Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a3a2f33322d3430203d3e20323730333430.roa
File:                     323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (raw, json)
Hash identifier:          kZGR5gz/COrQlnT10nUaXSXlAdBWkKaJmxoyVBnJkV0=
Subject key identifier:   CE:0F:B0:6C:AE:A3:95:5F:89:0B:67:D3:AB:F3:24:11:DA:31:7B:FD
Certificate issuer:       /CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
Certificate serial:       226A618BD7BE870ECC1BAD866B1E320CA56F3835
Authority key identifier: 2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a3a2f33322d3430203d3e20323730333430.roa
Signing time:             Tue 12 Mar 2024 14:08:33 +0000
ROA not before:           Tue 12 Mar 2024 14:03:33 +0000
ROA not after:            Tue 11 Mar 2025 14:08:33 +0000
asID:                     270340
IP address blocks:        2804:6a80::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6a:61:8b:d7:be:87:0e:cc:1b:ad:86:6b:1e:32:0c:a5:6f:38:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Validity
            Not Before: Mar 12 14:03:33 2024 GMT
            Not After : Mar 11 14:08:33 2025 GMT
        Subject: CN=CE0FB06CAEA3955F890B67D3ABF32411DA317BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:8b:7c:66:41:da:e6:1d:2b:92:73:be:a8:
                    6d:d7:86:23:a1:e8:44:87:68:26:89:9f:5b:6b:16:
                    94:06:ab:ac:50:86:f0:07:9c:91:0f:40:0b:64:0c:
                    a1:25:c9:8a:a5:66:c3:41:9f:8e:5c:bd:c3:d0:0b:
                    78:cd:d2:35:13:f9:0a:51:ed:57:9b:27:cc:44:0a:
                    20:d8:5f:87:40:78:0d:d9:9c:2a:c6:02:e8:7d:ab:
                    bf:af:b0:04:e0:2f:e5:62:b7:83:5b:2b:dc:95:cd:
                    d6:d2:06:3d:e5:ce:c8:57:0e:ca:41:bd:6d:7c:18:
                    96:97:49:17:38:65:ff:62:ed:68:a9:37:5c:41:2d:
                    c4:ee:e9:58:f4:09:6a:a1:90:00:a8:42:1f:34:14:
                    ae:73:5a:0f:56:2b:7d:72:ff:e5:33:3b:76:f4:2f:
                    d4:1b:b7:a2:df:84:92:6a:8c:f9:db:46:24:d5:d5:
                    fe:a8:6a:8c:6e:ea:01:fa:82:be:9e:6d:03:0b:e1:
                    d4:0d:cc:66:6b:b3:29:5a:bc:80:de:c2:af:b9:de:
                    9c:79:ad:72:c0:8a:99:3c:77:17:c7:46:4c:9d:60:
                    4a:f8:38:45:35:04:a9:23:50:49:de:c0:d7:b2:5d:
                    67:83:39:bf:c4:9f:72:eb:31:2d:fd:31:0b:35:0f:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0F:B0:6C:AE:A3:95:5F:89:0B:67:D3:AB:F3:24:11:DA:31:7B:FD
            X509v3 Authority Key Identifier:
                keyid:2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/323830343a366138303a3a2f33322d3430203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:be:c7:47:c9:e0:49:bc:89:1d:be:55:97:a0:91:0b:5e:bc:
         01:c5:13:29:44:e8:5e:7e:c0:44:c8:9b:34:e3:dd:31:c0:8c:
         78:31:69:df:78:bd:b2:65:3c:ae:9a:d1:c1:e8:a8:c5:0d:cb:
         b6:e5:a9:09:7b:84:44:c5:d0:d3:e0:58:8e:ed:a8:0a:a4:b8:
         82:e0:9a:1f:4d:68:cf:27:80:19:b5:39:dd:6e:fc:d3:b5:cc:
         18:fd:8d:fc:9d:f0:2b:49:96:5c:7a:ea:1e:d8:e5:e7:7a:82:
         19:7d:c0:83:dd:0e:8c:29:dd:ce:2a:ba:bc:26:f4:5d:83:49:
         25:7e:9f:72:64:b5:67:9f:ec:a2:3c:6f:6f:88:60:4a:56:41:
         07:48:63:e1:47:9d:d9:5b:27:c8:b8:91:7f:16:73:04:43:fb:
         66:da:38:ee:3e:46:9e:4f:db:f9:68:b3:35:18:25:8a:0a:8b:
         02:17:30:24:ea:2c:fd:b9:1f:21:c4:5b:93:b9:48:ff:f4:8a:
         49:71:6d:d3:4e:c3:ed:a1:3e:13:a7:04:67:8d:77:eb:26:ba:
         83:f6:34:12:62:59:5c:93:50:be:6d:5e:a9:74:b7:97:f7:0c:
         a3:e7:48:4c:65:3a:b4:b8:93:36:b1:e2:b6:67:15:33:a2:79:
         37:05:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org