Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa
File:                     323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa (raw, json)
Hash identifier:          3IJDl6Sb0oZVluJp718kfFDkg4um4wN+p2iVd1sAUtM=
Subject key identifier:   89:82:BC:C6:DD:97:CB:6A:7F:6A:F8:0C:71:68:99:FA:09:43:D3:AA
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       055E39F78DBE219EEA1DD4B96B92D64C54B51D9F
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:27 +0000
ROA not before:           Sat 27 Apr 2024 13:53:27 +0000
ROA not after:            Sat 26 Apr 2025 13:58:27 +0000
asID:                     264022
IP address blocks:        2804:2990:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5e:39:f7:8d:be:21:9e:ea:1d:d4:b9:6b:92:d6:4c:54:b5:1d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:27 2024 GMT
            Not After : Apr 26 13:58:27 2025 GMT
        Subject: CN=8982BCC6DD97CB6A7F6AF80C716899FA0943D3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:e2:ce:d1:bc:5e:c0:c8:88:ba:49:d2:3f:
                    95:e4:bf:41:2d:3f:8a:f1:be:d3:26:6b:aa:94:0a:
                    3e:b1:17:88:96:30:b5:15:a6:e5:b1:3f:a4:e8:87:
                    59:df:87:f0:2d:51:aa:87:22:eb:39:e5:0e:83:aa:
                    4b:20:df:7d:46:51:8e:8d:40:56:30:85:fc:b1:62:
                    31:f7:1f:2c:7b:7d:6b:00:07:fd:27:25:cd:c7:42:
                    78:a9:39:15:8f:d3:5a:cb:bf:cf:3d:67:e7:d2:46:
                    85:9f:ed:dc:98:df:5d:47:22:5b:4b:66:49:e1:8d:
                    25:a0:c9:e8:9f:b6:9f:02:60:14:65:e3:8e:51:50:
                    c1:0c:fb:0a:c7:8f:37:88:11:82:bf:09:4d:85:fa:
                    16:28:f1:25:20:38:3a:a3:ca:ff:6d:74:3b:15:f5:
                    51:16:15:d5:a3:92:10:5b:d6:cd:a6:ea:8c:38:00:
                    5c:3a:ef:0e:f7:02:be:16:39:1f:aa:67:0c:6f:8b:
                    82:b2:53:81:67:6a:d7:00:93:e4:91:f6:c9:2d:3d:
                    80:81:94:c1:17:68:62:84:7e:b7:4f:56:83:4c:e9:
                    33:60:e1:93:9c:8d:8b:4a:10:3d:fa:de:e2:0e:51:
                    0a:79:56:b8:1b:46:d5:26:ae:1e:1d:5d:19:03:56:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:BC:C6:DD:97:CB:6A:7F:6A:F8:0C:71:68:99:FA:09:43:D3:AA
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a633030303a3a2f33352d3335203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2e:df:e1:49:74:1f:1d:40:73:2a:35:31:a8:b0:64:10:3d:0a:
         35:ef:25:21:6c:51:70:65:03:d0:b8:e1:ca:a5:57:da:0d:70:
         38:25:dc:f4:cb:e1:30:06:27:78:db:9e:c9:9e:54:46:c6:2a:
         47:e3:5b:b3:75:00:4c:84:de:b4:76:fd:f4:c8:29:87:5f:d9:
         c5:7a:3b:83:83:3a:60:97:65:49:5f:b3:a3:9d:32:58:e3:0d:
         1a:c9:44:bb:ba:db:73:94:a2:8c:c7:e9:df:3e:9a:db:5b:5e:
         0a:52:6a:bb:89:fa:e5:43:ae:3c:0c:1d:f5:1b:c8:59:e8:d6:
         b5:8f:8f:c7:c5:52:b9:8f:52:53:ea:f9:15:4a:18:b8:e5:f8:
         c2:5a:3c:4f:a2:3a:7d:8a:6d:15:36:0e:7e:1a:c5:2b:43:8f:
         fd:37:7e:32:8f:c1:3c:65:b4:71:20:59:ed:ff:ab:44:a8:66:
         eb:05:07:c1:05:c1:b8:45:1e:2e:0d:b9:cc:c6:0e:d6:eb:63:
         c7:1e:4a:07:59:d4:a3:a6:5c:9e:f3:fa:1e:c0:9b:a9:09:b5:
         8d:d5:9c:e0:0f:62:e4:50:61:71:59:47:46:4a:d5:06:2f:3d:
         83:89:f2:da:d2:83:27:91:2a:1f:06:a9:bf:98:cd:62:40:64:
         41:3c:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org