Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa
File:                     323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (raw, json)
Hash identifier:          yDcOI0hwRzfzvzTHfjkpI9HDA80TWSVRkdpqKq+6zdw=
Subject key identifier:   4C:D7:A0:28:42:72:72:B8:7A:37:68:40:B6:71:A6:A7:48:C9:1E:2E
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       1F478CD53C80CC536686741F97B6A05DEF37D0D6
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa
Signing time:             Tue 12 Mar 2024 14:08:58 +0000
ROA not before:           Tue 12 Mar 2024 14:03:58 +0000
ROA not after:            Tue 11 Mar 2025 14:08:58 +0000
asID:                     270340
IP address blocks:        2804:6a80:3001::/48 maxlen: 49

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:47:8c:d5:3c:80:cc:53:66:86:74:1f:97:b6:a0:5d:ef:37:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 12 14:03:58 2024 GMT
            Not After : Mar 11 14:08:58 2025 GMT
        Subject: CN=4CD7A028427272B87A376840B671A6A748C91E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:72:c5:63:83:c9:26:1a:4b:a3:5a:28:1b:
                    bd:fb:c0:0d:b3:b8:2c:51:be:2c:2b:e7:2d:5d:8f:
                    b2:a1:f4:50:63:9a:d3:19:57:6a:59:c2:84:6f:92:
                    9f:43:ea:1e:34:24:ce:3d:07:6f:5d:f9:72:75:21:
                    c1:d5:3b:66:27:60:95:03:28:29:dc:c6:a7:8d:92:
                    1c:2b:2b:f7:fb:79:6d:f5:ac:7c:f7:2a:f2:49:92:
                    44:48:cc:a9:26:75:ca:77:81:42:f6:9e:19:39:96:
                    6e:7e:31:a7:e8:08:45:e2:d1:c2:8e:ce:51:ec:66:
                    a4:9d:82:59:8a:e5:a7:3d:bd:c6:85:0a:ec:55:19:
                    f6:e1:97:04:7c:11:d6:5b:c7:85:8f:33:63:0a:f7:
                    e2:ce:2c:59:4c:6a:d1:7d:b7:f6:80:93:e2:ba:d8:
                    d8:f4:14:41:86:57:ca:7d:5f:a9:7b:4d:8b:9a:1a:
                    4b:c2:22:53:da:16:b5:d4:73:71:97:7d:93:7c:31:
                    98:eb:9b:56:09:13:01:95:73:c7:3a:09:f5:e0:c3:
                    fc:16:41:93:55:d7:fe:0a:03:a4:d6:86:17:63:15:
                    a8:8d:8e:12:55:0f:bc:be:dc:ba:95:a4:99:c4:05:
                    dc:31:77:7f:77:dc:35:c1:4c:69:5a:75:61:8f:52:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:A0:28:42:72:72:B8:7A:37:68:40:B6:71:A6:A7:48:C9:1E:2E
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:80:42:3e:f4:d1:7d:35:41:5f:32:9c:26:6d:cb:a8:db:
         5d:e5:11:d6:6b:de:5b:48:8a:98:25:4c:5a:66:0d:6b:15:d7:
         5f:f3:0d:b1:1f:88:be:85:71:66:e2:e5:a7:c4:75:d2:a2:b7:
         b6:9f:a8:0e:d2:cd:2c:6a:3e:99:af:89:e9:b7:ef:30:38:3d:
         06:80:9b:c9:28:1e:b8:f8:38:37:86:29:11:4f:c2:1b:2d:6c:
         79:86:21:98:1d:79:f1:9b:ab:53:55:ee:08:29:1a:83:55:df:
         47:5d:43:d0:be:b9:d3:40:49:af:32:2d:28:7b:f8:2d:aa:59:
         f7:4f:e2:15:b6:46:1b:06:3b:be:d2:c3:b9:f3:b4:c3:0b:34:
         15:95:cf:c5:dd:39:4c:10:01:39:ca:51:f2:76:65:99:59:f9:
         14:01:94:9d:4e:14:c8:34:34:4d:e0:89:e9:13:5b:b2:63:3d:
         52:60:82:1e:00:01:4d:1b:8a:68:f2:54:cb:8a:e0:8a:dd:d2:
         de:56:f5:ef:e4:77:ae:68:be:2c:68:3e:d2:27:39:d6:2d:79:
         06:b4:2a:89:60:5d:a4:f8:92:8a:bb:85:71:4e:98:fe:34:b7:
         50:97:a8:97:7c:92:44:ec:05:ec:d3:9a:bc:03:13:01:ea:1f:
         c0:7c:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org