Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa
File:                     323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa (raw, json)
Hash identifier:          E888oRRZz2QEq6KljqiEiqJH3+afDKcErTiSwC7mO3I=
Subject key identifier:   AA:F0:70:B8:93:B4:D4:D2:A0:04:B5:04:02:38:B3:EF:AE:44:7C:AF
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       4CF5721A0D9B88B61BE9424C995030662888FECB
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:01 +0000
ROA not before:           Tue 16 Apr 2024 06:34:01 +0000
ROA not after:            Tue 15 Apr 2025 06:39:01 +0000
asID:                     262725
IP address blocks:        2804:3360:fd00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f5:72:1a:0d:9b:88:b6:1b:e9:42:4c:99:50:30:66:28:88:fe:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:01 2024 GMT
            Not After : Apr 15 06:39:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:e1:6d:e6:53:2e:0f:e1:84:4d:3e:7a:11:
                    80:a9:fb:e5:84:69:d1:91:2c:ed:24:74:4f:e3:7d:
                    2a:a5:f3:02:6d:49:bc:2c:ec:43:7e:9d:73:4c:43:
                    08:c5:3d:33:41:79:3d:ea:33:11:b6:91:f7:9a:91:
                    93:59:35:5c:2a:00:48:13:9c:83:b8:77:1a:ea:c0:
                    4a:94:e8:5a:ad:63:f4:d4:e9:58:b8:a5:82:ec:5e:
                    15:ed:12:0b:24:41:e0:a4:c1:44:2c:d5:8b:1b:08:
                    51:bf:86:da:23:e9:7b:5b:7e:4e:77:35:dd:a4:24:
                    16:b8:46:57:ac:b0:4f:77:e0:a4:c2:0f:12:eb:b4:
                    80:82:03:b0:ec:cb:fa:26:65:00:9b:4c:50:95:e7:
                    ce:b2:4a:f2:72:a5:6a:25:17:e4:88:f3:5f:6b:89:
                    84:e2:ee:2e:a1:55:53:e8:19:ae:d1:07:23:c6:da:
                    1e:93:f2:a4:30:07:93:2d:6a:ed:2e:ed:2d:ec:94:
                    c2:ce:85:4b:c2:0e:36:d7:e8:96:96:fd:c5:a0:51:
                    4b:55:03:46:20:59:29:b4:f8:64:b2:98:2f:87:80:
                    58:24:bd:51:ff:f5:d4:b5:22:a4:90:8c:53:3b:6b:
                    c5:86:01:f4:28:27:7a:38:10:3e:2a:b5:f8:bc:65:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:70:B8:93:B4:D4:D2:A0:04:B5:04:02:38:B3:EF:AE:44:7C:AF
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:71:80:f4:9b:19:5b:51:44:2d:14:0e:f4:89:91:e3:cd:ea:
         da:9c:e3:cc:8f:e1:d9:c4:17:5b:bd:46:20:83:e6:67:e1:c2:
         8e:16:e4:45:a9:32:71:88:42:ae:db:af:c9:23:d7:4d:91:21:
         5c:2d:35:7a:68:1c:68:82:3f:37:82:30:62:60:b3:b9:43:4c:
         56:cb:93:dc:5f:b4:59:c0:4f:81:31:5e:fc:0b:f3:10:96:b8:
         ff:df:aa:3a:79:d8:27:ba:df:bd:48:80:47:5e:10:0c:93:7b:
         b0:08:c6:d0:cf:73:7b:05:f2:9c:01:c1:c4:54:25:ab:78:b1:
         bb:eb:64:90:0e:9b:6d:95:11:d8:c8:75:e6:e7:1e:fd:da:7d:
         69:ad:00:85:ff:56:04:c9:36:3c:eb:c6:75:c9:e7:80:3b:62:
         de:58:de:e4:d8:6d:92:e0:79:2e:60:da:f6:5d:96:72:00:d1:
         79:d1:4e:0c:38:5f:6b:94:6e:5d:3e:83:cf:3b:5c:e6:45:24:
         1b:30:39:97:d5:63:99:89:9b:00:9a:b6:34:06:65:fe:a4:2c:
         a8:88:23:57:38:02:f1:ef:56:d4:6c:6b:8a:a3:d6:06:fb:00:
         25:f1:3a:bd:47:1a:a2:b3:41:c7:3a:7c:6e:ef:99:c8:08:fe:
         04:93:8e:e8
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUTPVyGg2biLYb6UJMmVAwZiiI/sswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3Q0YzNjJFM0I0NTQyRDdFQzZEOTVCNEVENUYxMEI1
QkY5QzRBRTAeFw0yNDA0MTYwNjM0MDFaFw0yNTA0MTUwNjM5MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJBRkUxNkRFNjUzMkUwRkUx
ODQ0RDNFN0ExMTgwQTlGQkU1ODQ2OUQxOTEyQ0VEMjQ3NDRGRTM3RDJBQTVGMzAy
NkQ0OUJDMkNFQzQzN0U5RDczNEM0MzA4QzUzRDMzNDE3OTNERUEzMzExQjY5MUY3
OUE5MTkzNTkzNTVDMkEwMDQ4MTM5QzgzQjg3NzFBRUFDMDRBOTRFODVBQUQ2M0Y0
RDRFOTU4QjhBNTgyRUM1RTE1RUQxMjBCMjQ0MUUwQTRDMTQ0MkNENThCMUIwODUx
QkY4NkRBMjNFOTdCNUI3RTRFNzczNUREQTQyNDE2Qjg0NjU3QUNCMDRGNzdFMEE0
QzIwRjEyRUJCNDgwODIwM0IwRUNDQkZBMjY2NTAwOUI0QzUwOTVFN0NFQjI0QUYy
NzJBNTZBMjUxN0U0ODhGMzVGNkI4OTg0RTJFRTJFQTE1NTUzRTgxOUFFRDEwNzIz
QzZEQTFFOTNGMkE0MzAwNzkzMkQ2QUVEMkVFRDJERUM5NEMyQ0U4NTRCQzIwRTM2
RDdFODk2OTZGREM1QTA1MTRCNTUwMzQ2MjA1OTI5QjRGODY0QjI5ODJGODc4MDU4
MjRCRDUxRkZGNUQ0QjUyMkE0OTA4QzUzM0I2QkM1ODYwMUY0MjgyNzdBMzgxMDNF
MkFCNUY4QkM2NTAxODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoq/hbeZTLg/hhE0+ehGAqfvlhGnRkSztJHRP430qpfMCbUm8LOxD
fp1zTEMIxT0zQXk96jMRtpH3mpGTWTVcKgBIE5yDuHca6sBKlOharWP01OlYuKWC
7F4V7RILJEHgpMFELNWLGwhRv4baI+l7W35OdzXdpCQWuEZXrLBPd+Ckwg8S67SA
ggOw7Mv6JmUAm0xQlefOskrycqVqJRfkiPNfa4mE4u4uoVVT6Bmu0Qcjxtoek/Kk
MAeTLWrtLu0t7JTCzoVLwg421+iWlv3FoFFLVQNGIFkptPhkspgvh4BYJL1R//XU
tSKkkIxTO2vFhgH0KCd6OBA+KrX4vGUBhwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKrwcLiTtNTSoAS1BAI4s++uRHyvMB8GA1UdIwQYMBaAFNJ882LjtFQtfsbZW07V
8Qtb+cSuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzEvRDI3Q0YzNjJFM0I0NTQy
RDdFQzZEOTVCNEVENUYxMEI1QkY5QzRBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMjdDRjM2MkUzQjQ1NDJEN0VDNkQ5NUI0RUQ1RjEwQjVCRjlD
NEFFLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8xLzMyMzgzMDM0M2EzMzMzMzYzMDNh
NjY2NDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzIzNzMyMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBDNg/TANBgkqhkiG9w0BAQsFAAOCAQEAOXGA9JsZW1FELRQO9ImR
483q2pzjzI/h2cQXW71GIIPmZ+HCjhbkRakycYhCrtuvySPXTZEhXC01emgcaII/
N4IwYmCzuUNMVsuT3F+0WcBPgTFe/AvzEJa4/9+qOnnYJ7rfvUiAR14QDJN7sAjG
0M9zewXynAHBxFQlq3ixu+tkkA6bbZUR2Mh15uce/dp9aa0Ahf9WBMk2POvGdcnn
gDti3lje5NhtkuB5LmDa9l2WcgDRedFODDhfa5RuXT6Dzztc5kUkGzA5l9VjmYmb
AJq2NAZl/qQsqIgjVzgC8e9W1GxriqPWBvsAJfE6vUcaorNBxzp8bu+ZyAj+BJOO
6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org