Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a373934343a3a2f33322d3438203d3e20323731323935.roa
File:                     323830343a373934343a3a2f33322d3438203d3e20323731323935.roa (raw, json)
Hash identifier:          ItFnlOkOiTSkoBjO9Ff6V1w6NpRFPcT+fvLgzr6bwLo=
Subject key identifier:   AD:83:E8:80:CD:7B:03:C7:41:CE:9A:BC:A6:BD:4A:1F:DF:4C:9D:82
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       7BEE02075735054189D2D564A79D1C21C7A65C36
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a373934343a3a2f33322d3438203d3e20323731323935.roa
Signing time:             Mon 27 Mar 2023 15:34:44 +0000
ROA not before:           Mon 27 Mar 2023 15:29:44 +0000
ROA not after:            Mon 25 Mar 2024 15:34:44 +0000
asID:                     271295
IP address blocks:        2804:7944::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ee:02:07:57:35:05:41:89:d2:d5:64:a7:9d:1c:21:c7:a6:5c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 27 15:29:44 2023 GMT
            Not After : Mar 25 15:34:44 2024 GMT
        Subject: CN=AD83E880CD7B03C741CE9ABCA6BD4A1FDF4C9D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:15:e4:c6:b7:d9:54:32:94:92:5c:af:8a:4e:
                    92:38:9e:cf:99:96:15:bd:f6:82:33:49:a0:2d:37:
                    9c:a0:67:16:b8:36:e1:6f:1e:c0:e3:67:34:35:6b:
                    14:ad:ae:57:9c:36:d9:22:59:7a:4f:1c:c0:2f:5d:
                    63:c9:1d:31:a1:f6:a8:dd:b9:ca:58:81:b4:a0:15:
                    c3:d1:88:6b:25:ce:7e:b3:4d:51:ae:e8:2b:fc:33:
                    f1:0f:20:18:81:b2:8c:f2:ed:7f:eb:4e:c3:a5:63:
                    01:ba:44:52:28:fd:a2:b6:9e:fd:5b:3c:f7:ae:20:
                    49:a1:6f:30:e6:88:8c:af:ad:ed:65:bd:2e:bb:61:
                    8e:c3:03:b2:80:52:03:42:a6:72:96:87:c3:e5:01:
                    83:0a:53:a6:b2:8c:9a:90:7f:db:4f:8b:71:b9:12:
                    3e:b3:c0:d6:41:6d:19:8a:f6:87:7f:01:79:78:94:
                    ed:bc:05:01:3d:e5:0f:66:39:da:fe:4f:2c:59:f3:
                    8e:b8:99:a5:cc:6e:1d:eb:5c:c5:ef:7d:11:e2:2b:
                    fe:c2:35:eb:0e:fc:0b:31:9d:2b:88:7c:8f:ca:c4:
                    92:79:ec:06:b2:56:07:0a:c0:68:ee:45:a2:30:a3:
                    29:19:4f:76:78:4f:fd:54:cf:46:5c:81:3e:cf:cd:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:83:E8:80:CD:7B:03:C7:41:CE:9A:BC:A6:BD:4A:1F:DF:4C:9D:82
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a373934343a3a2f33322d3438203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:16:8f:d5:d6:20:14:c8:62:72:3b:bd:3f:a7:ed:82:3a:
         29:0a:c6:50:a2:35:e9:9c:b3:f8:e3:8d:dc:b3:a9:5c:5a:37:
         44:cb:64:e7:36:b0:81:78:d6:0e:56:52:86:e8:4d:df:9c:7f:
         49:0c:45:27:4b:3b:e3:e1:f9:23:59:d3:aa:0a:2a:af:3c:89:
         84:f0:38:9b:72:5b:94:1b:56:ea:c9:1e:43:7a:49:b1:c7:09:
         8f:70:e0:ee:4e:1d:24:0e:4c:16:7e:67:89:96:3a:b8:96:af:
         7d:33:e7:aa:f1:9b:4a:44:a0:a8:b2:a6:78:09:b5:ed:be:59:
         79:63:fb:3a:d7:90:dc:3b:fc:9d:ba:cd:42:d2:12:40:96:d4:
         85:50:c7:1e:dc:be:4c:ec:39:7d:8e:e6:bc:d5:f7:09:87:f0:
         1b:31:52:d1:1f:36:83:48:6d:1d:a5:f3:d7:8b:b3:17:c6:63:
         04:40:48:cb:96:73:46:28:b5:22:7a:c4:79:1b:66:32:d2:04:
         c5:e3:b3:a2:cd:c3:82:a3:df:5c:9e:c9:ac:b9:f5:69:67:3a:
         52:b4:2a:9c:ec:e9:49:ed:73:ab:13:ae:88:e2:5d:6a:32:61:
         3d:2b:6e:10:82:c4:75:d1:3b:56:db:77:f0:24:da:32:e5:cb:
         36:33:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org