Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          Gq1rtGJ8alotwJwHsP4I3A1KuSlnp+rGiBAtP0nQa2c=
Subject key identifier:   CF:02:C0:08:08:AA:2B:AD:AE:39:53:69:C1:65:3C:98:96:80:1B:EC
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       2D3BF3B3F9F14A621851208AA25AA3DD57CB696D
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:03 +0000
ROA not before:           Tue 16 Apr 2024 06:34:03 +0000
ROA not after:            Tue 15 Apr 2025 06:39:03 +0000
asID:                     262725
IP address blocks:        2804:3360:fa00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3b:f3:b3:f9:f1:4a:62:18:51:20:8a:a2:5a:a3:dd:57:cb:69:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:03 2024 GMT
            Not After : Apr 15 06:39:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:15:a8:b2:65:29:25:c3:ad:a4:f1:6e:fd:
                    a9:28:c1:43:d0:b3:05:40:7a:27:8a:e5:20:78:d5:
                    22:83:51:08:79:68:b2:c6:2d:d2:63:d7:fb:ad:e3:
                    e2:6a:5a:3b:f4:70:46:e1:fd:8b:9d:ab:df:46:24:
                    c4:cf:33:f4:7f:e9:9f:6c:0e:21:a2:64:9a:6c:7e:
                    03:a9:56:c3:9f:36:e4:91:e1:ab:a3:6c:3a:6d:aa:
                    43:7b:83:9c:37:a4:8a:b5:fb:40:62:ec:d9:20:e5:
                    9a:51:4d:ee:02:74:bb:4d:0e:72:f8:e0:8a:d2:ad:
                    d4:d6:26:a3:b1:5f:31:2b:cf:75:82:38:d0:3b:c2:
                    76:1c:e7:94:09:51:88:1a:ec:b2:19:de:1f:ae:7d:
                    2a:17:7d:74:fb:ad:bb:9c:f7:b4:aa:e9:d5:6a:9a:
                    30:e4:7d:7e:45:49:5a:7e:25:25:f3:c5:ed:8b:44:
                    8e:5d:a5:be:6d:1a:2c:c9:f2:99:c2:e1:af:51:16:
                    30:9a:dc:6c:64:be:de:c8:6c:02:2a:75:80:e6:97:
                    49:f1:07:6a:bb:5a:d5:e6:30:ca:3c:ff:f8:37:bd:
                    8a:73:3f:87:f2:00:c4:0d:a4:ac:ec:00:bc:e9:26:
                    8f:4d:ba:cc:b0:f6:9d:c2:40:00:ef:84:0e:77:e2:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:C0:08:08:AA:2B:AD:AE:39:53:69:C1:65:3C:98:96:80:1B:EC
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fa00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:6b:7e:88:47:1a:ef:94:7e:57:0b:8f:8c:89:e0:a9:15:1f:
         0f:6f:51:2c:10:a6:82:b7:90:6c:23:1b:c0:78:67:fc:4e:00:
         78:f0:62:90:58:e7:5e:e1:09:36:3f:25:30:4b:9f:0f:0a:7b:
         43:d7:07:28:89:6d:80:4a:1e:06:a8:d6:f0:f2:5c:46:24:3a:
         b6:23:e3:51:0c:a0:5c:85:1b:23:a7:5d:b3:7f:c4:6f:d9:0d:
         0b:47:06:0d:7c:31:84:5b:c9:fa:0b:2e:19:bf:93:25:34:f6:
         80:23:55:a1:e3:b9:79:c4:32:49:6a:84:7a:87:91:bc:bf:d9:
         69:51:9d:95:e1:fb:89:7f:61:55:ae:79:e8:92:84:ce:b9:e6:
         00:7e:00:3b:c3:eb:94:cd:84:74:8a:34:9d:2a:09:7f:d7:0a:
         5c:cb:57:78:be:d5:5c:11:d7:04:fd:2b:d0:28:0a:1e:c8:ee:
         be:1a:c4:4a:76:79:4a:3e:8f:e8:5c:42:9c:7c:19:fb:68:e5:
         20:1b:81:ed:65:10:6e:ed:08:a2:c9:2c:7a:ff:a8:3b:8e:ac:
         e6:95:5e:75:d2:72:74:38:d6:17:67:c6:e2:ef:06:0e:b4:bc:
         3f:dc:90:62:1b:14:d2:d2:2a:00:ee:84:d0:3b:36:ee:97:77:
         4f:74:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org