Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa
File:                     323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa (raw, json)
Hash identifier:          kZ2Q9xNZiG7ktRrJh+HtziwpXAz3TQu13NpsFLyoFUc=
Subject key identifier:   3E:28:2F:96:CD:2C:C6:0B:C2:97:FE:C0:B5:64:0D:6C:4A:9A:76:D7
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       4E2C1ED6EAE2E04686DF11D8EEE402FF4738537F
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:28 +0000
ROA not before:           Sat 27 Apr 2024 13:53:28 +0000
ROA not after:            Sat 26 Apr 2025 13:58:28 +0000
asID:                     264022
IP address blocks:        2804:2990:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2c:1e:d6:ea:e2:e0:46:86:df:11:d8:ee:e4:02:ff:47:38:53:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:28 2024 GMT
            Not After : Apr 26 13:58:28 2025 GMT
        Subject: CN=3E282F96CD2CC60BC297FEC0B5640D6C4A9A76D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:09:35:7c:47:e2:d6:9c:50:96:3a:7c:9a:
                    bb:17:f6:07:b4:46:83:31:54:b9:33:9d:07:be:8d:
                    24:bd:55:8f:d0:07:c0:ea:d2:27:5a:4c:a4:00:ba:
                    6c:7b:b0:82:0e:e3:f4:b1:62:d4:ee:d3:ae:11:d3:
                    16:c8:16:c4:3d:ae:43:73:a4:53:1b:8c:e9:b2:a3:
                    9a:9e:fc:f4:1c:64:e5:93:11:71:61:60:fb:a0:b5:
                    f0:84:ed:4b:40:36:74:97:f7:23:3a:96:c9:14:fa:
                    d0:43:a7:b1:0a:f0:e4:31:8d:16:14:df:e3:35:16:
                    07:b7:f5:71:c3:a3:d8:31:a3:ee:5d:65:aa:e1:f6:
                    1e:40:9d:4c:61:f7:80:2e:44:17:7c:91:30:f1:da:
                    6a:c7:61:b8:3c:4a:8d:9a:00:07:dd:da:f7:80:a6:
                    89:f8:ae:99:56:61:b3:b7:10:6d:64:d2:08:88:55:
                    47:af:96:d1:05:f4:c8:97:ab:e9:a6:05:6c:1d:49:
                    33:15:af:f1:eb:f8:b2:89:14:62:f3:61:b1:67:e8:
                    ae:d4:7d:71:9f:91:61:cb:02:25:c8:a0:7d:12:59:
                    ad:29:25:8c:a8:1b:a0:94:03:00:ae:36:4a:5c:a9:
                    2c:02:08:f8:83:48:04:48:59:36:c8:66:66:d3:67:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:2F:96:CD:2C:C6:0B:C2:97:FE:C0:B5:64:0D:6C:4A:9A:76:D7
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:19:be:1d:be:48:4c:53:7b:f8:31:ff:7c:2d:72:61:b3:f6:
         cd:76:2c:e7:4b:ed:0f:df:55:ef:f5:36:42:57:86:54:36:d2:
         6a:b9:0d:a6:27:ae:7c:21:9e:62:1d:2e:bd:70:75:fa:b4:16:
         35:19:5a:57:46:05:e5:71:78:98:5a:21:87:38:0c:a0:12:5f:
         85:f6:2c:e0:28:0b:db:6e:7f:1a:0f:90:70:f4:59:23:3f:47:
         bc:63:75:f4:f0:ef:79:a3:1e:8d:1c:93:cb:31:65:16:b1:a2:
         9d:79:ab:77:ae:12:5b:33:d4:20:9c:a3:b9:d7:83:2b:9e:b5:
         c2:35:e2:9b:85:b3:83:37:48:ee:68:de:c2:54:e5:7c:97:98:
         57:7c:58:72:a3:9a:9b:8d:ca:1c:7b:45:cf:7e:4f:0b:68:27:
         ab:34:63:f9:e8:a0:81:2d:68:5c:51:78:54:57:5b:3f:3e:fc:
         f2:9e:5c:44:a8:a9:51:3c:ff:dd:1f:11:68:63:d3:b7:a2:ea:
         dd:de:c4:a3:e4:e0:42:ff:1e:5c:46:e7:fd:c7:00:a5:e8:24:
         95:9e:d3:ad:82:a8:12:0e:e6:32:20:55:e2:8d:24:f7:11:25:
         5f:dc:b2:a6:f7:23:00:1e:0e:49:fb:c1:4d:87:4c:72:03:e7:
         4e:06:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org