Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa
File:                     323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa (raw, json)
Hash identifier:          qKFnAMm9B4wTpSnhwwum8wbAh2bTfDbZYy49Qg5sC0w=
Subject key identifier:   25:C2:13:15:64:12:CB:56:F8:8D:B0:6A:4B:7B:ED:70:E0:40:53:87
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       3081FBDEA3DD829F3CAC474D4E48588A002F3206
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:27 +0000
ROA not before:           Sat 27 Apr 2024 13:53:27 +0000
ROA not after:            Sat 26 Apr 2025 13:58:27 +0000
asID:                     264022
IP address blocks:        2804:2990:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:81:fb:de:a3:dd:82:9f:3c:ac:47:4d:4e:48:58:8a:00:2f:32:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:27 2024 GMT
            Not After : Apr 26 13:58:27 2025 GMT
        Subject: CN=25C213156412CB56F88DB06A4B7BED70E0405387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:fd:cd:8c:3e:d1:37:05:28:fa:78:db:8c:
                    c4:04:a0:3c:e0:4b:82:fd:e8:1b:d4:24:df:7b:e0:
                    37:4e:84:85:20:b0:5f:6f:f7:05:a4:9d:1d:16:e8:
                    80:02:fe:26:09:69:77:9e:d1:a4:0e:f5:84:72:9c:
                    dd:b3:b6:e0:df:2e:43:6a:21:e9:27:db:d6:a1:1e:
                    b9:e8:1c:e9:8e:3a:7f:6f:8a:54:4b:ca:d9:f1:c1:
                    ab:28:41:13:08:be:ad:d8:e3:ba:ab:dd:22:5e:80:
                    87:b1:91:6b:a0:0f:b3:60:ad:c9:dc:c6:1d:c9:4a:
                    02:0e:78:28:b2:5f:9f:fc:92:53:b4:0a:72:f5:fc:
                    40:2c:68:08:3f:47:ec:5c:18:87:50:cd:e0:9c:3f:
                    d9:d2:6e:60:9c:c2:1f:b6:ee:0c:5c:a6:aa:d2:b2:
                    09:68:48:e6:a9:89:fa:7d:e8:b8:93:24:d0:76:aa:
                    cc:a4:ff:4a:2a:92:67:13:c0:aa:17:27:74:98:d8:
                    e9:1c:d9:b4:01:a5:91:8e:29:b0:a9:ac:71:50:34:
                    43:20:a0:5c:ae:16:6f:c4:bf:4e:f8:13:e0:e5:d4:
                    16:d4:dc:5b:c4:06:f6:ba:aa:6e:70:2c:46:0a:b2:
                    6a:92:c9:08:75:60:95:9d:54:7c:23:48:78:a3:e4:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:13:15:64:12:CB:56:F8:8D:B0:6A:4B:7B:ED:70:E0:40:53:87
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:53:18:ba:13:2f:be:4f:0b:37:76:a2:f4:54:58:a8:2e:96:
         ef:ba:10:a1:d8:12:1d:4d:e5:4e:61:b9:9f:7f:76:f3:be:e4:
         ab:d7:a2:9a:1e:ea:26:83:81:71:6f:2c:30:2f:84:41:8d:f7:
         c0:c0:20:89:08:a6:43:9d:84:b2:85:2f:74:34:6d:6b:f1:d4:
         93:9c:26:ac:d1:da:c4:0f:ee:ff:9e:d7:39:84:ad:74:92:02:
         f9:90:fb:f4:c3:17:60:e8:60:0e:26:f8:cb:de:b8:fb:b6:00:
         34:16:48:7e:30:4b:e2:e8:2a:e1:74:24:94:0a:f5:21:7d:61:
         2b:9d:2e:84:b0:9b:44:d9:63:3e:a8:43:65:85:78:ec:05:fb:
         ff:78:12:fa:cc:c6:f2:01:ec:87:7f:77:f5:5c:6a:9a:f8:fa:
         25:fb:01:00:00:7b:48:7d:2a:18:32:30:14:bc:43:b5:4f:9a:
         f8:0f:64:59:dd:76:56:34:02:d0:42:f6:a9:e8:26:4d:bc:93:
         43:9a:66:63:8e:21:88:ff:94:84:7e:41:92:3a:d7:f8:c8:de:
         63:c3:72:f9:85:59:41:3d:f5:85:4e:c3:ee:72:e0:dd:5c:a0:
         0e:e3:ec:5d:7c:35:9f:35:bb:ee:ca:30:78:81:a7:bd:f8:ad:
         47:ae:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org