Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa
File:                     323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa (raw, json)
Hash identifier:          TVvsTDXj05DQ/EXfNUJAFvJ8LblerU2Y6YIk0z226qg=
Subject key identifier:   93:54:C1:A1:92:7D:88:3D:3B:92:35:F9:93:83:40:41:65:56:75:00
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       69E717D897C181DC81D8806D18EF95B2C5EDCB7C
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:28 +0000
ROA not before:           Sat 27 Apr 2024 13:53:28 +0000
ROA not after:            Sat 26 Apr 2025 13:58:28 +0000
asID:                     264022
IP address blocks:        2804:2990:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e7:17:d8:97:c1:81:dc:81:d8:80:6d:18:ef:95:b2:c5:ed:cb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:28 2024 GMT
            Not After : Apr 26 13:58:28 2025 GMT
        Subject: CN=9354C1A1927D883D3B9235F99383404165567500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:33:93:68:ad:85:87:a5:45:24:05:9c:75:
                    aa:91:28:e2:1d:dd:4a:d5:46:34:54:b5:e3:6c:69:
                    25:a0:88:c1:57:d5:ec:a2:a8:f2:72:a1:8e:92:3a:
                    95:bf:99:93:06:56:ca:2f:83:90:0d:ff:21:63:4e:
                    c2:6b:ae:4e:a9:8d:06:fc:1a:6a:a1:a5:fb:f0:35:
                    61:38:41:08:16:ed:63:93:99:6a:e5:a4:f6:7d:f2:
                    4b:c2:68:cd:0f:3e:64:6b:f0:3d:14:2e:6c:e1:5d:
                    20:77:6a:5f:89:29:50:27:37:4d:59:62:18:c3:4d:
                    6b:d1:b9:fd:3a:84:fd:1c:a1:b4:19:c3:22:da:1c:
                    6f:71:16:02:55:02:8e:b8:b9:78:16:a6:4c:fb:d8:
                    24:12:f9:c5:05:d0:27:bf:72:d5:ab:03:97:b4:af:
                    17:b8:1d:a7:48:a9:13:e4:9f:c4:64:fa:38:b7:a3:
                    02:8d:f9:c7:ce:75:6d:be:8f:e7:ac:21:6d:d1:5c:
                    f3:a7:30:02:74:57:41:6f:9d:2e:17:6c:af:30:e8:
                    44:39:ca:42:0d:e4:9b:60:cf:6b:af:df:a1:12:0b:
                    a6:22:10:14:d4:c2:9c:0c:6b:20:a1:9c:0e:95:bc:
                    f4:ac:3b:9d:20:29:91:08:ac:4a:7e:38:1a:5a:9b:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:C1:A1:92:7D:88:3D:3B:92:35:F9:93:83:40:41:65:56:75:00
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a383130303a3a2f34302d3430203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:fe:28:91:d7:a8:47:e5:58:b6:50:17:06:81:86:e0:cc:ef:
         0d:af:ad:48:11:e6:aa:db:36:b5:38:c5:72:db:82:3b:0e:10:
         3d:74:e3:bc:07:4b:6e:41:55:e5:59:35:c6:86:f2:01:44:e7:
         77:5f:55:51:d3:db:8b:82:ce:85:b6:62:b5:8e:2d:c1:34:e7:
         11:e4:3b:1f:6d:6c:d2:b3:7c:6e:5d:6f:94:f0:ca:f8:49:aa:
         bb:3a:a0:09:43:23:a7:f0:db:6b:3a:ea:f9:60:32:df:aa:74:
         47:f7:6d:b9:42:84:41:62:6a:38:07:7d:8e:7e:7e:06:a9:7e:
         6f:26:c8:60:f3:fd:fe:1d:f0:0f:e1:e2:fd:4f:18:af:f2:d6:
         2f:b1:d8:fa:3e:86:cb:8b:5a:73:4e:30:69:10:ff:19:ec:0f:
         4c:c9:30:77:41:bc:55:fa:4d:21:b5:04:0f:e9:bb:31:33:08:
         7f:bd:af:0c:38:c0:45:0e:5d:cb:07:d9:aa:cc:ac:01:0d:9a:
         2e:f6:b2:13:42:e9:f7:49:a1:d4:af:2c:c9:9b:c5:9e:38:e8:
         79:30:cd:30:48:65:16:cb:54:97:8d:82:2f:e5:ce:c4:26:5f:
         d9:3d:1c:96:44:1f:e4:ef:fa:c7:42:3d:54:1c:2a:10:99:cb:
         21:10:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org