Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/323830343a363935633a3a2f33322d3336203d3e20323730323635.roa
File:                     323830343a363935633a3a2f33322d3336203d3e20323730323635.roa (raw, json)
Hash identifier:          wvOiL+lANwrVI/Y+UuP5e8ghTj4r5KFGXlyaBlrBJPQ=
Subject key identifier:   D0:0B:88:E7:26:C2:E1:FA:43:11:D1:02:52:88:04:E3:E2:85:0A:0D
Certificate issuer:       /CN=C3EC7319E511D657616F58D9BD22B1337AE45836
Certificate serial:       4057F4B42BA0C7785DB6F84BE9D5F0F6B86F7ED8
Authority key identifier: C3:EC:73:19:E5:11:D6:57:61:6F:58:D9:BD:22:B1:33:7A:E4:58:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EC7319E511D657616F58D9BD22B1337AE45836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/323830343a363935633a3a2f33322d3336203d3e20323730323635.roa
Signing time:             Tue 06 Feb 2024 05:25:11 +0000
ROA not before:           Tue 06 Feb 2024 05:20:11 +0000
ROA not after:            Tue 04 Feb 2025 05:25:11 +0000
asID:                     270265
IP address blocks:        2804:695c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:57:f4:b4:2b:a0:c7:78:5d:b6:f8:4b:e9:d5:f0:f6:b8:6f:7e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3EC7319E511D657616F58D9BD22B1337AE45836
        Validity
            Not Before: Feb  6 05:20:11 2024 GMT
            Not After : Feb  4 05:25:11 2025 GMT
        Subject: CN=D00B88E726C2E1FA4311D102528804E3E2850A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:1f:33:a4:67:6b:4e:53:38:58:3d:4b:ff:
                    71:11:e2:a4:7e:89:00:26:e1:3b:f2:09:9f:51:e5:
                    af:71:3a:1a:2a:7d:c7:50:3f:46:16:91:d1:3c:cd:
                    3c:98:94:6e:18:a4:ab:32:81:47:29:02:49:ae:cf:
                    6a:3f:c4:88:5d:fa:b3:68:75:cf:8e:8b:5f:fc:03:
                    99:37:cd:d3:c8:bc:e4:1a:77:5b:94:e1:d7:96:92:
                    90:d9:7a:44:c5:5e:12:09:44:f5:b5:34:70:e3:f5:
                    0d:77:4c:72:9c:ed:7d:75:49:9d:b4:cc:54:69:01:
                    4e:a2:29:8c:14:ca:f9:bd:9d:a0:b7:b1:2e:c7:ed:
                    4a:ec:7e:57:08:9a:3e:2f:27:8c:0a:63:4f:19:cd:
                    28:b7:dc:61:a6:81:a6:bf:70:15:d3:23:40:ca:55:
                    7d:20:3f:c7:f4:b0:c4:42:ac:fe:18:18:da:e9:8a:
                    6e:7d:c4:af:40:38:fa:5c:fc:94:29:c8:af:c2:d1:
                    4b:5a:0a:ec:9c:89:5a:62:40:3d:32:29:d7:5b:5e:
                    86:3c:53:83:f5:7b:c9:11:c2:7f:f2:c4:53:88:8e:
                    e7:ab:45:9c:8d:b9:1c:dd:f8:b6:1b:31:e5:72:98:
                    7a:29:0d:50:cc:00:2a:09:be:22:c1:77:06:3c:78:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:88:E7:26:C2:E1:FA:43:11:D1:02:52:88:04:E3:E2:85:0A:0D
            X509v3 Authority Key Identifier:
                keyid:C3:EC:73:19:E5:11:D6:57:61:6F:58:D9:BD:22:B1:33:7A:E4:58:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/C3EC7319E511D657616F58D9BD22B1337AE45836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EC7319E511D657616F58D9BD22B1337AE45836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/323830343a363935633a3a2f33322d3336203d3e20323730323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:695c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:82:bb:d7:61:f4:f0:f8:4f:d2:2e:d2:f9:dd:47:3b:e5:
         6b:8d:59:61:37:15:10:cc:3b:f3:19:92:59:25:65:b0:db:4b:
         e8:3a:2f:ec:3b:ae:c2:91:82:15:d1:7a:65:db:37:f6:94:1b:
         1b:0b:ba:f5:b2:77:de:39:3c:36:2b:4c:fb:89:81:4e:23:fb:
         57:86:b6:d9:9b:b5:56:2c:e8:6c:75:9d:68:50:07:bc:a9:a8:
         8a:04:83:97:b6:2f:6d:72:8b:61:d4:33:05:bb:3c:34:1e:f0:
         00:4d:90:8d:2b:0b:88:30:3d:6b:df:2d:55:de:8e:5f:8b:50:
         1d:4d:7b:aa:3e:68:88:57:bd:f1:af:7b:a1:1c:b9:eb:cc:80:
         13:8e:e1:43:6a:47:7d:66:02:0f:21:fd:d3:e4:aa:eb:df:75:
         7b:a5:9f:82:96:f5:97:2c:13:eb:1b:c2:06:1e:08:f3:f3:7d:
         4b:cc:97:9e:5f:8c:ab:33:52:a1:da:f9:98:b0:99:4f:21:b2:
         b7:53:3e:d6:0e:07:43:1a:a3:27:92:16:68:aa:eb:b6:d6:c7:
         5d:af:0f:ee:e0:ea:86:b1:bb:79:1c:48:f7:f6:9d:08:85:7c:
         b2:e2:81:a2:b3:bb:c1:b3:7d:22:32:82:66:4b:8b:a6:e4:02:
         b5:74:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org