Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a323134303a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a323134303a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          dcr3nJ1ihL/r2zE/fWeOBPiFyrusqVR0eIyUHJc/14c=
Subject key identifier:   E9:61:3D:67:A5:E0:96:43:F2:9A:1B:97:DC:C8:4C:33:EC:D1:00:BE
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       272D6B82FFA6952BDC232D8E786AE64F33FDDE63
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a323134303a3a2f33322d3332203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:17 +0000
ROA not before:           Mon 08 Apr 2024 20:00:17 +0000
ROA not after:            Mon 07 Apr 2025 20:05:17 +0000
asID:                     28220
IP address blocks:        2804:2140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2d:6b:82:ff:a6:95:2b:dc:23:2d:8e:78:6a:e6:4f:33:fd:de:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:17 2024 GMT
            Not After : Apr  7 20:05:17 2025 GMT
        Subject: CN=E9613D67A5E09643F29A1B97DCC84C33ECD100BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:6c:a5:fc:66:a4:22:dd:16:84:bc:3c:90:
                    a1:30:94:a1:51:70:a5:6a:2b:7d:78:37:6f:67:4e:
                    c5:db:12:8d:5d:b2:05:9f:ea:46:f5:99:36:df:b0:
                    e8:39:56:85:6f:34:06:c1:03:89:75:0e:89:fc:df:
                    5e:20:a8:5a:24:25:d7:42:f3:6a:fe:16:72:3e:e5:
                    25:23:25:36:13:b2:4c:fa:69:25:f6:e9:c2:65:50:
                    92:a8:2e:e3:45:77:8b:fb:af:eb:f4:51:4e:49:30:
                    53:0d:76:be:64:b5:6d:d5:d8:35:86:a4:1f:e8:50:
                    f3:93:c4:44:01:11:d8:18:25:fe:b1:a6:17:93:44:
                    79:d2:de:b0:df:dc:40:45:00:1d:9e:99:bc:a9:07:
                    48:fa:12:bf:1a:ec:0f:2e:cb:5a:c3:18:03:02:96:
                    81:61:35:58:c2:7d:a1:d0:bc:af:4d:f1:a8:18:96:
                    3f:8d:78:af:e6:73:df:ea:06:80:f2:8b:93:bb:ec:
                    01:23:48:fa:9b:af:e3:8b:67:03:12:e2:67:d9:33:
                    5a:b4:9d:03:33:f9:ab:e1:20:61:ad:45:93:05:69:
                    d2:ed:33:64:76:05:03:2e:13:bc:6a:43:d7:c5:9c:
                    46:57:8b:df:94:34:3f:f8:65:e5:f4:11:e9:2a:a3:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:3D:67:A5:E0:96:43:F2:9A:1B:97:DC:C8:4C:33:EC:D1:00:BE
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a323134303a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:19:e8:46:6a:f8:42:ee:d4:91:f3:f3:ce:5b:82:74:b6:
         f7:66:24:19:c9:3d:2b:6d:7f:c3:b9:34:4d:34:f4:b5:ff:81:
         cc:9d:ac:0f:5f:3e:34:57:63:53:18:d2:62:ed:65:14:1e:72:
         df:cc:19:ab:84:be:a8:ab:21:41:ce:c8:19:6f:74:8c:1c:f7:
         eb:eb:33:86:d4:b9:73:65:25:02:1a:3e:3f:a8:1c:3d:ed:a1:
         4e:0c:0e:ef:b8:70:b8:0b:da:c4:a8:ed:f4:b1:7f:ec:ae:7f:
         16:a3:ce:45:30:42:15:3d:c3:ee:36:eb:ff:2e:70:24:c3:7c:
         e2:da:2a:ab:c0:50:d2:79:3b:70:3e:4b:68:37:63:2f:dc:b6:
         09:e5:98:30:9b:23:f0:0f:2b:ef:9b:e4:61:b6:5d:3b:d3:9b:
         36:b9:91:a3:b9:a5:e6:86:ad:9d:08:b3:cc:e6:5b:d9:fe:91:
         bf:5b:86:09:4b:0e:a1:7d:b1:f4:4b:01:21:ff:86:ba:c1:58:
         b4:d8:c5:f3:72:0c:b1:a3:e3:1b:67:53:28:22:92:37:cd:a3:
         ed:2c:cb:81:10:92:da:cb:1d:a8:db:bf:f7:2a:02:9f:e3:c8:
         e4:dc:5f:94:16:6d:0c:62:81:ca:1b:60:7d:e7:cf:b4:ca:ad:
         54:9c:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org