Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa
File:                     323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa (raw, json)
Hash identifier:          c4I15gf7D5MFwayYVROmvxLPQk5+xNXndYL+PqNaR7Q=
Subject key identifier:   B0:D1:B6:0D:A9:AE:0B:21:63:7E:C0:0F:89:89:49:8A:EC:A8:1E:12
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       4218632901F58C807EB5A6FCC0A5BB724B508489
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:28 +0000
ROA not before:           Sat 27 Apr 2024 13:53:28 +0000
ROA not after:            Sat 26 Apr 2025 13:58:28 +0000
asID:                     264022
IP address blocks:        2804:2990:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:18:63:29:01:f5:8c:80:7e:b5:a6:fc:c0:a5:bb:72:4b:50:84:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:28 2024 GMT
            Not After : Apr 26 13:58:28 2025 GMT
        Subject: CN=B0D1B60DA9AE0B21637EC00F8989498AECA81E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:62:a3:8f:28:cb:b6:6a:e2:18:09:ed:71:
                    e7:3b:e6:39:df:92:ce:ca:80:12:71:e5:8e:b7:04:
                    e2:13:e8:28:40:00:25:3b:87:bb:ef:cb:36:5d:2e:
                    3f:bb:41:f4:85:f1:9e:f4:bc:e0:90:a8:30:bf:74:
                    15:6e:30:09:e7:4e:23:bf:52:a7:fc:6d:58:eb:7f:
                    d6:c3:14:bf:d9:fa:b7:02:83:d4:b9:4e:21:b0:b9:
                    06:37:b2:70:e6:41:f2:ee:ac:01:41:38:17:c3:45:
                    95:8a:26:b9:35:bc:11:ce:82:44:7d:a9:45:e3:a8:
                    d7:55:66:fb:a0:d5:3f:4a:53:e9:0a:26:75:e4:14:
                    1b:74:03:08:94:58:80:a1:0b:bc:1b:00:27:51:31:
                    2b:bc:26:57:55:81:6e:de:d2:a0:ec:b8:1b:ca:79:
                    b7:d7:42:e6:a6:ff:af:fe:a5:83:53:38:85:85:be:
                    fa:f0:31:d0:a9:34:0d:53:44:86:2e:e4:69:96:ec:
                    7c:35:b3:98:b1:43:63:35:78:02:b3:9e:ac:e5:e7:
                    a0:1f:c0:79:55:80:26:59:af:05:50:e0:c4:b4:ec:
                    0e:05:5e:e1:d2:b6:e8:bb:d8:c5:b3:b3:ec:96:81:
                    3e:8d:b2:d8:b9:74:fb:c6:12:3f:18:c8:cc:ea:62:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:B6:0D:A9:AE:0B:21:63:7E:C0:0F:89:89:49:8A:EC:A8:1E:12
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         de:e1:fe:e7:da:e4:0f:34:5c:2a:c5:ef:9a:8b:3c:80:7a:d2:
         f4:97:93:9d:b0:c6:ae:d0:f5:ed:1c:77:17:17:79:53:12:58:
         fc:de:6c:e4:d1:3b:17:f3:7d:2c:26:43:23:09:58:6f:7d:60:
         e8:52:f0:b5:6c:c8:47:60:39:e2:ed:3a:b7:9a:f2:76:0d:49:
         6c:04:d0:8a:30:45:1c:bf:23:14:10:a5:b7:3d:66:9a:38:21:
         c7:c4:20:c7:71:59:cd:f5:0a:ff:53:41:1e:e3:ff:10:bd:60:
         9a:17:e6:b6:d6:54:6a:ef:0b:7a:d7:38:81:85:99:35:f9:4f:
         23:93:cd:f5:59:26:c9:52:eb:a5:9c:a3:fa:55:0f:d6:1c:a6:
         97:81:1e:dc:97:80:71:cd:a1:9c:74:ee:c5:2f:24:fb:4f:78:
         55:d9:2c:d0:6b:0d:0b:a1:bd:b0:20:c5:10:7c:fa:1d:99:02:
         f0:ac:7f:2c:d1:97:cc:8c:44:78:b6:1a:2e:74:c2:4a:2e:5b:
         65:65:52:69:d6:b8:c8:90:de:00:81:4f:95:51:a6:04:c1:c0:
         83:64:63:23:12:cf:69:a7:47:83:b6:9f:ad:11:36:9e:17:4e:
         96:bd:12:30:42:13:e2:38:bf:c4:ec:e7:38:c4:30:ce:61:4d:
         cb:a9:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org