Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa
File:                     323830343a376530633a3a2f33322d3332203d3e20323731353939.roa (raw, json)
Hash identifier:          VAoPV+9Co4FS5rQ+rXn/qazB5JCs3XRAQasFFwga3Vw=
Subject key identifier:   EF:55:B5:4C:09:C8:4A:00:B3:11:A1:E1:72:1A:B9:B5:88:B1:45:68
Certificate issuer:       /CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
Certificate serial:       251587C05D5FF9A3A54819765DA3E01858C6D1D4
Authority key identifier: 3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa
Signing time:             Thu 28 Mar 2024 22:04:54 +0000
ROA not before:           Thu 28 Mar 2024 21:59:54 +0000
ROA not after:            Thu 27 Mar 2025 22:04:54 +0000
asID:                     271599
IP address blocks:        2804:7e0c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:15:87:c0:5d:5f:f9:a3:a5:48:19:76:5d:a3:e0:18:58:c6:d1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Validity
            Not Before: Mar 28 21:59:54 2024 GMT
            Not After : Mar 27 22:04:54 2025 GMT
        Subject: CN=EF55B54C09C84A00B311A1E1721AB9B588B14568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:67:69:2f:0d:80:f7:0b:38:74:e1:4b:d5:
                    31:a1:0e:1a:3e:79:e1:ce:81:ec:fa:d6:ef:b0:2b:
                    bd:03:f6:ec:d1:5b:c8:88:f0:eb:ef:a8:40:cb:ca:
                    da:6a:de:b8:4b:b6:d2:b2:b8:a3:d3:e6:59:cb:38:
                    6d:cc:10:ad:03:e0:8b:5c:68:6a:ad:31:27:ef:fd:
                    13:33:02:9b:c0:7b:a6:3a:9f:45:bd:2a:e0:71:62:
                    99:da:c7:0e:03:9f:15:0b:b2:b8:5e:b6:81:0b:9d:
                    41:20:aa:a5:d8:8f:55:46:af:bd:b6:f3:6b:cd:50:
                    73:43:66:5a:d3:1d:c2:3d:b5:7a:07:69:d2:c0:70:
                    23:bd:1c:76:f7:67:81:25:40:4d:e1:f7:a7:63:24:
                    a8:89:ce:f6:74:b4:94:71:68:89:c3:8e:57:43:9d:
                    10:19:43:2d:9e:d8:41:27:7d:37:e5:3e:9f:0c:b3:
                    94:82:85:9f:34:71:e6:8f:db:31:ab:08:fc:fa:95:
                    6e:41:9e:70:7c:28:47:1f:eb:df:e8:5a:23:8d:28:
                    cb:ff:0f:67:e2:5d:72:d5:dc:1d:06:f4:08:09:92:
                    2c:3e:e6:d0:bf:80:5f:17:26:a2:c0:7f:c4:62:0c:
                    1f:c8:91:03:3e:e9:7b:09:d7:ec:d0:22:fd:39:ae:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:55:B5:4C:09:C8:4A:00:B3:11:A1:E1:72:1A:B9:B5:88:B1:45:68
            X509v3 Authority Key Identifier:
                keyid:3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:72:54:b6:dc:4d:d2:19:1f:04:88:0a:0a:76:76:6c:4a:
         a7:b9:60:43:30:8f:30:1a:62:fb:3a:c8:96:a2:10:14:21:63:
         eb:03:b9:a6:65:9f:0d:c4:bb:5a:2c:d3:ec:c8:8c:2c:8b:a7:
         84:28:72:19:04:0c:f5:f3:3a:72:c6:0b:df:86:29:dd:e2:c8:
         21:c7:1c:80:fc:6c:0a:87:94:f5:f4:0d:99:2f:cd:83:36:35:
         bc:c9:9c:66:35:17:90:3f:c6:b5:b8:db:de:ea:e0:cd:18:8e:
         6a:ec:9f:eb:03:8b:88:45:7e:c0:e6:12:0b:ef:46:61:fa:15:
         7b:3b:4a:8a:97:b5:78:2f:97:f3:3d:1e:56:be:cd:bf:3c:b5:
         7e:00:83:57:a8:ac:1b:ca:12:52:f6:86:7f:da:5d:60:e0:07:
         22:6c:f3:73:ce:2c:2e:d0:f6:c9:94:bf:73:c5:8e:f5:49:66:
         e9:86:cb:dc:bf:3f:d8:47:d7:78:6d:e8:50:95:6b:0b:7d:76:
         be:0a:c8:a4:1e:f3:dc:ae:16:c2:e9:cd:f6:c0:93:69:94:a2:
         84:47:75:f6:db:2c:ca:23:dd:c5:25:2c:37:e0:1c:dc:4f:54:
         72:ef:ff:9d:49:3b:ee:96:be:2e:28:2b:47:c3:af:da:a3:37:
         02:3d:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org