Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          Mc+EGECi4YwKXnsRUpZNotS4k11g2HyqGD8CNabzuFE=
Subject key identifier:   ED:AB:AC:51:B6:F8:85:CA:56:61:46:96:86:C5:FB:8A:2F:17:A6:3E
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       7C17B8A46C254FF227399B84B9CDA880137CD32D
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:12:58 +0000
ROA not before:           Mon 11 Mar 2024 12:07:58 +0000
ROA not after:            Mon 10 Mar 2025 12:12:58 +0000
asID:                     270340
IP address blocks:        2804:6a80:3011::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:b8:a4:6c:25:4f:f2:27:39:9b:84:b9:cd:a8:80:13:7c:d3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:07:58 2024 GMT
            Not After : Mar 10 12:12:58 2025 GMT
        Subject: CN=EDABAC51B6F885CA5661469686C5FB8A2F17A63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:c7:6e:90:22:37:5f:11:6b:3f:3c:36:ea:
                    3a:55:74:3a:ad:d6:e1:76:9a:9b:49:dc:68:2f:6e:
                    48:5f:10:59:3f:7b:a3:12:4e:09:98:6e:4a:39:f8:
                    a5:61:9a:4d:c9:e2:01:35:56:3e:0c:4d:06:db:6d:
                    f5:fa:ec:fc:ff:b2:23:26:3e:2f:65:7f:ff:5d:37:
                    57:77:90:2d:81:d9:20:b0:e5:3f:32:f3:c3:00:9d:
                    0f:c1:97:6d:f7:75:94:4f:7e:31:e2:49:ef:4c:52:
                    73:2e:46:c5:bb:9a:b9:fe:01:ff:3c:b7:74:cd:db:
                    a4:cf:6b:75:ab:26:cc:ca:de:7a:44:94:86:32:a0:
                    0c:25:31:f5:06:fd:12:39:5f:17:2e:8e:5c:e8:77:
                    ca:9e:cf:de:be:06:b3:3d:a3:f2:0b:80:9d:e9:0f:
                    d5:48:c6:4e:a4:47:24:c2:10:c5:9e:48:43:16:4d:
                    bd:2a:e7:6f:52:ca:12:d7:53:82:3b:1d:77:82:3c:
                    42:5d:72:ec:42:41:60:07:d5:54:17:8c:2a:e0:5f:
                    d2:cf:31:dc:29:09:30:f2:60:15:04:bc:2a:68:40:
                    58:26:51:81:70:04:ca:dd:9a:2e:85:d6:d2:54:b3:
                    f1:6f:c3:42:20:d4:51:7d:c5:e3:e2:8c:2f:5a:d0:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:AC:51:B6:F8:85:CA:56:61:46:96:86:C5:FB:8A:2F:17:A6:3E
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3011::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:d9:48:b7:72:2b:c8:4c:c3:7d:e8:83:20:e7:06:9b:53:
         cc:b4:ae:f1:54:1a:13:2f:76:da:27:b5:4a:ed:98:46:d7:60:
         0a:8c:f6:f6:1c:f0:62:94:b5:55:11:f8:b3:a9:42:e6:6b:27:
         64:0b:37:9c:35:ad:65:62:a2:8d:31:84:42:40:bb:df:54:3f:
         43:9d:e8:31:01:ba:39:3b:c4:93:68:0f:c8:bb:1f:50:65:67:
         d2:24:55:15:c9:36:e8:e4:ea:86:56:3b:5e:86:5f:d5:1d:6a:
         87:f0:66:8c:ee:ec:7f:46:16:ea:2b:0a:55:0d:3c:9c:45:42:
         0e:6d:28:e2:d5:8e:ad:e9:47:03:c7:de:2f:b5:15:c4:07:7d:
         a2:f9:03:25:28:3a:e4:ae:24:0b:7b:ac:ff:11:51:cd:f3:15:
         94:28:99:cb:a9:20:00:d5:8d:c5:57:17:94:cc:d2:27:a9:6a:
         9a:1a:49:33:94:62:88:b0:3a:c3:9f:68:b0:90:cc:8b:37:b6:
         e4:9e:2d:18:66:f4:15:3a:d9:9a:d6:5a:35:27:62:32:79:e9:
         36:34:7d:7e:6d:4d:9b:a9:b9:b2:0a:46:3d:c6:0d:4e:ba:ec:
         ed:67:96:08:88:e1:f5:75:58:e3:ad:be:5a:62:84:01:26:68:
         9a:8a:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org