Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa
File:                     323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa (raw, json)
Hash identifier:          ZHinradTtORoDFck0zqNPF+mBJWJzAZ2j1Cj5JmyC6M=
Subject key identifier:   1C:39:9F:F6:7D:BC:8D:D9:E8:46:86:EE:A3:87:19:65:0F:9B:A8:BC
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       48E6A88E422EA7AD65664C7329325151710ABE18
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:02 +0000
ROA not before:           Tue 16 Apr 2024 06:34:02 +0000
ROA not after:            Tue 15 Apr 2025 06:39:02 +0000
asID:                     262725
IP address blocks:        2804:3360:fc00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e6:a8:8e:42:2e:a7:ad:65:66:4c:73:29:32:51:51:71:0a:be:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:02 2024 GMT
            Not After : Apr 15 06:39:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:89:8e:cd:2a:69:8d:25:5b:60:8a:dc:7a:
                    b8:cf:8f:ca:8d:3d:30:6b:ab:63:b5:4b:b4:9b:2e:
                    bd:70:05:05:a2:ec:14:bc:f7:19:ea:32:7e:a4:2c:
                    d8:6e:12:a4:7f:d6:e9:89:36:da:a5:ee:76:38:b2:
                    94:92:aa:3f:49:9f:d1:e6:68:7c:13:b2:18:7d:01:
                    8e:d9:ce:fd:1d:94:f4:fd:66:eb:04:f2:2a:ef:b7:
                    62:4c:9b:c4:55:f3:86:0f:c0:2d:37:38:e8:04:9d:
                    e6:58:e0:84:98:83:09:3d:0e:9f:63:a1:5e:50:fb:
                    7d:48:ca:5f:86:a9:b7:d9:fe:a8:f1:99:b9:62:c1:
                    70:0b:ba:ed:46:8c:4e:91:b7:ed:f4:5d:83:d7:4b:
                    1f:c0:52:35:e7:0a:f4:c0:cc:e6:bb:c6:c5:e6:cd:
                    16:e7:b8:4b:29:8d:2e:a0:d1:02:17:f5:01:3d:d5:
                    f2:6b:fe:e8:a8:b6:9e:34:3f:27:73:1e:9a:df:f6:
                    8e:cb:35:97:70:14:a3:32:4d:53:8a:30:77:61:0c:
                    37:fa:05:16:55:03:8c:b7:7a:81:34:70:31:d9:b0:
                    56:36:35:fa:76:f4:1d:ca:f0:d6:f3:b4:ab:c7:a7:
                    74:e9:b9:55:b0:8e:51:a8:d0:e6:a6:0b:4c:7c:41:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:9F:F6:7D:BC:8D:D9:E8:46:86:EE:A3:87:19:65:0F:9B:A8:BC
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:47:2d:a7:a2:31:0a:af:4c:e7:86:a2:9d:f2:4e:30:d8:f6:
         5a:7e:05:3d:5a:29:a0:9b:c5:0e:a5:81:00:a1:aa:a9:8c:fc:
         26:80:fa:fd:0a:5f:f9:94:1f:92:3b:20:bc:b8:ba:85:84:12:
         2b:48:3e:48:12:06:55:46:4d:ee:3e:4a:6e:07:14:db:07:9a:
         06:4d:78:32:16:c6:90:d6:e4:00:53:7a:e4:40:de:f4:fc:b8:
         14:cf:f1:b4:2d:b8:b2:46:c9:24:97:2b:ab:3a:3d:0e:1b:8a:
         6a:17:60:58:00:60:be:09:1d:be:68:49:a1:dd:6c:51:7c:e4:
         4e:a1:15:65:6e:41:b3:0c:cb:2c:5a:ee:71:8c:24:1f:cf:08:
         9b:18:6c:f9:25:e5:6c:c4:1c:bc:fb:ef:23:1b:5b:f9:27:60:
         b9:db:cc:11:6f:96:04:79:62:ce:3f:fc:70:45:93:95:ce:4b:
         d8:1d:98:e0:95:df:dc:45:e8:c8:fe:13:9c:6d:ee:4a:57:a2:
         06:89:db:47:93:89:34:e9:ef:29:1d:e4:d1:9e:ee:41:4c:8a:
         9e:5b:c8:51:13:66:c6:ea:6f:a5:6d:f2:46:e6:b6:85:d9:e4:
         4d:82:59:c3:56:49:07:bf:71:bc:d8:d8:fa:f6:1d:b6:fb:42:
         a6:5d:d6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org