Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa
File:                     323830343a356635343a3a2f33322d3334203d3e20323639303932.roa (raw, json)
Hash identifier:          RL1lfm1foQ1mGcYZ5xDs3rTIu6pBijbC5JU0DFNeJXM=
Subject key identifier:   47:CA:9B:DD:E0:46:49:32:FC:7F:79:6B:F0:2C:B3:C4:C2:D0:F9:08
Certificate issuer:       /CN=C112670391E07D2B7C7BCD2FFBE4E165A6953E7C
Certificate serial:       2FD54DC2CE0AB12971FDD598EEA862C7D6418562
Authority key identifier: C1:12:67:03:91:E0:7D:2B:7C:7B:CD:2F:FB:E4:E1:65:A6:95:3E:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C112670391E07D2B7C7BCD2FFBE4E165A6953E7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa
Signing time:             Thu 14 Mar 2024 18:59:22 +0000
ROA not before:           Thu 14 Mar 2024 18:54:22 +0000
ROA not after:            Thu 13 Mar 2025 18:59:22 +0000
asID:                     269092
IP address blocks:        2804:5f54::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d5:4d:c2:ce:0a:b1:29:71:fd:d5:98:ee:a8:62:c7:d6:41:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C112670391E07D2B7C7BCD2FFBE4E165A6953E7C
        Validity
            Not Before: Mar 14 18:54:22 2024 GMT
            Not After : Mar 13 18:59:22 2025 GMT
        Subject: CN=47CA9BDDE0464932FC7F796BF02CB3C4C2D0F908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:c0:6e:62:a1:bc:9f:64:0b:3d:c3:6e:9a:
                    b7:c7:b3:78:e0:01:d9:2c:60:a2:7c:b8:74:4c:9f:
                    8a:53:04:13:d5:4e:f0:8d:dc:d5:81:a7:d7:55:d4:
                    c9:59:cd:72:77:e7:af:1c:f2:1f:f3:53:99:ec:44:
                    14:b4:1e:50:3a:4e:9e:b3:df:c1:41:a3:33:3f:b6:
                    3c:c5:4d:71:ae:3d:3a:27:7b:2e:fd:1e:8f:27:55:
                    b5:96:88:a4:93:1d:03:4a:99:8e:4c:09:0d:da:98:
                    8c:b3:0f:0f:b2:20:ca:f6:58:f9:6f:be:a3:de:3f:
                    a5:e6:24:47:18:39:05:27:aa:98:7b:92:a6:b4:04:
                    22:35:d8:95:33:a0:5d:46:50:c1:f8:5e:7a:8e:a0:
                    14:b1:34:f6:9c:0f:22:18:ef:9b:af:b9:96:b1:86:
                    78:6e:65:b3:f2:0b:5f:9a:06:50:89:9d:ef:9b:c6:
                    54:8e:70:ef:6b:11:9f:e3:78:8d:ba:f1:09:3d:12:
                    97:4e:2a:60:78:de:8c:c6:20:1c:aa:29:b6:76:7f:
                    1c:5c:fe:74:ac:68:59:4c:c2:cb:cf:0c:26:e3:96:
                    88:18:c9:83:b2:fe:ad:75:78:b0:ba:06:dd:16:7c:
                    f3:07:f7:41:58:05:f8:3e:64:2f:b7:7d:0c:4e:b4:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CA:9B:DD:E0:46:49:32:FC:7F:79:6B:F0:2C:B3:C4:C2:D0:F9:08
            X509v3 Authority Key Identifier:
                keyid:C1:12:67:03:91:E0:7D:2B:7C:7B:CD:2F:FB:E4:E1:65:A6:95:3E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/C112670391E07D2B7C7BCD2FFBE4E165A6953E7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C112670391E07D2B7C7BCD2FFBE4E165A6953E7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:b6:fa:bb:1d:d6:58:a8:62:a6:d9:f7:64:a7:51:89:30:
         c5:e1:72:7d:a9:ad:ee:24:25:1a:11:44:40:63:d5:9a:44:fb:
         d0:36:da:96:be:7a:fe:47:21:0e:96:45:93:f5:ee:07:b5:d6:
         8c:0e:1f:dc:df:bc:3c:64:23:f7:75:e8:b6:0c:62:70:7c:10:
         10:54:e0:78:19:da:6d:02:f9:54:f7:d6:3e:d5:38:65:46:8a:
         71:57:02:50:e2:b7:ac:c8:9a:0b:1e:fa:79:13:55:05:9f:07:
         7b:41:3e:7b:60:6a:a3:6a:4f:61:41:90:ee:d4:bc:84:64:ba:
         56:36:c6:d5:68:2b:87:d0:f8:ab:73:1c:f0:ec:6b:d9:23:33:
         64:23:58:2c:f2:20:27:01:75:2b:d3:c6:51:fd:f2:ff:bb:4f:
         40:1e:50:61:23:9a:73:05:49:5c:1c:e4:2e:bb:0e:fc:40:f6:
         e2:a0:60:0e:da:3c:90:82:2f:8b:c4:12:85:f1:94:7c:dc:79:
         69:2e:e8:1d:78:08:59:b8:7b:41:88:e1:cc:68:d1:2b:b3:79:
         9d:18:d2:61:89:a2:58:8d:a6:ff:a9:2d:c9:59:4c:2c:16:39:
         a9:36:29:63:31:19:20:93:80:b5:c6:cc:dc:22:71:82:6d:33:
         d6:68:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org