Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3333203d3e203532363737.roa
File:                     323830343a6331383a3a2f33322d3333203d3e203532363737.roa (raw, json)
Hash identifier:          ZWC/o3h4+V/taCuxoY6ST+CVYOpMh39npKfLGvRDh4U=
Subject key identifier:   2F:D8:B7:11:F5:CA:C6:BC:36:D7:B6:D6:31:D3:98:00:02:97:E0:61
Certificate issuer:       /CN=303AE09FFD23B1162E3AF84CB43D7FCE33DF016F
Certificate serial:       601AEBB49E0F515594DF77CFCEC243B56B1E40A2
Authority key identifier: 30:3A:E0:9F:FD:23:B1:16:2E:3A:F8:4C:B4:3D:7F:CE:33:DF:01:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3333203d3e203532363737.roa
Signing time:             Thu 29 Feb 2024 21:42:42 +0000
ROA not before:           Thu 29 Feb 2024 21:37:42 +0000
ROA not after:            Thu 27 Feb 2025 21:42:42 +0000
asID:                     52677
IP address blocks:        2804:c18::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1a:eb:b4:9e:0f:51:55:94:df:77:cf:ce:c2:43:b5:6b:1e:40:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303AE09FFD23B1162E3AF84CB43D7FCE33DF016F
        Validity
            Not Before: Feb 29 21:37:42 2024 GMT
            Not After : Feb 27 21:42:42 2025 GMT
        Subject: CN=2FD8B711F5CAC6BC36D7B6D631D398000297E061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:9e:b8:4a:94:d7:32:c2:09:cd:62:c6:71:
                    ba:e2:2d:a6:16:34:77:b5:ed:32:fb:a9:cc:63:ac:
                    7f:4b:54:16:c0:0d:e9:77:19:22:ad:89:2c:b0:b3:
                    56:82:07:d2:ba:1a:8b:d0:67:c2:24:30:8a:ea:47:
                    d4:ee:9d:ee:fd:0d:c6:80:7d:87:a4:3a:37:51:6e:
                    e5:a1:42:6b:8e:64:7b:27:33:0e:0c:b6:a7:78:a5:
                    20:5f:c9:3a:7c:b3:0a:3e:60:57:ce:aa:37:f7:c2:
                    10:48:ea:53:dc:f2:c7:d9:62:c6:95:b1:a9:98:51:
                    18:28:3c:24:5d:a0:75:11:8a:6d:cf:08:52:50:9d:
                    fe:47:88:fb:c3:d8:ac:fb:b2:f2:50:98:91:7d:61:
                    fa:ce:d4:7c:9f:16:b5:95:0b:2c:25:21:8b:fb:46:
                    3b:dd:60:ff:38:16:d1:44:20:a1:7e:e2:0a:09:5f:
                    4e:f3:8d:c7:f0:f9:bd:9c:d5:12:be:31:61:0d:12:
                    82:1f:26:11:f7:03:61:50:10:50:e3:8b:b3:9e:8a:
                    c0:de:f1:e0:4d:e5:0f:ca:aa:fd:6f:1c:63:14:8b:
                    44:59:40:cd:57:39:d2:c0:4e:95:ce:c8:66:3d:65:
                    7b:00:34:c1:dd:04:19:a0:0c:2a:f2:3f:1d:35:4e:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:B7:11:F5:CA:C6:BC:36:D7:B6:D6:31:D3:98:00:02:97:E0:61
            X509v3 Authority Key Identifier:
                keyid:30:3A:E0:9F:FD:23:B1:16:2E:3A:F8:4C:B4:3D:7F:CE:33:DF:01:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3333203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:22:e7:96:0d:3e:29:9d:a1:1d:85:e2:9d:0f:6d:46:ec:
         01:a3:c8:ef:f8:60:76:fe:80:a8:20:b2:16:ef:83:2e:3e:7f:
         15:5c:87:ab:75:f8:5e:ae:bc:8d:59:06:19:75:8d:58:63:39:
         73:42:e9:ba:5c:df:82:09:69:d2:bd:76:7e:d3:a4:8f:9a:72:
         5d:5e:6a:ec:b7:bb:e0:80:a3:41:4e:d2:35:83:b4:8e:cf:9e:
         13:1d:37:10:87:25:c8:e8:11:77:2c:97:9b:3b:54:41:9b:71:
         d4:80:bd:4b:b7:86:4f:8d:bc:85:88:30:6a:4a:18:91:bd:cd:
         c0:77:6e:d8:26:ab:aa:22:9d:86:b6:7f:7f:e1:b1:3b:31:bb:
         75:9e:d5:9d:65:ad:a1:0f:5d:52:2b:86:46:96:1f:0c:79:0f:
         75:dc:08:0d:f9:c8:74:8c:1c:7b:de:5d:59:c3:ff:a9:e3:c8:
         ee:cd:b8:e8:78:2b:a5:df:46:0f:21:54:79:07:ef:db:e2:6d:
         f6:30:e4:c0:6f:c1:35:a5:62:0d:eb:8b:26:34:f0:fd:fd:93:
         4d:b9:e4:fe:7b:ef:94:8c:ac:73:13:84:62:94:4c:2a:ce:23:
         a2:91:a0:e1:52:16:5d:c9:6d:d4:1d:7b:e8:66:76:b7:3e:f9:
         53:c4:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org