Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          Fc5nGa2GJh3cjc9BrHv7XwsFtGJSoN8SAnFepSZwLfM=
Subject key identifier:   0B:C6:90:50:74:06:39:C1:F4:30:2B:46:27:F8:6F:9A:4B:0D:98:27
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       49E45AAD92C357D747CC13C6BEB3041A9B2702E3
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:12:43 +0000
ROA not before:           Mon 11 Mar 2024 12:07:43 +0000
ROA not after:            Mon 10 Mar 2025 12:12:43 +0000
asID:                     270340
IP address blocks:        2804:6a80:3006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:5a:ad:92:c3:57:d7:47:cc:13:c6:be:b3:04:1a:9b:27:02:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:07:43 2024 GMT
            Not After : Mar 10 12:12:43 2025 GMT
        Subject: CN=0BC69050740639C1F4302B4627F86F9A4B0D9827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:36:e3:29:06:39:14:3c:cd:99:23:ac:11:
                    7f:05:a4:d0:2b:9c:2d:ce:35:e5:06:d8:b1:dc:3a:
                    40:6a:70:21:3d:19:22:e7:b4:71:b4:56:2f:8c:67:
                    40:67:bd:99:c2:66:76:8e:e0:a2:7a:b2:ac:6c:52:
                    67:f3:64:80:de:77:76:c5:09:d9:e3:34:fb:9b:0b:
                    db:e9:83:00:62:a1:9d:89:bf:b8:01:56:3d:9e:90:
                    d8:70:39:ad:61:6c:a5:5f:b7:b2:bb:94:6b:9c:7b:
                    10:8b:47:c7:f7:11:f7:36:8f:f6:09:95:e9:b8:a1:
                    21:da:bd:fe:ee:8e:e9:e8:ce:25:7d:c8:bf:05:84:
                    2b:10:76:e1:05:8d:19:5a:57:0a:74:dc:e5:65:6f:
                    53:61:c8:b9:f5:1e:fb:be:dd:40:86:d1:59:88:b5:
                    2f:d1:cd:1c:66:4e:d2:2b:eb:41:b5:a0:85:54:79:
                    31:4a:ca:ac:0a:d0:43:2a:da:60:14:9f:94:48:b1:
                    33:38:7f:76:78:21:a7:ff:fa:1d:5f:36:03:0e:c7:
                    5c:83:22:bf:d1:d4:4a:17:2a:0e:29:2c:5e:7e:5c:
                    17:92:40:2e:b2:45:81:7c:5d:08:ac:fb:9d:bc:5d:
                    96:fc:89:2a:b7:cc:23:4f:17:8a:ae:f1:d8:ed:1d:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C6:90:50:74:06:39:C1:F4:30:2B:46:27:F8:6F:9A:4B:0D:98:27
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3006::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:41:70:cb:81:fc:98:6d:8a:ec:0f:42:fc:96:2a:be:b0:fb:
         45:e5:4a:aa:50:8c:d9:66:f6:8b:69:b2:fa:47:c5:3b:a5:79:
         92:f8:d6:fc:e9:d4:fc:27:70:3a:01:10:47:e4:ab:16:c6:0e:
         f7:38:2c:0e:bd:e0:f5:b1:3a:39:c5:40:46:6c:41:58:7f:87:
         95:2b:7a:42:77:b3:d1:a1:e3:7b:29:9a:f6:46:43:38:3c:6d:
         a9:00:28:9a:a0:a3:8f:96:33:7a:b2:a0:7c:83:05:00:1b:58:
         e8:6e:2a:68:bf:c9:22:dd:c6:00:4c:66:4e:d8:99:2d:73:8e:
         28:14:fb:b3:2a:55:75:3e:3d:7f:d8:66:33:39:45:da:e9:07:
         b3:1f:c9:d6:6a:47:a3:d3:cf:5f:fb:28:94:b1:31:a6:4d:98:
         c8:35:25:8f:5d:61:04:fd:a3:97:9b:da:ca:56:8a:db:ba:d4:
         dd:fd:da:48:8a:6c:41:0e:6d:70:1e:bc:63:33:bc:89:01:8f:
         83:be:3c:af:5a:01:c8:be:f2:b1:2b:0c:32:bd:76:90:0a:f9:
         cc:a5:c2:0b:1b:2a:8d:6f:e7:eb:8d:09:90:10:87:4e:ea:1e:
         a4:97:bd:cc:34:24:31:a2:8f:f4:ba:26:54:79:fa:bc:f8:29:
         9f:33:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org