Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a656230303a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a656230303a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          GfFWyQ3XqcQGD2ZyvIbe1O+2+hY0gKEnlRsn4mrSgSs=
Subject key identifier:   37:EC:4C:90:B2:0D:F7:EC:04:EC:10:19:46:9A:50:0A:65:90:82:3C
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       7548363D42C0D56ADF66A6887F9AA87FAF7459E1
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a656230303a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:04 +0000
ROA not before:           Tue 16 Apr 2024 06:34:04 +0000
ROA not after:            Tue 15 Apr 2025 06:39:04 +0000
asID:                     262725
IP address blocks:        2804:3360:eb00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:48:36:3d:42:c0:d5:6a:df:66:a6:88:7f:9a:a8:7f:af:74:59:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:04 2024 GMT
            Not After : Apr 15 06:39:04 2025 GMT
        Subject: CN=3082010A0282010100A531C91A1977BBDC5B8A34BB6910B82F756A2158C8FFA6AFA8CB654D6412A83C49F6438DB0030C6E842F6DC34C57C5F9E1C0A9E3D427D1C92EC28BFDD9F6566E166F529875C3E6D9DC664EADFEB72E3670B627A399A24D3B3599C777FCDED805D3DA7593F25EBCD6E6F8A315689642525E163115B3106BF85BF93623DAFC5CD7D8B0DEBD0D30F28808DD37022204B4DE8631ED4A0D28C093D69239AE1697FAAF90F2891401082B380DF1154C4B811A350848535DFFE1A0FF9804DF1CC5A55E9C8F25C2905D928884D4C36EB798D09A107B622D16A775FF2CE502E9CB5578EC9B1CD4D1D53EF24C156FCBF221D7ADF56BF19ABCDB0849A51FB8843355614C18010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:c9:1a:19:77:bb:dc:5b:8a:34:bb:69:10:
                    b8:2f:75:6a:21:58:c8:ff:a6:af:a8:cb:65:4d:64:
                    12:a8:3c:49:f6:43:8d:b0:03:0c:6e:84:2f:6d:c3:
                    4c:57:c5:f9:e1:c0:a9:e3:d4:27:d1:c9:2e:c2:8b:
                    fd:d9:f6:56:6e:16:6f:52:98:75:c3:e6:d9:dc:66:
                    4e:ad:fe:b7:2e:36:70:b6:27:a3:99:a2:4d:3b:35:
                    99:c7:77:fc:de:d8:05:d3:da:75:93:f2:5e:bc:d6:
                    e6:f8:a3:15:68:96:42:52:5e:16:31:15:b3:10:6b:
                    f8:5b:f9:36:23:da:fc:5c:d7:d8:b0:de:bd:0d:30:
                    f2:88:08:dd:37:02:22:04:b4:de:86:31:ed:4a:0d:
                    28:c0:93:d6:92:39:ae:16:97:fa:af:90:f2:89:14:
                    01:08:2b:38:0d:f1:15:4c:4b:81:1a:35:08:48:53:
                    5d:ff:e1:a0:ff:98:04:df:1c:c5:a5:5e:9c:8f:25:
                    c2:90:5d:92:88:84:d4:c3:6e:b7:98:d0:9a:10:7b:
                    62:2d:16:a7:75:ff:2c:e5:02:e9:cb:55:78:ec:9b:
                    1c:d4:d1:d5:3e:f2:4c:15:6f:cb:f2:21:d7:ad:f5:
                    6b:f1:9a:bc:db:08:49:a5:1f:b8:84:33:55:61:4c:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:4C:90:B2:0D:F7:EC:04:EC:10:19:46:9A:50:0A:65:90:82:3C
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a656230303a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:eb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:9f:70:36:fb:4f:1f:19:b9:57:44:65:ba:01:25:99:91:
         58:8f:23:b5:27:79:f0:4a:09:dd:7f:94:a7:a7:fd:f4:f7:1b:
         b9:bc:f3:10:f4:a0:7c:72:80:71:07:d0:a8:68:88:53:c2:b7:
         c1:bb:f8:2f:fc:d6:fe:69:27:40:02:20:df:9e:45:62:0c:a8:
         7c:6f:60:fb:15:d2:48:64:0c:6e:e7:aa:09:76:3d:98:2f:57:
         f8:b3:48:d1:93:29:68:d1:a3:07:91:95:b5:82:23:b5:03:90:
         1c:9b:5f:10:ef:6a:70:1e:26:cf:de:64:64:89:69:bf:5e:06:
         29:33:1c:9e:15:e8:eb:8b:a8:69:83:01:6e:00:25:1d:96:df:
         96:e9:be:ca:81:fa:65:0a:5d:96:0d:78:53:ce:bb:69:b5:10:
         6d:e3:85:e6:c5:d0:59:f3:2f:8b:3a:b5:57:9f:6c:18:e1:f0:
         20:2a:60:5f:b5:35:0f:57:d8:5c:28:a0:36:ee:17:63:ad:32:
         c9:91:08:34:1d:bb:cb:cd:0b:93:08:c2:36:67:73:81:f4:74:
         b6:39:85:42:7a:8e:1c:79:95:18:65:c6:fa:4c:4a:8f:42:49:
         1a:cb:82:46:10:2f:76:5c:7a:a8:60:85:7c:6c:20:72:30:9c:
         95:b7:3c:01
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUdUg2PULA1WrfZqaIf5qof690WeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3Q0YzNjJFM0I0NTQyRDdFQzZEOTVCNEVENUYxMEI1
QkY5QzRBRTAeFw0yNDA0MTYwNjM0MDRaFw0yNTA0MTUwNjM5MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTUzMUM5MUExOTc3QkJEQzVC
OEEzNEJCNjkxMEI4MkY3NTZBMjE1OEM4RkZBNkFGQThDQjY1NEQ2NDEyQTgzQzQ5
RjY0MzhEQjAwMzBDNkU4NDJGNkRDMzRDNTdDNUY5RTFDMEE5RTNENDI3RDFDOTJF
QzI4QkZERDlGNjU2NkUxNjZGNTI5ODc1QzNFNkQ5REM2NjRFQURGRUI3MkUzNjcw
QjYyN0EzOTlBMjREM0IzNTk5Qzc3N0ZDREVEODA1RDNEQTc1OTNGMjVFQkNENkU2
RjhBMzE1Njg5NjQyNTI1RTE2MzExNUIzMTA2QkY4NUJGOTM2MjNEQUZDNUNEN0Q4
QjBERUJEMEQzMEYyODgwOEREMzcwMjIyMDRCNERFODYzMUVENEEwRDI4QzA5M0Q2
OTIzOUFFMTY5N0ZBQUY5MEYyODkxNDAxMDgyQjM4MERGMTE1NEM0QjgxMUEzNTA4
NDg1MzVERkZFMUEwRkY5ODA0REYxQ0M1QTU1RTlDOEYyNUMyOTA1RDkyODg4NEQ0
QzM2RUI3OThEMDlBMTA3QjYyMkQxNkE3NzVGRjJDRTUwMkU5Q0I1NTc4RUM5QjFD
RDREMUQ1M0VGMjRDMTU2RkNCRjIyMUQ3QURGNTZCRjE5QUJDREIwODQ5QTUxRkI4
ODQzMzU1NjE0QzE4MDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApTHJGhl3u9xbijS7aRC4L3VqIVjI/6avqMtlTWQSqDxJ9kONsAMM
boQvbcNMV8X54cCp49Qn0ckuwov92fZWbhZvUph1w+bZ3GZOrf63LjZwtiejmaJN
OzWZx3f83tgF09p1k/JevNbm+KMVaJZCUl4WMRWzEGv4W/k2I9r8XNfYsN69DTDy
iAjdNwIiBLTehjHtSg0owJPWkjmuFpf6r5DyiRQBCCs4DfEVTEuBGjUISFNd/+Gg
/5gE3xzFpV6cjyXCkF2SiITUw263mNCaEHtiLRandf8s5QLpy1V47Jsc1NHVPvJM
FW/L8iHXrfVr8Zq82whJpR+4hDNVYUwYAQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FDfsTJCyDffsBOwQGUaaUAplkII8MB8GA1UdIwQYMBaAFNJ882LjtFQtfsbZW07V
8Qtb+cSuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzEvRDI3Q0YzNjJFM0I0NTQy
RDdFQzZEOTVCNEVENUYxMEI1QkY5QzRBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMjdDRjM2MkUzQjQ1NDJEN0VDNkQ5NUI0RUQ1RjEwQjVCRjlD
NEFFLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8xLzMyMzgzMDM0M2EzMzMzMzYzMDNh
NjU2MjMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzNzMyMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAoBDNg6wAwDQYJKoZIhvcNAQELBQADggEBAIPvn3A2+08fGblXRGW6
ASWZkViPI7UnefBKCd1/lKen/fT3G7m88xD0oHxygHEH0KhoiFPCt8G7+C/81v5p
J0ACIN+eRWIMqHxvYPsV0khkDG7nqgl2PZgvV/izSNGTKWjRoweRlbWCI7UDkByb
XxDvanAeJs/eZGSJab9eBikzHJ4V6OuLqGmDAW4AJR2W35bpvsqB+mUKXZYNeFPO
u2m1EG3jhebF0FnzL4s6tVefbBjh8CAqYF+1NQ9X2FwooDbuF2OtMsmRCDQdu8vN
C5MIwjZnc4H0dLY5hUJ6jhx5lRhlxvpMSo9CSRrLgkYQL3ZceqhghXxsIHIwnJW3
PAE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org