Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
File:                     323830343a3838303a3a2f33322d3332203d3e203238323730.roa (raw, json)
Hash identifier:          EmhWNkMLe/31TwnJsol3oPwkvZHSwj/Voax7fMNzzDM=
Subject key identifier:   FF:74:8F:71:2D:FE:4D:6E:27:0E:F5:D0:6F:C6:E0:B9:22:41:4A:94
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       2C7CDB2A7AFEE4F115F84E18FFD988C76A91E372
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:01 +0000
ROA not before:           Mon 08 Apr 2024 20:02:01 +0000
ROA not after:            Mon 07 Apr 2025 20:07:01 +0000
asID:                     28270
IP address blocks:        2804:880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7c:db:2a:7a:fe:e4:f1:15:f8:4e:18:ff:d9:88:c7:6a:91:e3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:01 2024 GMT
            Not After : Apr  7 20:07:01 2025 GMT
        Subject: CN=FF748F712DFE4D6E270EF5D06FC6E0B922414A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:69:dd:55:6a:18:3a:1a:ae:53:ad:74:03:
                    93:33:cf:83:0e:77:57:20:b6:7a:4e:17:ce:c6:a7:
                    36:19:5e:61:02:a3:ba:3c:1f:2e:37:7a:5a:6c:ac:
                    7c:db:0a:ea:00:04:1f:fe:ef:47:7a:18:b8:05:af:
                    85:b5:bd:92:fb:be:e0:b5:a3:0b:8a:f9:46:e2:dc:
                    24:0d:99:98:fd:d2:48:fb:0d:b0:a7:06:52:b6:a6:
                    7c:a6:2c:80:cc:2e:18:c3:26:3a:18:79:75:0b:7e:
                    dc:1e:a7:73:6c:4e:03:56:c6:30:89:75:e9:f3:4d:
                    cd:92:f2:b1:59:3c:52:37:80:80:47:12:6a:bd:1b:
                    c7:7d:05:22:1f:57:ab:3d:1c:20:f9:c6:3c:ee:ae:
                    cd:ba:bd:6d:b2:08:b9:88:c1:20:b7:e9:80:d3:94:
                    79:9c:7d:c8:27:88:52:e6:5a:ed:03:f1:dc:7a:5d:
                    b5:af:2c:d9:cc:0d:13:0e:78:0d:7b:04:a9:59:ea:
                    a2:d8:9f:86:b8:c5:15:e6:e3:4f:4f:12:59:94:5c:
                    fa:f2:97:0c:93:6f:de:b1:17:f3:82:c5:0e:5f:07:
                    1c:8a:30:4a:4f:1e:59:f9:26:5e:c6:97:9d:10:eb:
                    f2:d0:94:63:55:e9:3d:dd:b9:08:35:df:53:77:3a:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:8F:71:2D:FE:4D:6E:27:0E:F5:D0:6F:C6:E0:B9:22:41:4A:94
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a3a2f33322d3332203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:b0:cb:f3:45:97:0a:c5:ab:fe:c0:21:ab:c9:df:93:3b:d2:
         9e:fa:53:bf:2b:f5:c3:1d:9b:72:79:f0:e5:8e:b3:5d:64:0f:
         6d:c1:39:11:2b:2e:29:58:93:25:26:f0:55:03:5d:7c:f2:e6:
         97:85:bc:63:b2:c5:db:fb:74:bf:ad:a1:0e:d8:4f:87:ea:51:
         cb:60:7b:ae:ad:7d:a7:de:b3:dc:ff:24:f0:56:87:28:42:41:
         f8:30:37:da:35:f6:34:ee:f0:07:a3:d0:d0:7d:98:dc:51:c8:
         d4:c7:ba:14:b1:7b:09:03:f7:46:7a:1e:cd:48:2c:f4:c0:48:
         3b:d1:88:3a:a5:e9:0e:a0:28:92:59:91:50:72:82:c8:68:da:
         3b:fc:75:9f:d7:1f:0f:df:f4:b3:b1:d6:e1:b7:aa:16:01:e1:
         f3:79:fe:88:f7:cc:70:1b:74:78:e3:6c:f0:5d:d6:82:f9:d3:
         3c:94:48:5a:09:db:00:69:8e:5e:03:0d:78:e2:9f:04:a0:82:
         8c:1a:d6:6c:a6:ac:34:5e:7f:7e:fc:f8:ea:80:c1:1e:fd:36:
         99:33:02:1d:61:fd:5e:85:77:5b:11:6d:87:34:a5:0b:00:07:
         54:7c:42:a5:84:5d:dd:c5:0a:99:57:e1:ea:67:f3:1e:b7:11:
         00:de:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org