Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
File:                     323830343a333361383a3a2f33322d3430203d3e20323635343130.roa (raw, json)
Hash identifier:          I+UsfZTlDkz/x2DGXgyQ3/yA/Sf7prTm+K8Pgb5Autg=
Subject key identifier:   36:87:41:57:DE:BB:E7:18:09:DA:D7:28:5F:82:D7:4D:E4:38:A7:4E
Certificate issuer:       /CN=54C4052D39431D563CCB2D911DC264CD61964490
Certificate serial:       27F26FFE847B7E91609508478156428879372502
Authority key identifier: 54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
Signing time:             Tue 12 Mar 2024 14:01:37 +0000
ROA not before:           Tue 12 Mar 2024 13:56:37 +0000
ROA not after:            Tue 11 Mar 2025 14:01:37 +0000
asID:                     265410
IP address blocks:        2804:33a8::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f2:6f:fe:84:7b:7e:91:60:95:08:47:81:56:42:88:79:37:25:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54C4052D39431D563CCB2D911DC264CD61964490
        Validity
            Not Before: Mar 12 13:56:37 2024 GMT
            Not After : Mar 11 14:01:37 2025 GMT
        Subject: CN=36874157DEBBE71809DAD7285F82D74DE438A74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:bc:cd:3e:17:18:45:5a:c9:ea:6a:d2:9e:
                    13:69:bc:f3:f9:ff:f4:8f:be:10:cc:17:3e:f4:ec:
                    aa:6d:88:ac:9d:f2:d1:8e:cf:1e:15:ca:18:de:81:
                    00:96:a8:d4:46:ec:88:af:f5:7c:c8:b9:42:03:b7:
                    0d:b3:73:97:89:6f:04:aa:60:e4:4f:29:0b:14:c3:
                    84:c5:eb:dc:0b:7e:29:e6:7c:23:89:0f:b8:e6:d4:
                    db:98:6d:fb:33:51:63:11:42:71:fa:4c:be:f9:09:
                    9b:85:d3:0d:e3:13:67:6d:8d:28:a6:8a:4e:af:38:
                    ef:41:98:ad:bf:56:40:9b:d4:94:12:ad:f0:27:b7:
                    c1:73:9a:3b:f5:18:4e:cc:21:7f:95:27:66:11:25:
                    69:3d:e4:da:be:14:53:e8:46:5e:e1:4b:b4:a8:6c:
                    5f:45:af:34:b0:32:f6:03:f3:01:b5:6f:61:61:16:
                    03:d9:ce:d5:4a:29:91:18:c7:16:fa:29:95:6c:87:
                    e9:14:5b:20:3f:14:ce:5b:2b:e7:a8:a7:d2:e3:7b:
                    c3:30:32:47:81:47:da:4c:56:fd:29:51:91:25:ff:
                    22:53:45:c8:23:92:9a:b5:5f:14:f1:12:b8:74:26:
                    23:e0:44:1e:6b:3d:a7:44:b9:41:87:ad:78:68:62:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:41:57:DE:BB:E7:18:09:DA:D7:28:5F:82:D7:4D:E4:38:A7:4E
            X509v3 Authority Key Identifier:
                keyid:54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:b6:8f:f2:5e:68:89:e4:ee:4d:da:4b:4b:38:69:a1:ba:
         33:1c:ee:0e:cd:b3:33:01:98:95:77:b2:b6:d6:f9:ce:a4:77:
         d1:39:ba:c7:e9:2e:22:a2:5d:f5:da:19:6c:f3:5c:b6:0b:8c:
         ec:bb:72:9e:5e:4e:54:81:b6:d5:88:0b:12:d5:2d:16:3c:5d:
         e4:d7:30:92:4d:07:66:b4:37:3c:1e:bb:5f:be:4c:b0:7a:ec:
         76:f0:8d:b5:a0:53:86:61:82:3a:46:38:92:be:00:78:7d:f3:
         08:5b:c1:8b:79:b1:9c:2a:ce:fc:1c:b8:8d:c5:1b:3b:d5:3a:
         42:eb:c8:cb:0e:82:67:c3:00:1d:7d:0d:e6:88:ae:8e:e2:00:
         9f:97:1d:ab:5d:52:44:36:d3:7b:4e:34:ef:e4:7e:d4:b6:f5:
         9f:5f:27:19:55:fa:22:ed:5f:b8:75:70:60:58:fb:81:98:f9:
         12:b8:7b:03:15:2b:ec:0b:4c:a9:37:f5:ca:c6:60:ba:ba:1d:
         af:4a:ae:f6:04:54:1e:24:06:26:5c:13:f6:57:a9:19:5d:ba:
         e4:78:da:75:06:cc:f1:da:c8:a7:33:90:60:45:ad:84:aa:a7:
         13:7f:64:73:a9:a7:56:e1:9f:51:a1:74:69:81:02:8e:51:ae:
         9d:20:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org