Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a3a2f33322d3335203d3e20323730333430.roa
File:                     323830343a366138303a3a2f33322d3335203d3e20323730333430.roa (raw, json)
Hash identifier:          e9EujZwhnFsBwrxFA8igJHhpiJqzBpqrldo7iqIkLUw=
Subject key identifier:   53:66:17:78:62:D2:BA:FF:1B:96:EB:42:6E:53:81:98:67:DA:E9:84
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       236D272EA1436CBFE8B0AB45212B744F98E86D67
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a3a2f33322d3335203d3e20323730333430.roa
Signing time:             Mon 11 Mar 2024 12:12:20 +0000
ROA not before:           Mon 11 Mar 2024 12:07:20 +0000
ROA not after:            Mon 10 Mar 2025 12:12:20 +0000
asID:                     270340
IP address blocks:        2804:6a80::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6d:27:2e:a1:43:6c:bf:e8:b0:ab:45:21:2b:74:4f:98:e8:6d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 11 12:07:20 2024 GMT
            Not After : Mar 10 12:12:20 2025 GMT
        Subject: CN=5366177862D2BAFF1B96EB426E53819867DAE984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:cf:bd:64:f9:d8:3a:ea:7b:11:4d:ab:59:
                    c7:9f:60:91:87:71:c0:b2:e9:e7:15:87:3f:14:97:
                    26:aa:22:6a:84:55:7a:61:09:88:19:fb:2f:da:2f:
                    01:4e:f3:32:5b:48:de:ba:c4:e9:bf:49:83:79:ae:
                    95:92:b8:bc:35:93:88:c9:2b:cb:c6:b5:1e:14:02:
                    a7:f1:91:30:37:20:cb:ce:ba:e7:92:01:ba:c0:90:
                    a7:4f:48:59:89:b5:37:4e:3c:5b:02:7d:69:31:e9:
                    af:52:50:12:d8:ba:d4:9e:6b:91:a8:61:50:fa:9e:
                    e4:ee:05:e2:44:0d:63:cd:13:8c:c4:2e:01:7a:d6:
                    d3:d9:6e:8d:86:b3:87:ab:d2:9d:e6:1d:7a:83:30:
                    0f:0c:0c:a3:24:49:d4:0d:2f:a4:41:a1:b6:d1:40:
                    85:62:25:02:f1:42:0f:9b:c5:ea:6e:89:6c:36:11:
                    ca:0d:2b:db:ee:dc:8f:4f:e4:f2:7f:f1:58:e9:8c:
                    be:16:26:44:ba:5f:f5:7f:7d:15:c1:e0:e6:32:73:
                    b8:5d:10:e7:b1:27:6a:3e:e4:be:7d:ee:0b:92:fe:
                    0b:a1:19:74:4a:8a:89:8b:a5:9d:f2:02:2b:2c:c8:
                    2f:95:b1:f6:10:d9:6f:19:64:29:16:d8:34:18:3d:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:17:78:62:D2:BA:FF:1B:96:EB:42:6E:53:81:98:67:DA:E9:84
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a3a2f33322d3335203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:15:0c:e0:ed:0e:ff:d3:79:60:27:d9:75:bc:83:f3:53:fb:
         96:4a:3c:0c:98:cf:f4:53:a9:e0:61:bc:f5:bf:4c:39:d6:90:
         da:74:52:2a:90:e9:51:66:d0:c8:19:79:71:59:24:b0:1f:49:
         70:df:6e:cd:9a:13:60:6b:80:a1:f1:7d:16:94:80:b7:5f:d2:
         5e:83:d0:01:33:5a:50:83:4a:b6:b3:66:d3:95:91:f4:72:e8:
         07:10:47:58:8c:c8:07:45:2e:a6:34:57:8a:c0:25:e7:9b:22:
         a1:97:75:04:c4:a8:1d:73:92:01:4c:cc:89:a6:47:cf:67:c5:
         7f:88:c8:f8:45:3d:a4:0e:3c:c6:86:d3:60:dc:27:27:0d:04:
         2e:11:65:70:0f:83:b0:4f:8a:38:69:fe:ec:9f:35:19:31:a8:
         0a:04:1e:58:bf:b9:b9:4f:c3:11:4b:9b:c6:9f:07:09:2c:fb:
         3d:5a:d1:06:d9:c3:13:4e:02:23:bb:c5:a5:4e:ea:0d:b0:9e:
         90:35:f3:d2:22:d8:39:b5:4c:b6:c7:e1:af:d9:ed:a2:1b:d0:
         e2:35:25:0b:ca:24:f1:3e:4b:4f:42:a2:b0:28:32:59:cb:20:
         4a:9e:51:3d:79:79:f3:c1:16:6a:a6:72:36:f8:27:b0:12:ae:
         a6:8e:0d:47
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUI20nLqFDbL/osKtFISt0T5jobWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMyQ0NENDM3MUI4NkJBRDEyQUFFQjJGODlGNTM2NjQ5
QjU0MDY4RDAeFw0yNDAzMTExMjA3MjBaFw0yNTAzMTAxMjEyMjBaMDMxMTAvBgNV
BAMTKDUzNjYxNzc4NjJEMkJBRkYxQjk2RUI0MjZFNTM4MTk4NjdEQUU5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMc+9ZPnYOup7EU2rWcefYJGH
ccCy6ecVhz8UlyaqImqEVXphCYgZ+y/aLwFO8zJbSN66xOm/SYN5rpWSuLw1k4jJ
K8vGtR4UAqfxkTA3IMvOuueSAbrAkKdPSFmJtTdOPFsCfWkx6a9SUBLYutSea5Go
YVD6nuTuBeJEDWPNE4zELgF61tPZbo2Gs4er0p3mHXqDMA8MDKMkSdQNL6RBobbR
QIViJQLxQg+bxepuiWw2EcoNK9vu3I9P5PJ/8VjpjL4WJkS6X/V/fRXB4OYyc7hd
EOexJ2o+5L597guS/guhGXRKiomLpZ3yAissyC+VsfYQ2W8ZZCkW2DQYPbu3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUU2YXeGLSuv8blutCblOBmGfa6YQwHwYDVR0j
BBgwFoAULCzNQ3G4a60SqusvifU2ZJtUBo0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMC8yQzJDQ0Q0MzcxQjg2QkFEMTJBQUVCMkY4OUY1MzY2NDlCNTQwNjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDMkNDRDQzNzFCODZCQUQx
MkFBRUIyRjg5RjUzNjY0OUI1NDA2OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNITENTMUU0UHgxR3YzUFQxcFFrcjNydUVDRVFxUlBDUTNaYzRncENvYmNjLzAv
MzIzODMwMzQzYTM2NjEzODMwM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNzMw
MzMzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARqgDANBgkqhkiG9w0BAQsFAAOCAQEAhBUM4O0O
/9N5YCfZdbyD81P7lko8DJjP9FOp4GG89b9MOdaQ2nRSKpDpUWbQyBl5cVkksB9J
cN9uzZoTYGuAofF9FpSAt1/SXoPQATNaUINKtrNm05WR9HLoBxBHWIzIB0UupjRX
isAl55sioZd1BMSoHXOSAUzMiaZHz2fFf4jI+EU9pA48xobTYNwnJw0ELhFlcA+D
sE+KOGn+7J81GTGoCgQeWL+5uU/DEUubxp8HCSz7PVrRBtnDE04CI7vFpU7qDbCe
kDXz0iLYObVMtsfhr9ntohvQ4jUlC8ok8T5LT0KisCgyWcsgSp5RPXl588EWaqZy
NvgnsBKupo4NRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org