd:fe:9d:
                    d8:ee:6a:da:c2:6a:7a:67:81:84:c3:84:b4:3d:97:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:54:69:C3:EF:0D:A8:B4:2F:24:79:6F:F8:BD:AB:38:73:91:D5:A4
            X509v3 Authority Key Identifier:
                keyid:3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3333203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:a6:87:68:99:47:8b:10:48:67:41:3b:6c:63:8c:7b:4a:ad:
         f3:a1:29:1c:77:1b:88:73:e3:38:57:7b:92:d7:d9:da:28:6f:
         55:7d:1a:e5:b7:67:2e:5e:2a:1e:48:2e:1a:b2:74:0d:2d:1b:
         be:17:7d:c8:33:41:5e:ad:89:65:20:a0:ed:e1:d8:1a:29:45:
         ee:c9:77:b2:45:c3:36:a0:50:1d:ff:b4:a8:87:af:4d:3b:68:
         df:0a:6b:c9:5d:2a:68:f8:b3:61:a2:30:6a:73:03:50:3f:85:
         69:39:b8:21:da:77:c3:e2:a6:69:b8:a9:98:57:26:72:87:b8:
         d6:4d:bd:c9:51:81:31:ba:3b:9d:01:5f:76:64:bd:8e:78:04:
         02:85:88:15:9a:52:9e:33:9d:48:00:85:24:f2:19:de:5a:0e:
         b0:22:13:69:a3:cf:2f:46:ef:10:1e:94:c3:d9:57:f7:7c:7d:
         92:f5:b9:2a:40:ff:33:93:2c:eb:76:b7:e3:a1:9b:1b:cd:98:
         e0:7a:f1:ae:ee:85:6f:3b:c3:a9:a7:98:4b:c7:a7:0e:06:5c:
         ea:1b:7e:8c:20:f1:87:09:db:90:a1:f4:c7:a9:51:01:b0:1f:
         13:b5:66:03:38:95:31:04:33:d2:64:b2:66:0f:2a:ea:26:cb:
         04:a1:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org