Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a3a2f33322d3332203d3e20323634303232.roa
File:                     323830343a323939303a3a2f33322d3332203d3e20323634303232.roa (raw, json)
Hash identifier:          hzZhbiphC7twBEN7cDNN7xskJtzvgnkGDOBy5f6wJS0=
Subject key identifier:   BD:58:E8:42:84:72:41:60:65:4E:21:E6:CF:9C:20:6E:14:97:1B:44
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       713BD8FD84B27EB6CDB3B30BEFB9E1A733F06E7C
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a3a2f33322d3332203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:27 +0000
ROA not before:           Sat 27 Apr 2024 13:53:27 +0000
ROA not after:            Sat 26 Apr 2025 13:58:27 +0000
asID:                     264022
IP address blocks:        2804:2990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3b:d8:fd:84:b2:7e:b6:cd:b3:b3:0b:ef:b9:e1:a7:33:f0:6e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:27 2024 GMT
            Not After : Apr 26 13:58:27 2025 GMT
        Subject: CN=BD58E84284724160654E21E6CF9C206E14971B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:4a:4b:6e:0b:e5:75:fb:e8:70:ab:76:1b:
                    21:07:c8:30:8b:22:85:ea:5a:a3:56:38:36:a3:6f:
                    d7:ad:f7:15:89:01:5b:ca:bd:ca:79:11:c4:6f:9d:
                    72:85:77:35:c6:7b:4a:e1:5f:48:59:07:a1:39:6b:
                    01:af:37:83:21:3d:07:ba:43:bf:88:bf:57:9c:45:
                    cc:23:8c:bb:93:9f:17:3f:09:7a:2a:12:b7:c0:9a:
                    1c:97:91:d8:b1:ed:31:a5:61:e6:6d:57:ea:6e:72:
                    14:ec:f2:fa:56:86:ef:c3:58:9f:4e:88:c0:ac:30:
                    b7:83:ef:d0:25:fc:c0:2c:8f:ff:45:27:82:27:0c:
                    14:3b:c0:6f:d3:4e:2c:d5:3e:16:1f:87:34:e6:c0:
                    e4:39:aa:bf:ed:9f:e8:86:73:39:1e:0c:38:b9:d8:
                    fb:20:b8:ec:8f:f6:cd:4d:37:7a:3b:80:1d:c0:02:
                    c6:79:55:76:70:47:a8:d1:cb:ef:ff:1f:d3:cc:7c:
                    1c:f9:fb:8e:93:9b:cf:dc:6d:c0:be:b4:bd:86:7d:
                    37:20:b9:d9:1e:d7:37:b4:9a:e3:b2:5d:cc:50:ba:
                    bf:f2:9b:d1:5f:ae:ee:1c:d1:fd:50:1e:c1:df:20:
                    87:67:cb:fa:83:34:6d:fb:e8:67:2f:be:e1:c6:a6:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:E8:42:84:72:41:60:65:4E:21:E6:CF:9C:20:6E:14:97:1B:44
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a3a2f33322d3332203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990::/32

    Signature Algorithm: sha256WithRSAEncryption
         e2:96:5b:b4:03:ac:a1:cf:dc:16:e2:00:c4:cd:43:f5:40:34:
         45:25:ca:0d:4a:c6:af:49:b7:bc:71:5a:7a:f4:de:07:38:22:
         50:a2:c9:51:93:19:e4:b2:a4:3f:99:18:62:af:f7:26:e6:da:
         a8:79:37:b5:51:f8:d0:e0:1a:e8:12:1b:16:60:ff:85:89:c5:
         6a:b3:4e:2d:7c:b7:16:11:e9:c2:d3:c0:51:04:53:1a:89:ff:
         f8:57:80:57:d9:b2:bc:1f:9f:f5:00:ac:5f:83:84:82:c4:49:
         22:57:49:73:63:f1:f0:3b:f7:d3:f6:23:c2:1b:1e:3f:ef:e5:
         44:b8:13:aa:1b:8e:b1:2c:2d:5a:2b:2e:d8:22:4c:01:d6:32:
         2d:40:ec:3e:eb:42:c1:2a:05:25:1a:2e:7a:d4:f0:82:00:ec:
         4c:03:65:ac:ad:5d:f2:08:8d:ef:e5:98:e7:ab:81:b3:4f:bf:
         cf:9b:ff:31:1e:d8:0c:5c:1d:4d:49:b8:36:4b:db:54:95:96:
         8d:a9:06:2a:04:7d:c0:44:6e:d4:0c:04:40:5f:59:90:a6:9a:
         ef:80:3b:da:56:17:b8:83:20:65:d1:26:9b:ab:71:07:c0:69:
         1e:c9:7a:71:8e:35:ee:06:54:c9:12:17:f1:2d:cb:29:b3:70:
         db:f2:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org