Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          dI6NDd/elxUKPda/2U7hO7aUNCpY2X+QOsVdxf0DQCQ=
Subject key identifier:   B4:56:90:BF:9E:93:B6:E1:22:69:0A:A0:6C:D0:5D:7C:FB:1C:4A:1A
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       20E36B74C7DADDFAB055346AD2E706D668D08E8A
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:13:00 +0000
ROA not before:           Mon 11 Mar 2024 12:08:00 +0000
ROA not after:            Mon 10 Mar 2025 12:13:00 +0000
asID:                     270340
IP address blocks:        2804:6a80:3012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e3:6b:74:c7:da:dd:fa:b0:55:34:6a:d2:e7:06:d6:68:d0:8e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:08:00 2024 GMT
            Not After : Mar 10 12:13:00 2025 GMT
        Subject: CN=B45690BF9E93B6E122690AA06CD05D7CFB1C4A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:29:f7:20:d9:a3:c2:c4:05:15:bc:90:83:
                    33:29:23:c3:48:79:09:33:c3:16:62:9f:51:df:64:
                    ef:3d:46:44:79:6b:cb:1d:0b:0f:3b:2d:63:bb:bf:
                    44:06:2a:b3:05:e4:ae:05:a2:2c:bf:16:cc:8f:7c:
                    1b:54:1f:f2:76:b5:6c:58:53:35:81:38:8f:49:93:
                    e8:1d:96:4c:ad:6c:b4:f1:57:13:93:7d:e0:56:db:
                    44:34:1e:ad:40:9c:73:5c:73:28:6b:ae:dd:10:89:
                    70:f3:40:83:c8:84:3b:74:9c:fd:71:c5:22:47:4a:
                    f2:82:53:e8:91:fd:b9:a2:3d:ae:02:35:b4:72:b2:
                    e4:b3:9a:d8:3e:b5:ee:0f:e1:ab:83:e4:ed:47:1a:
                    54:09:3f:8b:6e:3f:33:b3:97:bc:f5:7f:45:7d:4c:
                    27:50:cc:9f:97:9a:25:cc:4e:ff:73:3c:6e:47:3f:
                    f4:9a:8e:5a:43:a1:05:62:5a:3e:68:54:a0:1d:1c:
                    ec:5d:17:51:e7:a0:14:17:de:5c:dc:2b:a6:b6:6c:
                    0b:88:92:8f:7f:4c:e6:1b:42:92:0e:ec:84:8a:e5:
                    fe:7e:15:ac:d0:22:68:f8:2f:97:77:5b:37:98:db:
                    32:8f:09:ff:82:54:25:8a:12:28:35:72:56:27:ab:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:90:BF:9E:93:B6:E1:22:69:0A:A0:6C:D0:5D:7C:FB:1C:4A:1A
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3012::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:4c:63:b0:0b:d5:0d:b5:8f:a9:ec:fe:87:56:d0:40:30:
         39:97:43:ca:a5:8f:40:3f:4d:cc:3c:71:3c:5f:ca:6f:3a:7a:
         b1:1c:0a:63:e9:28:23:44:42:b6:9f:1d:ef:27:28:95:18:d5:
         7f:49:23:1f:c0:31:a5:41:f5:d8:fc:fa:f9:ae:53:20:bc:d1:
         ed:24:ef:2c:96:ff:44:b9:7b:c1:ac:83:3f:dc:a2:95:ae:d9:
         35:09:43:72:01:2b:39:46:e3:23:0e:ec:3a:03:15:95:77:11:
         ca:54:1c:d1:5e:70:f9:e0:f4:2f:92:d3:b6:d1:8d:94:4b:61:
         7c:a4:bd:2c:03:18:cf:bf:39:cf:77:06:bb:b1:b1:95:50:8e:
         32:15:fa:73:db:34:36:8e:d2:65:c6:27:91:20:cc:8f:44:db:
         a5:68:a1:4f:d0:7a:3b:15:c5:06:ab:a6:21:b5:36:0f:27:87:
         04:31:7d:c5:a0:44:26:ff:ed:37:17:c6:04:43:6c:79:84:63:
         19:bf:95:87:3c:a7:2e:83:41:e3:52:59:7f:a4:21:66:97:52:
         45:d9:8e:65:8d:f7:59:3e:6f:d1:36:a6:2d:c8:9e:32:a7:0b:
         87:37:2d:ee:a9:0e:14:67:d8:fc:d1:12:e6:68:01:66:6d:57:
         2f:23:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org