Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3332203d3e203238363035.roa
File:                     323830343a3363303a3a2f33322d3332203d3e203238363035.roa (raw, json)
Hash identifier:          xtL9DZZFPVDE+ttgdj27H8+4Bmmhmh9OqHbP0cvVdAE=
Subject key identifier:   D2:C9:CB:C1:9E:98:B7:7B:9E:01:FF:0D:99:79:A6:64:81:F4:8D:AA
Certificate issuer:       /CN=3C0726347D821E5C80726A54D9A24005A91ED3A8
Certificate serial:       7A70C3E65E5DD0EC0F59DF63AAA5F7DE280396AA
Authority key identifier: 3C:07:26:34:7D:82:1E:5C:80:72:6A:54:D9:A2:40:05:A9:1E:D3:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C0726347D821E5C80726A54D9A24005A91ED3A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3332203d3e203238363035.roa
Signing time:             Wed 07 Feb 2024 23:35:56 +0000
ROA not before:           Wed 07 Feb 2024 23:30:56 +0000
ROA not after:            Wed 05 Feb 2025 23:35:56 +0000
asID:                     28605
IP address blocks:        2804:3c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:70:c3:e6:5e:5d:d0:ec:0f:59:df:63:aa:a5:f7:de:28:03:96:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0726347D821E5C80726A54D9A24005A91ED3A8
        Validity
            Not Before: Feb  7 23:30:56 2024 GMT
            Not After : Feb  5 23:35:56 2025 GMT
        Subject: CN=D2C9CBC19E98B77B9E01FF0D9979A66481F48DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:57:f9:b6:c7:3d:2b:4a:4b:06:b3:dd:3d:
                    06:82:86:70:98:4a:68:09:df:7e:77:b6:95:d3:ca:
                    cf:43:28:ab:3b:66:d7:fd:1c:dd:e4:ad:cf:45:1a:
                    79:2c:f2:7c:70:a7:72:fa:8d:e9:f6:8b:de:da:18:
                    16:c3:65:e7:67:5d:69:06:a6:4a:52:a3:c2:41:e6:
                    a0:13:5b:a7:3b:8e:86:b9:d5:cd:d1:2f:a3:3c:b5:
                    ce:59:40:c2:10:19:a0:b3:a1:40:04:76:c7:a9:4c:
                    f0:25:c6:78:42:8d:2e:44:c9:69:37:3a:3d:e9:77:
                    bc:50:4a:cc:14:01:9a:92:62:21:77:89:9a:e4:7b:
                    b3:14:ef:1c:a4:15:66:86:82:0a:f3:7c:9e:ce:4e:
                    22:d3:a1:61:21:f3:88:ff:fb:72:f7:a0:87:a0:60:
                    d2:c7:7b:5e:9b:69:00:0f:86:d2:66:b4:fb:2e:3b:
                    d1:93:23:17:cd:c2:75:c7:d7:54:9a:de:78:0c:d3:
                    94:e0:b4:a7:cf:ee:e8:3c:17:ab:2a:ba:54:2d:27:
                    ca:8e:a9:86:b1:a2:7d:44:4c:6e:b3:3b:75:e6:6d:
                    6d:21:9e:2d:f0:10:1a:0d:3d:ba:45:c8:91:3c:6f:
                    78:6f:20:db:e5:92:ac:b8:b2:bc:63:03:81:f8:8f:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:CB:C1:9E:98:B7:7B:9E:01:FF:0D:99:79:A6:64:81:F4:8D:AA
            X509v3 Authority Key Identifier:
                keyid:3C:07:26:34:7D:82:1E:5C:80:72:6A:54:D9:A2:40:05:A9:1E:D3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3C0726347D821E5C80726A54D9A24005A91ED3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C0726347D821E5C80726A54D9A24005A91ED3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3332203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:b3:ae:d0:d7:ca:75:29:c5:db:25:43:d9:48:00:2f:63:
         a3:b4:ce:b3:a9:7a:81:fa:7b:04:f8:c1:8c:36:ac:91:5f:19:
         58:24:07:86:63:90:05:85:71:07:2f:8c:bd:7c:79:43:56:5a:
         cb:57:b0:df:7d:42:ba:d8:43:76:c2:3d:3f:de:db:ec:75:62:
         aa:b6:54:46:39:12:af:99:b3:d8:05:c6:8e:01:82:e3:23:1b:
         5e:15:da:e6:02:2e:18:d8:90:48:8a:09:17:fe:36:45:df:7a:
         da:a0:36:67:a0:3c:2b:a5:21:d4:33:79:df:21:a5:cb:06:12:
         8a:c2:a3:a4:ae:c7:d3:5d:d3:6d:38:00:52:65:f0:a9:1e:19:
         95:6e:9f:f2:71:2a:3a:9e:0e:ac:26:02:19:5b:b6:0f:83:6c:
         67:58:62:33:92:78:dd:76:0a:de:e5:86:d5:b6:9b:b5:67:29:
         b7:6f:7b:0d:35:77:a7:76:93:31:db:51:38:b9:15:b5:c3:af:
         7b:e9:12:76:cb:4c:b5:28:4f:0f:8a:96:10:e9:7c:58:03:d5:
         2e:58:46:b7:d1:39:c9:77:2d:87:a6:46:68:46:b0:21:e0:17:
         fb:1a:6b:ce:92:21:bf:de:bb:ba:53:70:1d:64:43:39:a1:32:
         26:e9:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org