Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          elx4pSDPpcEhyEomqL7LRMiAKuvCcYig3DKbe/UdS9M=
Subject key identifier:   61:25:07:53:72:10:6B:FF:36:AD:8A:22:EE:A3:29:BD:86:8F:A6:EF
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       04AA585C8302B439BD1780F83C9912C3219660FF
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:12:53 +0000
ROA not before:           Mon 11 Mar 2024 12:07:53 +0000
ROA not after:            Mon 10 Mar 2025 12:12:53 +0000
asID:                     270340
IP address blocks:        2804:6a80:300a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:aa:58:5c:83:02:b4:39:bd:17:80:f8:3c:99:12:c3:21:96:60:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:07:53 2024 GMT
            Not After : Mar 10 12:12:53 2025 GMT
        Subject: CN=6125075372106BFF36AD8A22EEA329BD868FA6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:35:10:69:b1:5b:08:25:f7:f0:ca:7a:c2:
                    fc:8d:a8:81:2c:a0:20:91:30:e3:69:61:10:c4:73:
                    e4:c7:5d:a9:d0:bf:d5:f8:91:b9:2b:c2:6f:19:f4:
                    e0:2d:4e:03:b9:10:a5:75:74:72:22:72:b9:33:51:
                    96:1d:ca:21:cb:1a:e1:81:6c:1e:3b:78:f3:e1:db:
                    4d:19:93:f3:4e:20:60:c1:11:89:8e:80:8b:73:23:
                    c7:eb:36:69:7e:d7:dd:98:0f:d2:65:27:fe:81:04:
                    b8:a9:18:d1:32:11:3c:12:21:0c:1b:4c:b8:18:72:
                    42:93:71:15:43:3c:b4:15:d7:bc:7a:a6:ab:25:36:
                    61:c7:ed:ae:62:5d:f7:3d:58:64:e8:2a:5c:bd:d2:
                    41:37:c0:1a:41:54:a6:22:c2:67:e9:42:0d:6f:84:
                    29:db:7a:9d:17:19:01:6d:08:b7:1e:db:e8:ca:08:
                    59:e9:28:e3:61:26:0d:66:90:e7:01:23:df:e4:1e:
                    9b:c4:90:2b:c5:d1:ca:ee:c7:10:49:48:69:10:37:
                    91:7a:d1:03:76:57:9a:ce:f7:33:2e:08:a9:9b:e7:
                    56:ad:68:03:b6:9a:62:d3:a3:26:8e:ca:ab:f7:b4:
                    ca:ef:35:c6:6b:07:de:75:1d:93:ca:96:53:0f:a3:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:07:53:72:10:6B:FF:36:AD:8A:22:EE:A3:29:BD:86:8F:A6:EF
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:300a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:66:4b:c0:64:7a:53:8e:78:9d:f1:d6:1a:bb:c5:66:55:46:
         95:a0:a4:7b:26:17:f3:1e:42:f7:f8:f0:a9:e0:a8:9a:cf:71:
         86:08:3d:c2:61:29:45:5e:3b:98:a2:ef:b0:0b:cb:5c:9e:5d:
         70:9c:04:d9:e3:2e:63:83:d3:a8:cd:d7:f1:18:b0:f0:61:bf:
         99:ef:1c:2e:51:e8:2e:11:d4:1f:08:b5:e1:6a:bc:23:2b:e6:
         3d:d8:ca:25:88:48:30:a9:bb:d1:38:73:b0:1d:ce:03:a0:5c:
         12:7a:9a:b7:90:98:b5:c6:21:ff:c4:04:ce:d8:08:ae:b4:53:
         e1:96:10:c6:3a:49:bd:f4:7f:06:e6:30:8c:5e:89:be:57:f0:
         03:6d:9c:c4:42:40:6a:3b:02:d4:29:51:80:a7:6c:80:cc:81:
         7a:7f:1b:39:c1:79:30:7a:db:98:5f:f8:6b:ae:98:c9:b5:9f:
         4d:bb:63:63:43:d2:55:16:0b:23:77:7a:b5:80:99:e9:91:14:
         39:f1:6f:ea:a9:ba:ea:8c:ba:ac:51:10:e1:b5:04:3c:e3:71:
         66:59:51:8e:be:1d:a4:c4:31:6c:51:6c:ca:ae:c4:8d:0a:2a:
         bd:66:28:57:27:b9:13:3c:e4:08:c9:fc:da:a6:f7:b7:98:e9:
         a8:6e:73:54
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUBKpYXIMCtDm9F4D4PJkSwyGWYP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMyQ0NENDM3MUI4NkJBRDEyQUFFQjJGODlGNTM2NjQ5
QjU0MDY4RDAeFw0yNDAzMTExMjA3NTNaFw0yNTAzMTAxMjEyNTNaMDMxMTAvBgNV
BAMTKDYxMjUwNzUzNzIxMDZCRkYzNkFEOEEyMkVFQTMyOUJEODY4RkE2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbDUQabFbCCX38Mp6wvyNqIEs
oCCRMONpYRDEc+THXanQv9X4kbkrwm8Z9OAtTgO5EKV1dHIicrkzUZYdyiHLGuGB
bB47ePPh200Zk/NOIGDBEYmOgItzI8frNml+192YD9JlJ/6BBLipGNEyETwSIQwb
TLgYckKTcRVDPLQV17x6pqslNmHH7a5iXfc9WGToKly90kE3wBpBVKYiwmfpQg1v
hCnbep0XGQFtCLce2+jKCFnpKONhJg1mkOcBI9/kHpvEkCvF0cruxxBJSGkQN5F6
0QN2V5rO9zMuCKmb51ataAO2mmLToyaOyqv3tMrvNcZrB951HZPKllMPoyD7AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUYSUHU3IQa/82rYoi7qMpvYaPpu8wHwYDVR0j
BBgwFoAULCzNQ3G4a60SqusvifU2ZJtUBo0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMC8yQzJDQ0Q0MzcxQjg2QkFEMTJBQUVCMkY4OUY1MzY2NDlCNTQwNjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDMkNDRDQzNzFCODZCQUQx
MkFBRUIyRjg5RjUzNjY0OUI1NDA2OEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNITENTMUU0UHgxR3YzUFQxcFFrcjNydUVDRVFxUlBDUTNaYzRncENvYmNjLzAv
MzIzODMwMzQzYTM2NjEzODMwM2EzMzMwMzA2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEaoAwCjANBgkqhkiG9w0BAQsF
AAOCAQEAimZLwGR6U454nfHWGrvFZlVGlaCkeyYX8x5C9/jwqeComs9xhgg9wmEp
RV47mKLvsAvLXJ5dcJwE2eMuY4PTqM3X8Riw8GG/me8cLlHoLhHUHwi14Wq8Iyvm
PdjKJYhIMKm70ThzsB3OA6BcEnqat5CYtcYh/8QEztgIrrRT4ZYQxjpJvfR/BuYw
jF6JvlfwA22cxEJAajsC1ClRgKdsgMyBen8bOcF5MHrbmF/4a66YybWfTbtjY0PS
VRYLI3d6tYCZ6ZEUOfFv6qm66oy6rFEQ4bUEPONxZllRjr4dpMQxbFFsyq7EjQoq
vWYoVye5EzzkCMn82qb3t5jpqG5zVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org