Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a633030303a3a2f33342d3334203d3e203532393133.roa
File:                     323830343a313038383a633030303a3a2f33342d3334203d3e203532393133.roa (raw, json)
Hash identifier:          rkEd3eMjd5w3AMz57L9p8ke+189+ZIuwLkiKwARH5s4=
Subject key identifier:   3E:CF:14:5E:4A:55:EB:05:80:2A:14:A6:EB:AC:A7:BC:FC:3A:9E:88
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       172479A950070F9B1615D2F23FBCB644495B442D
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a633030303a3a2f33342d3334203d3e203532393133.roa
Signing time:             Tue 12 Mar 2024 21:58:23 +0000
ROA not before:           Tue 12 Mar 2024 21:53:23 +0000
ROA not after:            Tue 11 Mar 2025 21:58:23 +0000
asID:                     52913
IP address blocks:        2804:1088:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:24:79:a9:50:07:0f:9b:16:15:d2:f2:3f:bc:b6:44:49:5b:44:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 12 21:53:23 2024 GMT
            Not After : Mar 11 21:58:23 2025 GMT
        Subject: CN=3ECF145E4A55EB05802A14A6EBACA7BCFC3A9E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:59:ba:e1:51:16:75:f6:97:d6:02:e6:20:
                    7c:b7:b1:23:44:d1:03:51:38:a6:1a:5a:3d:cf:25:
                    ff:48:bf:6c:de:00:ea:77:00:7d:06:0d:fd:38:76:
                    d3:98:e1:da:48:04:89:a4:09:98:50:db:02:16:d8:
                    4f:88:d8:e1:85:2f:ea:ae:b4:88:41:f7:dd:f5:e5:
                    21:6e:74:04:e6:ea:c4:61:50:e2:47:1e:07:76:cc:
                    26:0d:1e:5b:bd:67:09:b9:3d:6a:c3:d8:48:52:f4:
                    a0:94:6b:e5:0a:7a:70:f6:d7:59:f7:34:c7:3c:34:
                    5e:5a:55:13:f9:91:3e:f2:ec:d5:a4:24:b5:2b:73:
                    53:22:f6:35:0d:16:b1:2e:7f:8e:6f:0e:53:53:24:
                    96:de:ec:00:f1:1c:d6:d3:64:5a:2a:ac:f6:a6:e1:
                    61:3f:46:61:2d:2a:13:42:1b:d0:e7:a1:38:4a:af:
                    73:39:8f:27:5c:20:6e:81:c5:cb:02:70:08:a0:ba:
                    7c:9f:40:83:6b:1f:da:38:6b:fb:f5:d5:25:5d:09:
                    01:f4:62:5e:fe:d2:e4:73:39:65:c6:cf:18:5e:58:
                    b1:87:3d:30:0b:a8:6b:eb:b9:51:e2:fa:f5:ff:8f:
                    82:82:cc:8a:48:88:4b:83:03:d7:83:6c:11:f3:81:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CF:14:5E:4A:55:EB:05:80:2A:14:A6:EB:AC:A7:BC:FC:3A:9E:88
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a633030303a3a2f33342d3334203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:eb:fe:ef:18:29:0f:03:48:0d:c5:e4:20:da:42:34:58:
         6f:b7:84:6e:12:23:e6:ec:64:a3:c7:63:77:01:c2:96:69:40:
         69:42:ea:eb:4e:7e:03:32:a0:89:0b:88:91:4c:e2:04:a5:31:
         de:37:38:93:95:06:2b:7b:02:6d:5c:51:21:f0:22:7c:81:13:
         93:87:6c:25:16:c1:0a:ca:9c:08:8a:c4:78:81:8d:fb:75:1d:
         bf:70:33:e6:df:0f:ae:41:47:4d:7c:2d:c5:ef:5e:41:8b:ff:
         cf:6e:77:b6:8c:2b:7a:b7:15:ef:eb:0f:9a:dd:6e:ed:77:b4:
         6a:f9:f9:25:cd:c4:c7:8d:a3:8f:b9:f9:aa:37:dd:7e:72:10:
         9d:7a:da:ca:00:e5:0b:3f:45:96:6f:9b:2c:42:49:4e:f1:f1:
         13:0f:7c:18:ca:f4:2a:92:59:fa:30:e9:fb:40:d9:20:06:f8:
         88:18:e6:44:53:9c:7f:65:68:fb:3e:28:59:7a:45:d5:f5:6d:
         10:a6:c7:13:d9:57:b7:ee:be:ea:57:a8:a3:64:62:ab:2a:5c:
         c5:1a:bc:0e:3d:0e:74:28:b7:98:75:96:0a:b8:b3:1b:2a:93:
         06:f3:6d:db:26:a7:5b:3e:2e:dd:c1:74:90:65:80:1f:ca:13:
         9b:9c:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org