Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          psRRTa86BST4obuLO8qryD4ddvXUb1oiZqGIDsqIbEY=
Subject key identifier:   6A:05:66:A2:C1:B3:F2:2A:AD:0D:C2:73:8B:03:85:C1:4D:E6:6F:B7
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       25E97DFCD9A90B2E752844905CD84079B67A6359
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:03 +0000
ROA not before:           Tue 16 Apr 2024 06:34:03 +0000
ROA not after:            Tue 15 Apr 2025 06:39:03 +0000
asID:                     262725
IP address blocks:        2804:3360:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e9:7d:fc:d9:a9:0b:2e:75:28:44:90:5c:d8:40:79:b6:7a:63:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:03 2024 GMT
            Not After : Apr 15 06:39:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:06:53:9c:81:7a:d9:fc:16:49:33:d6:8a:
                    3e:db:4d:dc:8e:79:75:2e:c0:76:35:6b:0d:7c:0c:
                    ed:87:24:29:a0:32:d7:1e:c7:e8:54:63:d3:4e:22:
                    dc:d3:d4:a2:bb:67:da:a0:36:d6:eb:b0:07:82:52:
                    6f:24:81:c5:b3:0b:09:98:2c:f3:69:70:26:4b:b9:
                    3f:71:cb:48:19:da:e0:06:03:a9:84:cb:04:53:71:
                    1b:94:ef:d3:88:ae:30:f9:d7:1f:b1:a5:fa:57:27:
                    18:f2:11:de:b1:53:ad:a6:74:48:6c:89:c9:c7:f4:
                    45:2d:d5:7b:c8:83:3a:02:e8:6c:fa:ec:92:c4:b4:
                    53:c9:92:ed:88:5f:46:b2:7c:04:96:52:c1:b2:95:
                    cb:60:35:c8:8f:32:41:dc:81:d8:fc:1f:3a:30:2d:
                    32:55:db:d7:a1:d4:3a:4d:37:90:8b:46:c0:0e:49:
                    50:2d:0c:f1:dd:9e:2e:3e:67:a0:f4:4f:4e:2b:3d:
                    8d:b5:0b:7d:56:2b:1f:3b:38:b3:5d:2b:f6:97:c8:
                    ba:5e:06:5a:da:e9:80:54:73:4c:50:81:a8:84:99:
                    f0:5b:e3:66:cb:9e:9f:08:da:fe:34:fa:c3:a7:74:
                    02:c9:04:5b:74:00:42:c2:77:27:d7:12:e8:fc:88:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:66:A2:C1:B3:F2:2A:AD:0D:C2:73:8B:03:85:C1:4D:E6:6F:B7
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:db:94:6c:9a:00:82:f1:42:88:e5:5e:e6:af:ae:72:70:
         de:ea:04:2b:0b:fc:07:61:e5:55:b0:84:0e:17:a4:b8:db:b5:
         37:a1:42:8c:cf:53:f7:14:17:2d:89:35:51:df:c9:06:01:06:
         aa:63:8a:a7:af:a5:dd:ad:18:44:c9:5d:33:6f:5a:b7:b2:4a:
         b3:95:06:6c:d7:16:d9:56:d8:01:a5:b4:1a:a8:45:52:9c:de:
         99:a5:d3:33:23:28:1c:14:13:2b:68:3d:0f:ad:57:57:dd:06:
         82:c2:e6:ed:26:c3:1c:b2:f7:4e:e2:c8:33:30:82:48:4b:c3:
         87:e3:c6:b4:b7:5f:f1:ac:b7:87:33:81:bb:2c:90:eb:e0:38:
         c9:6a:01:c9:49:0f:7e:b1:80:7a:5b:42:3c:0e:0f:cd:0f:eb:
         80:00:f5:34:77:fb:c3:d3:c9:c0:ed:54:85:fc:86:4c:58:8e:
         9e:73:c5:45:52:50:8e:1f:06:eb:10:8a:2c:13:32:22:04:6c:
         32:cf:1d:0e:61:a8:85:57:26:6b:c4:e8:f3:87:58:06:9e:d5:
         39:a9:b4:ff:99:e5:4b:58:b2:93:bd:f2:96:d9:a7:8c:2b:e8:
         66:ef:58:d8:f7:56:1c:31:76:9e:1f:45:fb:04:b3:84:c4:e3:
         9c:0d:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org