Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa
File:                     323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa (raw, json)
Hash identifier:          gQFE23SOmQFsUR3dIqMJFwzCvGJIelLt5EVcofHr8+I=
Subject key identifier:   AB:83:33:48:EA:28:D7:56:E7:F1:B1:87:56:B8:28:D1:20:F9:6F:87
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       694A802B84B62FE67CE1DB33B6D10DF3C5006AF1
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa
Signing time:             Tue 16 Apr 2024 06:39:02 +0000
ROA not before:           Tue 16 Apr 2024 06:34:02 +0000
ROA not after:            Tue 15 Apr 2025 06:39:02 +0000
asID:                     262725
IP address blocks:        2804:3360:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4a:80:2b:84:b6:2f:e6:7c:e1:db:33:b6:d1:0d:f3:c5:00:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 16 06:34:02 2024 GMT
            Not After : Apr 15 06:39:02 2025 GMT
        Subject: CN=3082010A0282010100B5A8FA409CF623C851898EECA9AD0760DD51B9CC85F073BB990BFA36D43DA8B16DBFE8B1400F1615E5ED578FCB4DBB4A866E08D883926367FA6481FD9C5B78A2FC6F7CD4202C85D794B856C55556F6AD9F23925F735306117AF2CF02CC1A1E4FD10B21BA0A83AEC40A729E96FD329943BBACB553A0C9065DCF66D1B756B6C2C1536B033F38FDCE3428DB7EB70DEBC61C71C60E39222881DAB6DBB7E1CDF9CC3DA79DF12B2E14720EF25B463D805EA4D78B48A6BBA2C7728BD5E64EB26DAE5F63C6EF9012D6BB79D4320A15CCFF81D198621AC58CE00DE4C4F5F7A25320DB6BC1306C86CACACEDD8EFF19AFC49BF2E7E4665CF3A979DA02B3627995AF67793DA90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:fa:40:9c:f6:23:c8:51:89:8e:ec:a9:ad:
                    07:60:dd:51:b9:cc:85:f0:73:bb:99:0b:fa:36:d4:
                    3d:a8:b1:6d:bf:e8:b1:40:0f:16:15:e5:ed:57:8f:
                    cb:4d:bb:4a:86:6e:08:d8:83:92:63:67:fa:64:81:
                    fd:9c:5b:78:a2:fc:6f:7c:d4:20:2c:85:d7:94:b8:
                    56:c5:55:56:f6:ad:9f:23:92:5f:73:53:06:11:7a:
                    f2:cf:02:cc:1a:1e:4f:d1:0b:21:ba:0a:83:ae:c4:
                    0a:72:9e:96:fd:32:99:43:bb:ac:b5:53:a0:c9:06:
                    5d:cf:66:d1:b7:56:b6:c2:c1:53:6b:03:3f:38:fd:
                    ce:34:28:db:7e:b7:0d:eb:c6:1c:71:c6:0e:39:22:
                    28:81:da:b6:db:b7:e1:cd:f9:cc:3d:a7:9d:f1:2b:
                    2e:14:72:0e:f2:5b:46:3d:80:5e:a4:d7:8b:48:a6:
                    bb:a2:c7:72:8b:d5:e6:4e:b2:6d:ae:5f:63:c6:ef:
                    90:12:d6:bb:79:d4:32:0a:15:cc:ff:81:d1:98:62:
                    1a:c5:8c:e0:0d:e4:c4:f5:f7:a2:53:20:db:6b:c1:
                    30:6c:86:ca:ca:ce:dd:8e:ff:19:af:c4:9b:f2:e7:
                    e4:66:5c:f3:a9:79:da:02:b3:62:79:95:af:67:79:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:33:48:EA:28:D7:56:E7:F1:B1:87:56:B8:28:D1:20:F9:6F:87
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:74:90:5d:bd:dc:29:c4:6b:5a:8c:3b:35:46:07:b6:de:bd:
         04:28:ea:0a:59:fd:43:ab:16:24:02:3d:92:e0:22:13:48:e7:
         e6:95:8e:44:d4:de:99:32:60:62:88:8d:7a:34:d0:9f:5f:23:
         fa:c8:7f:7e:7d:c1:0f:63:f8:88:0a:3b:ba:06:fd:7b:d6:e8:
         fc:7d:a2:25:d5:78:15:b5:4a:fc:a4:4f:84:d2:13:aa:31:75:
         27:1b:31:80:87:b5:05:ef:17:fa:56:8d:aa:97:8e:39:95:f6:
         ce:3d:bd:18:f4:13:8f:c3:b3:ad:e3:dd:28:ff:3a:37:6b:2e:
         6b:76:47:11:f7:34:2b:bd:45:2f:ad:5b:4a:a7:66:9c:fc:61:
         9e:7b:4c:34:3d:97:f2:a7:fa:b2:42:ac:47:cb:17:26:ed:23:
         50:e6:1b:29:28:23:4c:85:7b:e2:64:53:4c:2d:4f:1b:c6:32:
         7d:7c:15:27:9b:92:ff:2e:18:dc:c5:7d:9a:e5:c7:54:17:d0:
         e7:2b:5c:11:70:20:39:db:51:a9:da:db:14:c2:77:b1:19:19:
         7a:13:59:b7:98:d0:1b:27:a1:ff:7e:49:2e:c4:ff:e0:a8:ba:
         0d:a3:d6:7c:62:b0:60:34:73:6c:0b:29:6f:08:a8:8a:ee:61:
         8d:12:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org