Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/323830343a383762343a3a2f33322d313238203d3e20323732373237.roa
File:                     323830343a383762343a3a2f33322d313238203d3e20323732373237.roa (raw, json)
Hash identifier:          N3NB2fnankypEndX18sHlOC1O/4NUtgiE4Ic99KtGFY=
Subject key identifier:   87:49:35:05:93:2D:90:6C:E5:E9:F7:DE:71:A1:01:87:6F:88:A1:02
Certificate issuer:       /CN=3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8
Certificate serial:       5A686B0B606F0A23F03DC100ADEE50AC2FFD7E73
Authority key identifier: 3C:43:DD:2B:D3:F6:88:66:AD:B7:8F:A7:B1:A4:32:A1:39:53:AD:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/323830343a383762343a3a2f33322d313238203d3e20323732373237.roa
Signing time:             Fri 01 Mar 2024 19:21:49 +0000
ROA not before:           Fri 01 Mar 2024 19:16:49 +0000
ROA not after:            Fri 28 Feb 2025 19:21:49 +0000
asID:                     272727
IP address blocks:        2804:87b4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:68:6b:0b:60:6f:0a:23:f0:3d:c1:00:ad:ee:50:ac:2f:fd:7e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8
        Validity
            Not Before: Mar  1 19:16:49 2024 GMT
            Not After : Feb 28 19:21:49 2025 GMT
        Subject: CN=87493505932D906CE5E9F7DE71A101876F88A102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:1c:09:d3:97:ce:69:11:db:39:9a:95:0f:
                    75:da:0d:92:9f:32:7c:b7:3f:8d:7e:ee:78:f3:b4:
                    65:e5:26:76:79:48:b8:07:b2:b6:39:29:81:a8:9f:
                    80:e7:67:34:2d:84:48:cf:12:c1:e4:b9:80:a5:5f:
                    a4:c9:cf:35:ce:a5:39:de:67:f0:13:7d:b6:3f:1f:
                    1f:56:bc:11:26:a6:09:42:85:5e:5e:20:3f:69:70:
                    1d:b7:f6:a0:ce:b0:6f:d0:cf:4a:89:8f:56:c1:59:
                    8a:02:c8:69:36:b5:de:25:ed:f9:ee:b5:3c:2d:59:
                    23:52:48:12:28:f2:0a:1b:5b:12:6a:c1:52:f5:d4:
                    89:32:8f:7b:5e:ef:58:dd:fc:d1:1d:bc:24:c6:70:
                    ad:9c:ad:db:9c:ff:4f:77:92:cd:42:8d:9b:6e:50:
                    4b:00:d2:3b:e4:07:85:f0:d8:87:15:f0:94:bc:05:
                    d1:79:44:1e:3f:2d:72:00:4e:b7:4a:36:28:5e:f1:
                    39:51:87:a4:ce:fe:28:76:10:3f:c1:09:36:aa:b8:
                    71:01:5b:90:97:b0:a6:62:51:f3:aa:28:3f:69:8d:
                    ba:5d:10:66:2b:d7:d9:24:e8:85:90:27:8d:11:eb:
                    a3:85:1e:a0:62:c5:48:f4:84:6f:f2:a2:6f:a3:ca:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:49:35:05:93:2D:90:6C:E5:E9:F7:DE:71:A1:01:87:6F:88:A1:02
            X509v3 Authority Key Identifier:
                keyid:3C:43:DD:2B:D3:F6:88:66:AD:B7:8F:A7:B1:A4:32:A1:39:53:AD:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/323830343a383762343a3a2f33322d313238203d3e20323732373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:75:62:2c:51:e3:eb:a9:4a:81:8d:8d:22:46:8a:c0:75:3c:
         c3:89:2f:8c:ac:9c:0c:fd:bd:04:d2:34:1c:36:bc:17:3d:4e:
         08:cf:fa:62:bc:3e:a8:2c:a2:95:f7:17:f6:bc:99:b8:23:7a:
         e8:f1:e7:75:7a:10:b0:5b:c6:a9:79:cf:aa:aa:84:b0:95:e7:
         4f:a8:dc:ef:13:bc:72:53:0a:29:9e:e8:da:11:db:15:0d:66:
         65:8a:61:64:2d:9b:7f:7e:6f:08:81:2d:41:13:8a:3f:34:5e:
         21:62:01:3f:c1:7f:4d:f3:b4:52:88:d8:67:f0:4c:7a:f0:02:
         5b:12:41:5e:fb:97:2c:07:b3:45:65:73:3d:dd:5c:2b:6b:82:
         40:b4:87:96:b9:73:70:0d:89:7e:c7:68:b3:c0:bc:a4:28:39:
         30:a0:b9:f1:a9:00:f7:28:9e:94:0c:75:ed:fa:26:b4:4c:97:
         40:07:bd:46:6b:d8:f7:58:0c:55:23:5e:a1:2e:47:d5:e0:a3:
         93:8e:ce:d3:78:dc:7f:49:27:2b:d4:f2:f2:9b:47:e7:c9:aa:
         25:00:a0:25:80:58:80:d9:5a:8e:c2:d1:a7:56:c1:80:41:24:
         ee:f8:ba:fa:e5:0f:4c:0b:ce:59:27:bd:6b:d4:f7:3a:54:34:
         00:06:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org