Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa
File:                     323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa (raw, json)
Hash identifier:          EpSp09oLrSfSVvBTQ6XDI6M9X0/J22Fl20LWrjlvSmw=
Subject key identifier:   5F:1A:48:6C:2B:A7:7F:32:37:97:73:60:F6:BD:BA:01:9D:1A:AD:BD
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       132A833C8841EACC5CA62476259046E354AAF7F3
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:51 +0000
ROA not before:           Mon 08 Apr 2024 20:01:51 +0000
ROA not after:            Mon 07 Apr 2025 20:06:51 +0000
asID:                     28270
IP address blocks:        2804:880:fc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:83:3c:88:41:ea:cc:5c:a6:24:76:25:90:46:e3:54:aa:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:51 2024 GMT
            Not After : Apr  7 20:06:51 2025 GMT
        Subject: CN=5F1A486C2BA77F3237977360F6BDBA019D1AADBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:4f:b7:94:8d:dd:a7:3e:fc:3e:1a:8c:d8:
                    24:25:c9:00:dc:78:66:d1:34:76:66:f1:ec:d6:f6:
                    e7:8d:a0:1e:9d:2b:56:17:80:19:0f:84:d5:a1:30:
                    dc:d0:ee:70:21:61:87:db:af:c0:02:f1:8c:f7:0e:
                    01:77:c0:30:e6:65:d2:e3:bd:c9:1a:76:3d:72:f2:
                    d2:27:cd:de:f0:eb:1c:49:f6:6c:fe:3b:e5:88:ec:
                    1a:16:aa:c6:d0:d7:c4:c2:d3:cf:61:02:6c:ad:c1:
                    61:43:31:50:ed:37:d3:83:ea:d2:9b:18:56:dd:b6:
                    bd:9f:af:08:18:d5:67:a1:81:32:79:1c:74:c4:a3:
                    f8:f1:39:2e:56:1e:d6:61:be:50:65:1c:e7:31:49:
                    f3:d2:55:1b:a5:c8:9e:39:94:c5:04:64:ff:fc:28:
                    89:0c:d4:08:fd:e7:54:b0:2e:6e:7e:51:ef:60:77:
                    fc:c7:c9:7e:aa:29:18:e7:7e:11:fa:b3:97:86:f9:
                    5d:ad:c6:1e:78:ec:c2:b0:45:97:2b:82:9f:0c:88:
                    c7:b0:57:22:78:60:37:fe:87:e7:7a:c9:02:d7:96:
                    d6:70:56:c8:7b:10:6a:7e:fd:79:15:5f:f0:02:3b:
                    a4:e4:d2:36:75:e6:56:a6:42:df:64:83:0b:ba:5c:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1A:48:6C:2B:A7:7F:32:37:97:73:60:F6:BD:BA:01:9D:1A:AD:BD
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         08:57:a8:7a:85:1a:cc:46:f4:ae:3b:64:88:0b:1e:61:46:37:
         fe:a6:b2:c6:27:3a:fb:ad:f0:c8:89:fb:87:f7:56:9e:26:f9:
         70:1d:fe:1d:5e:47:bd:a6:55:2a:e4:97:b6:6b:52:46:38:ad:
         98:f2:cc:16:42:99:7f:1b:da:0f:5a:5e:2f:ce:c3:7d:d1:8d:
         49:ff:a0:40:22:a2:cd:61:f9:41:cd:07:a4:22:69:db:c2:6b:
         75:93:0c:0d:9d:d4:b6:0d:b3:15:b8:ab:c5:6b:3e:bd:0c:77:
         2d:b5:84:64:25:39:f9:85:39:1f:c1:3f:30:d6:f0:9a:da:07:
         e1:62:b2:00:aa:b9:a2:c1:4d:98:07:57:bb:15:11:bc:a6:23:
         c6:c7:44:df:e9:5d:f6:29:9f:d4:dd:ec:67:7d:bf:bb:02:0e:
         22:3e:a2:1e:15:90:dd:c4:43:fb:be:98:2f:43:40:9a:e6:eb:
         11:7a:8a:b6:a0:5a:fe:71:59:44:56:dc:38:0d:5d:5d:31:c1:
         99:08:b4:c4:a3:0a:6a:f3:3a:a0:39:65:cd:b0:9e:50:f6:04:
         ce:d4:00:e8:78:9e:26:59:11:64:1b:33:c7:2f:ed:ba:93:f9:
         ce:b0:c9:0d:b8:de:b9:c5:7f:9f:85:52:9b:e1:71:2c:06:73:
         15:a8:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org