Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a353030303a3a2f34302d3430203d3e20323730333430.roa
File:                     323830343a366138303a353030303a3a2f34302d3430203d3e20323730333430.roa (raw, json)
Hash identifier:          LQr8rr45QjzTIVJD7LgvA/dMl2LmUhXeNN1oIEkCOec=
Subject key identifier:   A1:C6:D0:13:D2:17:2B:E3:07:ED:56:15:1E:F9:32:5C:27:C0:E9:C5
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       0DF7C881F742D96A50542EAA3F435F61DAA14346
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a353030303a3a2f34302d3430203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:13:06 +0000
ROA not before:           Mon 11 Mar 2024 12:08:06 +0000
ROA not after:            Mon 10 Mar 2025 12:13:06 +0000
asID:                     270340
IP address blocks:        2804:6a80:5000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f7:c8:81:f7:42:d9:6a:50:54:2e:aa:3f:43:5f:61:da:a1:43:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:08:06 2024 GMT
            Not After : Mar 10 12:13:06 2025 GMT
        Subject: CN=A1C6D013D2172BE307ED56151EF9325C27C0E9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:7b:ad:d8:af:2b:82:28:d6:62:85:6d:b6:
                    9d:93:f3:f7:bf:13:3a:dc:40:9e:f2:14:cd:bb:8e:
                    93:fb:fe:a6:32:80:d7:74:a8:5e:e9:d4:26:9d:7b:
                    30:bd:0e:4d:cf:58:c7:16:7f:8b:6a:d9:4a:42:28:
                    87:44:72:f9:01:5f:6c:12:28:87:1a:3a:2c:66:ab:
                    d6:0f:68:e9:e3:b1:9c:f9:16:a5:36:3f:ba:79:0d:
                    a2:de:f9:97:83:dc:4f:62:0a:ab:79:74:92:b6:f8:
                    4a:a0:21:67:7a:c6:ff:a2:71:6b:99:49:dc:d6:0c:
                    98:11:6c:4b:e5:17:b2:c8:15:80:a1:89:04:48:41:
                    93:99:ff:9d:fa:ab:b3:ed:a3:2d:19:a2:6a:a5:42:
                    15:4e:81:20:6c:ec:b6:8d:d5:9c:c3:f6:d5:03:84:
                    aa:c5:e9:83:38:6e:2c:6d:98:31:9c:d4:4c:ac:3d:
                    03:16:54:b6:9c:2a:84:65:77:a4:db:43:b0:00:4e:
                    95:ac:b4:2f:5b:c8:3f:cf:4d:3d:e0:35:e9:48:f9:
                    93:38:8e:36:b9:4d:18:95:c8:ca:4f:ff:b6:83:c3:
                    bc:e9:a7:0f:08:3b:3d:52:1b:c3:bf:4e:4b:32:ce:
                    6d:9e:78:ff:05:6f:49:1e:3c:96:b0:be:28:ee:42:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:D0:13:D2:17:2B:E3:07:ED:56:15:1E:F9:32:5C:27:C0:E9:C5
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a353030303a3a2f34302d3430203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:2c:a2:04:fa:e2:31:93:e7:23:89:03:16:8e:48:83:99:
         08:c1:f0:a5:dc:19:45:a2:e2:0b:64:15:4e:0f:70:5b:4a:0e:
         63:e6:0a:5c:f1:53:09:21:86:23:52:fe:bf:94:23:7a:fb:3b:
         8d:65:5c:3b:84:4b:25:61:82:70:7a:79:df:92:2f:c9:03:70:
         d1:6f:f4:ce:b3:5a:a2:4b:55:f4:00:51:d2:29:3a:af:4a:f0:
         6a:cc:36:36:ff:2e:c1:2c:c1:59:0e:1e:16:9b:f2:a8:93:60:
         19:c2:5d:1b:ad:a7:6a:7a:00:65:03:03:45:90:37:f4:95:ec:
         8f:d3:b8:44:c5:89:94:86:df:bb:4f:9d:09:01:b6:04:e2:8e:
         aa:54:17:6e:9d:d0:36:ea:b3:6d:9e:35:23:87:96:4e:db:6c:
         22:89:f0:81:11:6e:96:97:95:96:56:7b:13:1b:de:41:05:79:
         7b:4a:14:54:cc:48:06:61:12:60:8c:d2:4a:a4:74:48:1e:69:
         be:02:b8:2f:36:3c:a8:8b:a9:0b:4a:c4:f0:fe:2e:06:35:21:
         09:c0:06:d6:30:a4:1d:e3:a1:df:a6:83:84:ed:08:95:6e:00:
         c4:21:cd:e7:c3:22:9f:ad:5b:52:a2:01:ee:99:95:81:fc:8e:
         5e:26:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org