Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          r7qiI66KgAaIubnZEMCxmvxxw0Yuha9w68Z2oKUVaZk=
Subject key identifier:   D0:6E:AA:22:8F:B6:B8:52:51:48:CB:BF:1E:AE:CE:46:8F:E0:5D:7D
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       588976D84118147DD3C760474E0E6951557B88C3
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:13:02 +0000
ROA not before:           Mon 11 Mar 2024 12:08:02 +0000
ROA not after:            Mon 10 Mar 2025 12:13:02 +0000
asID:                     270340
IP address blocks:        2804:6a80:3013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:76:d8:41:18:14:7d:d3:c7:60:47:4e:0e:69:51:55:7b:88:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:08:02 2024 GMT
            Not After : Mar 10 12:13:02 2025 GMT
        Subject: CN=D06EAA228FB6B8525148CBBF1EAECE468FE05D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:18:f1:0a:ac:d3:64:0b:be:10:c5:ac:ac:
                    71:92:3e:3b:62:d0:b0:48:6c:01:3b:01:1b:00:35:
                    25:5c:40:c4:6b:a8:e2:64:09:70:aa:37:c0:68:f4:
                    f4:c5:29:d0:53:61:56:05:bb:1b:af:ea:69:53:eb:
                    c9:95:95:d1:c4:ac:9f:a6:de:98:77:be:fd:da:9a:
                    ee:6d:b2:df:77:6f:8c:bb:0d:dc:22:cd:0a:83:2c:
                    19:1f:63:35:59:a0:71:51:12:45:c2:da:e6:ed:2c:
                    03:42:8f:cf:a4:2d:eb:6d:22:d5:ee:53:d1:ac:47:
                    f9:50:af:42:90:46:f6:76:c5:4f:99:75:26:03:60:
                    28:75:69:ea:61:16:89:e3:be:13:1d:54:b9:58:42:
                    e1:4a:97:37:55:8d:14:e1:be:44:69:73:e2:f3:b3:
                    9d:5b:dd:01:2f:0a:85:5a:03:80:77:68:21:8a:b3:
                    09:5d:8d:10:01:d2:16:ec:31:47:e9:42:43:3c:f8:
                    93:26:b4:23:a0:d9:6f:d3:bb:f9:a8:7a:5a:bb:c5:
                    93:3a:f5:24:90:1b:26:99:a3:c8:93:3a:c7:1d:b5:
                    7b:75:25:66:74:ea:f8:2a:09:ea:23:5d:19:c2:3b:
                    7b:70:30:49:3d:99:1f:4f:82:9b:a1:1c:50:24:83:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:AA:22:8F:B6:B8:52:51:48:CB:BF:1E:AE:CE:46:8F:E0:5D:7D
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3013::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:b1:8c:e3:85:3d:b5:13:ef:0a:94:05:88:eb:e8:69:4c:
         32:41:01:84:07:b3:18:12:a3:d5:72:71:c2:62:7e:2a:c8:a5:
         7b:1b:31:d2:21:d4:66:8a:61:89:6d:01:e6:fa:13:96:3a:e4:
         08:a6:cf:a7:1c:29:a2:38:d3:8a:ba:99:10:51:1c:40:2e:1a:
         b1:bc:ff:98:33:d0:fb:69:74:93:c2:8b:8e:82:87:86:dd:eb:
         20:c1:20:38:94:40:bc:20:e7:3b:71:0f:b7:5c:d9:dc:73:99:
         2c:ef:c2:aa:3a:57:db:7a:54:dc:c7:1c:22:e9:9b:59:9a:ac:
         f0:bf:58:33:33:43:94:56:f3:b8:f9:a5:9a:53:fa:7e:1e:bf:
         c7:4b:f7:61:5c:09:16:4b:42:67:c9:6d:d6:e0:ad:43:83:3c:
         1b:eb:b6:fe:0f:96:eb:0f:7d:6b:21:60:de:c0:59:2c:81:8c:
         0e:a1:31:b1:e7:36:93:d4:c6:ad:52:29:08:71:77:e4:58:8f:
         d4:b6:be:a2:37:cb:7b:7f:1d:b1:52:91:5f:e3:6c:5c:e2:41:
         0d:bb:ce:1c:08:87:bb:0b:ad:f4:4c:8b:66:81:05:8f:ee:e3:
         40:27:e9:a7:dd:7e:5e:bc:35:99:70:11:6d:31:8a:09:6d:56:
         d6:83:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org