Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a3a2f33322d3338203d3e20323632373235.roa
File:                     323830343a333336303a3a2f33322d3338203d3e20323632373235.roa (raw, json)
Hash identifier:          wErNIB37nMDjd6238JmLEKMBeji+gopuCDGifPD2IzA=
Subject key identifier:   AD:0C:BC:FB:DD:FF:BE:F2:76:83:10:B0:01:F6:A5:7F:A9:37:4A:79
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       0C62C23E780F32594AE5FF2E840172D95396FA60
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a3a2f33322d3338203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:55:32 +0000
ROA not before:           Tue 16 Apr 2024 06:50:32 +0000
ROA not after:            Tue 15 Apr 2025 06:55:32 +0000
asID:                     262725
IP address blocks:        2804:3360::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:62:c2:3e:78:0f:32:59:4a:e5:ff:2e:84:01:72:d9:53:96:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:50:32 2024 GMT
            Not After : Apr 15 06:55:32 2025 GMT
        Subject: CN=3082010A02820101009E0B809F9F1E3AF0367E386898E875C75E9635E8F5940AC092B833751631E1A70909DEC45AC58AF74F4078AA9680060BD2063330896F028CAB7558E7CB5AA211AE977C2B128961F2148CEC187085CCB6A7842E383193C317B397CA58D18C4D931600BCBD06DA277C285950A39EA5C2B692B9D6F5E2FCC905A6DCF3F540D0B84E2B3C3CE291C3BD3304018ADFA176A0DE77562550AABADEEBF4D4B3D5F7B7F9EC9D94F41184FDD9DDAE5744BC797EC76BAE07D8E5F3F8C0E480B3D95310C2E20491B1F686FFF8E112F23CB2AFAA3A269FE71EFEB1F94B481F3CFD2F6BA6CF22C5C8B756ECCC3C7C2BEA054D78BA795FD480A9C5A23627DC2F1F21A66E0B3401810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:80:9f:9f:1e:3a:f0:36:7e:38:68:98:e8:
                    75:c7:5e:96:35:e8:f5:94:0a:c0:92:b8:33:75:16:
                    31:e1:a7:09:09:de:c4:5a:c5:8a:f7:4f:40:78:aa:
                    96:80:06:0b:d2:06:33:30:89:6f:02:8c:ab:75:58:
                    e7:cb:5a:a2:11:ae:97:7c:2b:12:89:61:f2:14:8c:
                    ec:18:70:85:cc:b6:a7:84:2e:38:31:93:c3:17:b3:
                    97:ca:58:d1:8c:4d:93:16:00:bc:bd:06:da:27:7c:
                    28:59:50:a3:9e:a5:c2:b6:92:b9:d6:f5:e2:fc:c9:
                    05:a6:dc:f3:f5:40:d0:b8:4e:2b:3c:3c:e2:91:c3:
                    bd:33:04:01:8a:df:a1:76:a0:de:77:56:25:50:aa:
                    ba:de:eb:f4:d4:b3:d5:f7:b7:f9:ec:9d:94:f4:11:
                    84:fd:d9:dd:ae:57:44:bc:79:7e:c7:6b:ae:07:d8:
                    e5:f3:f8:c0:e4:80:b3:d9:53:10:c2:e2:04:91:b1:
                    f6:86:ff:f8:e1:12:f2:3c:b2:af:aa:3a:26:9f:e7:
                    1e:fe:b1:f9:4b:48:1f:3c:fd:2f:6b:a6:cf:22:c5:
                    c8:b7:56:ec:cc:3c:7c:2b:ea:05:4d:78:ba:79:5f:
                    d4:80:a9:c5:a2:36:27:dc:2f:1f:21:a6:6e:0b:34:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:BC:FB:DD:FF:BE:F2:76:83:10:B0:01:F6:A5:7F:A9:37:4A:79
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a3a2f33322d3338203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:cc:3c:9d:6b:1b:13:4b:49:c7:24:8b:99:19:25:bf:51:
         87:c7:0a:fb:21:92:00:5d:8e:9f:73:ff:30:05:fa:26:7e:2f:
         1e:7c:84:dd:77:cb:1f:b0:15:42:73:42:ef:d4:ef:2e:42:62:
         98:71:30:b1:d7:23:00:6a:25:98:61:c0:be:0b:d2:12:71:b3:
         ab:ee:2e:ef:7e:33:a4:73:8a:0d:eb:e4:76:f0:1a:fc:81:42:
         31:5c:4d:7b:98:d3:74:8b:1a:1c:5f:f2:09:a5:75:66:37:fe:
         2c:a6:08:a8:2e:f1:b8:5a:38:d2:db:c1:6e:84:ef:eb:51:9f:
         5c:e2:5f:88:47:43:e1:01:dc:b7:69:22:da:ae:2e:f0:36:df:
         1b:0d:60:4f:8d:ff:32:e3:b3:46:9e:57:f7:c1:99:df:29:f8:
         7c:bf:1c:70:bb:58:f4:fa:61:88:3f:5f:da:6e:cf:74:41:d5:
         19:67:bb:42:6d:b9:26:cd:e3:34:13:d2:b2:c5:9d:ec:e5:40:
         ee:88:30:f2:b8:80:a3:53:4e:5d:ec:f3:de:99:fa:81:88:46:
         24:19:9d:f6:6c:be:dc:e9:f8:d8:04:0e:77:2d:9a:6a:c4:f5:
         79:e1:61:2f:7f:f1:50:26:93:b8:dc:18:85:aa:86:9b:2b:f8:
         f1:49:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org