Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0/323830343a366232633a3a2f33322d3335203d3e20323730333833.roa
File:                     323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (raw, json)
Hash identifier:          XoTDFFKRJ9h9FqrjdW/zLY5MIJqREPW/Vagy/fCP/Z4=
Subject key identifier:   08:6C:5E:FE:1E:8A:96:C5:E3:31:5D:00:E2:2B:CB:A6:E0:AC:D3:B4
Certificate issuer:       /CN=3930933E4296AF76E0E11F4522F1496F141DD1F7
Certificate serial:       3776A9E639023BDB9194C0833847C49E4CB99BF3
Authority key identifier: 39:30:93:3E:42:96:AF:76:E0:E1:1F:45:22:F1:49:6F:14:1D:D1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3930933E4296AF76E0E11F4522F1496F141DD1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0/323830343a366232633a3a2f33322d3335203d3e20323730333833.roa
Signing time:             Mon 16 Oct 2023 16:00:00 +0000
ROA not before:           Mon 16 Oct 2023 15:55:00 +0000
ROA not after:            Mon 14 Oct 2024 16:00:00 +0000
asID:                     270383
IP address blocks:        2804:6b2c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:76:a9:e6:39:02:3b:db:91:94:c0:83:38:47:c4:9e:4c:b9:9b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3930933E4296AF76E0E11F4522F1496F141DD1F7
        Validity
            Not Before: Oct 16 15:55:00 2023 GMT
            Not After : Oct 14 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100E469DAEFAB66FE44E71D4B279E18B9A6564F94F7566ACB7F115FA98B82016BC73B4421B4FB6D74C5257568208DD4491290DB395739091595F8EB41A9D88FF0A08EE7191755806FFBF4F6A8AB3C88A58D42230C32B60513049BBB2FAC3FEC521F600D67CCE6092201937FE08AE510CBAAF93A85B745C74AC3781B20B4ECB2F172C594F8B9E644A1B110C971FEF5616EFFF91695756B4E174B1F9918C153D9AB092B043C74E408FA22B9F4FD1F6CEDAD37433A07F13CE4719BC9F47A674CDC6244952A51806387B0ADF518FA8B87DA1978C3EDF4BAA2630FE3CE57CC039B1E1B0965FD67A0505BBF8C14F3C2D2205E27BB7AC60EF835D30094A77AE9E73D6569BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:da:ef:ab:66:fe:44:e7:1d:4b:27:9e:18:
                    b9:a6:56:4f:94:f7:56:6a:cb:7f:11:5f:a9:8b:82:
                    01:6b:c7:3b:44:21:b4:fb:6d:74:c5:25:75:68:20:
                    8d:d4:49:12:90:db:39:57:39:09:15:95:f8:eb:41:
                    a9:d8:8f:f0:a0:8e:e7:19:17:55:80:6f:fb:f4:f6:
                    a8:ab:3c:88:a5:8d:42:23:0c:32:b6:05:13:04:9b:
                    bb:2f:ac:3f:ec:52:1f:60:0d:67:cc:e6:09:22:01:
                    93:7f:e0:8a:e5:10:cb:aa:f9:3a:85:b7:45:c7:4a:
                    c3:78:1b:20:b4:ec:b2:f1:72:c5:94:f8:b9:e6:44:
                    a1:b1:10:c9:71:fe:f5:61:6e:ff:f9:16:95:75:6b:
                    4e:17:4b:1f:99:18:c1:53:d9:ab:09:2b:04:3c:74:
                    e4:08:fa:22:b9:f4:fd:1f:6c:ed:ad:37:43:3a:07:
                    f1:3c:e4:71:9b:c9:f4:7a:67:4c:dc:62:44:95:2a:
                    51:80:63:87:b0:ad:f5:18:fa:8b:87:da:19:78:c3:
                    ed:f4:ba:a2:63:0f:e3:ce:57:cc:03:9b:1e:1b:09:
                    65:fd:67:a0:50:5b:bf:8c:14:f3:c2:d2:20:5e:27:
                    bb:7a:c6:0e:f8:35:d3:00:94:a7:7a:e9:e7:3d:65:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:5E:FE:1E:8A:96:C5:E3:31:5D:00:E2:2B:CB:A6:E0:AC:D3:B4
            X509v3 Authority Key Identifier:
                keyid:39:30:93:3E:42:96:AF:76:E0:E1:1F:45:22:F1:49:6F:14:1D:D1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0/3930933E4296AF76E0E11F4522F1496F141DD1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3930933E4296AF76E0E11F4522F1496F141DD1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0/323830343a366232633a3a2f33322d3335203d3e20323730333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:6b:13:4a:c9:46:bf:c8:33:a3:f2:99:e7:dc:bd:e0:71:4e:
         87:cd:5c:28:eb:34:d0:12:f4:ab:92:c3:6f:f4:ef:f5:97:6d:
         a0:e8:87:45:3b:e2:c2:e5:47:2a:1e:b0:af:86:57:9c:1c:ab:
         7e:e1:20:c1:28:2f:8f:96:15:a1:80:3d:82:6c:cd:ab:bd:64:
         f5:cd:26:a5:3d:d4:4a:e6:78:0d:4d:b8:7a:8f:8f:3e:24:6b:
         47:3b:33:aa:e4:95:09:65:06:a9:53:a1:b8:97:0a:d5:39:6b:
         3b:7e:94:ca:24:71:43:1e:cb:a0:df:a5:6e:ff:27:8e:8f:79:
         a9:39:0a:d5:f2:e8:90:2f:4a:c4:07:5b:a8:4e:e8:2d:ef:ce:
         3d:fd:26:08:7e:9d:c4:3d:20:40:7c:8b:5a:62:30:43:f3:05:
         2c:c4:6a:3f:67:51:99:a3:22:fe:28:ff:5c:76:96:e1:4d:78:
         15:82:b4:25:ef:c7:2f:fc:c8:55:5d:d8:35:48:7d:50:88:ed:
         8b:b8:24:ee:7c:a5:1d:b9:80:ef:fd:4f:65:bb:41:79:f2:25:
         1c:34:a1:05:54:0f:75:8f:6f:ed:ae:d9:0f:b9:0d:8b:cf:6b:
         e1:8e:21:af:26:71:41:3c:a1:5e:48:a9:3c:36:dc:d9:2a:50:
         f0:34:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org