Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
File:                     323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          rfdh5YGyGWZgMTFkOQC0xDsCZkLlQAwIqDmGyyojmP8=
Subject key identifier:   86:0A:DE:83:63:F8:28:B2:58:25:AF:94:01:CD:3C:F5:22:50:23:70
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       1E14A3CF42878D22A7FC848BA3794D0858CDAEF7
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
Signing time:             Wed 24 Apr 2024 04:54:28 +0000
ROA not before:           Wed 24 Apr 2024 04:49:28 +0000
ROA not after:            Wed 23 Apr 2025 04:54:28 +0000
asID:                     262725
IP address blocks:        2804:3360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:14:a3:cf:42:87:8d:22:a7:fc:84:8b:a3:79:4d:08:58:cd:ae:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 24 04:49:28 2024 GMT
            Not After : Apr 23 04:54:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:70:0a:f9:b7:58:96:43:ed:7e:51:7a:af:
                    c5:dd:e4:63:83:5e:95:b6:e1:77:7c:70:01:57:f4:
                    30:93:41:cf:0f:61:1e:7a:5a:93:29:5b:11:11:c6:
                    64:f6:e5:39:6a:b2:09:1b:d1:7d:09:01:63:0e:43:
                    3a:f5:4c:ab:a9:99:b7:5f:ed:00:c3:31:35:d4:98:
                    2f:b0:58:9b:79:d1:f0:34:7b:b2:45:13:b5:1a:69:
                    b2:3d:db:2e:61:07:67:3f:aa:b6:cb:93:99:32:22:
                    c6:5f:a3:12:a8:27:b1:eb:02:b3:39:61:52:e4:73:
                    74:f4:f6:70:74:45:dd:d6:0d:12:34:bb:44:cb:84:
                    39:e1:72:e8:30:07:63:dd:1a:7b:7f:af:6e:82:cf:
                    1f:51:1c:5f:30:6e:e8:64:e3:7b:8b:fe:cb:dc:3b:
                    53:3f:c2:0e:de:df:7b:ad:3a:de:53:c1:75:4b:a2:
                    99:eb:9a:d0:9f:84:18:bb:52:1b:7c:a8:3f:64:b6:
                    8a:82:4e:48:24:87:96:95:e9:31:7c:1e:9e:7d:1f:
                    ef:97:9c:fe:b5:61:0b:78:5c:dc:d3:99:8d:c2:c5:
                    f4:e2:ca:b9:37:4e:20:ef:56:d5:e8:6b:e6:78:a5:
                    5d:df:11:4b:9c:8d:3f:d0:ee:aa:d8:fc:93:ac:dd:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:DE:83:63:F8:28:B2:58:25:AF:94:01:CD:3C:F5:22:50:23:70
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:2b:38:ec:56:91:20:e0:02:64:70:f9:43:f5:e5:88:11:4b:
         91:b2:5c:09:f8:a1:1f:0f:06:40:e6:40:89:a0:6a:15:a6:18:
         09:20:6b:85:9c:bd:13:aa:35:41:7d:54:1f:cb:2d:d6:0d:3e:
         8c:04:03:53:88:ca:eb:6a:3c:f7:e0:55:61:51:2d:88:fd:dd:
         96:32:44:0c:b0:78:9f:6f:c9:5c:87:ec:3c:4f:3c:2b:76:b0:
         63:b6:fc:c3:44:a7:1c:2f:c8:34:ba:2c:b1:3c:41:a9:0f:ed:
         1e:98:7b:ae:86:41:8a:7a:f7:3d:c0:30:8a:04:79:10:4a:07:
         4e:c5:0e:cb:2d:e2:62:d4:03:86:65:ea:9e:61:47:bf:7c:a5:
         6a:2a:2a:a2:bd:f4:70:4b:1e:9f:1b:2e:de:89:aa:20:5a:96:
         45:ad:7e:9c:28:f0:f8:a3:cb:5f:43:10:fa:08:48:6b:5d:5d:
         9a:8a:7d:d7:b8:67:4a:00:69:2e:0a:32:62:c6:16:de:d9:c4:
         2d:98:f8:a0:bd:f8:e1:51:17:ce:01:6e:8a:9e:fa:43:bd:cf:
         bd:1b:5b:57:06:81:46:2a:e1:13:d5:2a:fa:da:ea:57:7b:d4:
         1f:8b:ac:a8:ba:c6:7a:23:81:58:3e:4e:2e:54:5c:08:cb:06:
         2f:56:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org