Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666230303a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a666230303a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          4qZw9LA7vuVV1IgvRTTppozxr5iyQSrgxN6pKl4+MiE=
Subject key identifier:   79:E5:C6:D7:C4:6C:90:5E:6E:34:32:8F:A6:67:08:1E:3C:FF:FB:5B
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       2131A607FB3688EFC3911F535AC9B9D8AAA64865
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666230303a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:00 +0000
ROA not before:           Tue 16 Apr 2024 06:34:00 +0000
ROA not after:            Tue 15 Apr 2025 06:39:00 +0000
asID:                     262725
IP address blocks:        2804:3360:fb00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:31:a6:07:fb:36:88:ef:c3:91:1f:53:5a:c9:b9:d8:aa:a6:48:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:00 2024 GMT
            Not After : Apr 15 06:39:00 2025 GMT
        Subject: CN=3082010A0282010100BAA9B1797C9020388555C0A7210923074BD76C2F44E049223F50FDEB927B218ED2659A3FC44E70270DB061095835BC2DE1B9F289B1F8003C75E7CA66CE1E134457F3900424F467A5BDFB8F3F4067148E2DF91D54A92EA4ECC8EA264D2783BD317EDCE58A61A05DAC4986D569505F79C6956272694B6D4F9A4BE386F8B7C9E68B7A992B9A53C2D6B5B034AE6CB8A87B9A66997213A7A0BC87678BDF6A2D8A5AABAD28C27FFC2AD639628DB3520485F7F94B8E8D961AEA151D2FB320AD26427211C57D50D7E9BD2225B3F904B0AC96CC0F802782E9E950FBFA1928E8A00A1CFC1EACFEF9961F533B1D1374FF11830C0CAAF839AF435D0BB71818940A7E35F2BD270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:b1:79:7c:90:20:38:85:55:c0:a7:21:09:
                    23:07:4b:d7:6c:2f:44:e0:49:22:3f:50:fd:eb:92:
                    7b:21:8e:d2:65:9a:3f:c4:4e:70:27:0d:b0:61:09:
                    58:35:bc:2d:e1:b9:f2:89:b1:f8:00:3c:75:e7:ca:
                    66:ce:1e:13:44:57:f3:90:04:24:f4:67:a5:bd:fb:
                    8f:3f:40:67:14:8e:2d:f9:1d:54:a9:2e:a4:ec:c8:
                    ea:26:4d:27:83:bd:31:7e:dc:e5:8a:61:a0:5d:ac:
                    49:86:d5:69:50:5f:79:c6:95:62:72:69:4b:6d:4f:
                    9a:4b:e3:86:f8:b7:c9:e6:8b:7a:99:2b:9a:53:c2:
                    d6:b5:b0:34:ae:6c:b8:a8:7b:9a:66:99:72:13:a7:
                    a0:bc:87:67:8b:df:6a:2d:8a:5a:ab:ad:28:c2:7f:
                    fc:2a:d6:39:62:8d:b3:52:04:85:f7:f9:4b:8e:8d:
                    96:1a:ea:15:1d:2f:b3:20:ad:26:42:72:11:c5:7d:
                    50:d7:e9:bd:22:25:b3:f9:04:b0:ac:96:cc:0f:80:
                    27:82:e9:e9:50:fb:fa:19:28:e8:a0:0a:1c:fc:1e:
                    ac:fe:f9:96:1f:53:3b:1d:13:74:ff:11:83:0c:0c:
                    aa:f8:39:af:43:5d:0b:b7:18:18:94:0a:7e:35:f2:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:C6:D7:C4:6C:90:5E:6E:34:32:8F:A6:67:08:1E:3C:FF:FB:5B
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666230303a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:d0:66:56:0c:05:1b:47:c0:c2:69:6e:7c:7b:47:eb:c4:
         67:fc:ea:2f:0b:6d:97:e0:b0:5f:73:cb:b4:56:fb:ad:d2:83:
         aa:1e:64:05:fe:e5:04:96:69:05:42:a6:b9:4d:2c:4b:f0:25:
         9b:6f:19:d4:62:0d:23:bb:3a:3c:62:34:a2:3f:a7:8d:f6:ca:
         4a:35:f5:b0:63:83:21:f0:dc:39:2f:3f:90:1c:8f:3e:c3:e6:
         27:34:44:3c:e4:16:94:2d:4d:73:72:8e:ff:b5:ab:91:00:38:
         b8:49:8c:e7:f2:9f:44:49:1d:3d:44:4d:77:85:b8:89:8f:ab:
         51:f6:44:b6:70:a2:84:92:c2:4e:06:f0:f4:12:33:5d:49:24:
         c4:90:e8:87:a2:49:76:7a:ac:cc:3d:d9:80:7b:f0:df:79:bc:
         37:9e:77:f7:4b:2e:60:c7:78:d7:e2:74:2f:88:91:37:4c:b1:
         1b:b5:3a:1e:6c:fd:30:0d:26:2b:22:de:93:84:f5:c0:3a:8f:
         d5:dc:75:c5:33:b5:45:02:97:67:f5:ed:f4:a5:b7:27:44:86:
         64:c4:a0:2d:45:c0:91:e5:a7:c6:89:f1:63:38:c1:dc:45:a9:
         5a:eb:8d:62:f6:66:d1:12:07:15:26:ac:f9:53:e6:63:6d:ca:
         82:50:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org