Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33332d3334203d3e20323634303235.roa
File:                     323830343a323939633a3a2f33332d3334203d3e20323634303235.roa (raw, json)
Hash identifier:          VPTeb15ib1bPmcZK9Gk4Rehk2P8m1+FclmlpBYhxkvo=
Subject key identifier:   3C:73:AE:32:19:70:12:3D:39:15:7F:9F:9A:9C:AA:9F:11:DC:82:8A
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       7E25FD88F71FF09D7DC1F5138439FB7B6C536BD7
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33332d3334203d3e20323634303235.roa
Signing time:             Mon 11 Mar 2024 12:29:54 +0000
ROA not before:           Mon 11 Mar 2024 12:24:54 +0000
ROA not after:            Mon 10 Mar 2025 12:29:54 +0000
asID:                     264025
IP address blocks:        2804:299c::/33 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:25:fd:88:f7:1f:f0:9d:7d:c1:f5:13:84:39:fb:7b:6c:53:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 11 12:24:54 2024 GMT
            Not After : Mar 10 12:29:54 2025 GMT
        Subject: CN=3C73AE321970123D39157F9F9A9CAA9F11DC828A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:37:14:55:d4:60:45:d6:2e:52:1c:84:c4:
                    ea:da:56:fd:2a:1b:af:af:39:14:e5:13:b2:a0:06:
                    58:4b:f5:0c:d7:21:4d:a0:6a:5a:bf:1c:1a:13:4d:
                    03:aa:ff:a6:88:e9:41:ac:3f:83:3f:65:dd:54:5e:
                    c3:01:b3:08:da:64:d2:38:2c:9b:38:0a:56:b5:f0:
                    e3:06:25:7e:13:4b:2b:83:09:01:0d:77:09:4e:0a:
                    6a:0f:0e:01:b2:d5:ac:50:9b:a9:05:a5:fe:3c:41:
                    79:56:e3:38:9c:bb:7e:16:89:03:92:c0:55:64:01:
                    b1:ad:8d:90:ee:ec:c8:f0:bc:16:38:46:f1:82:d8:
                    09:27:00:04:b0:70:51:16:2e:2c:54:a0:b0:e1:64:
                    33:e7:1c:44:d0:51:37:92:f8:92:13:eb:40:a1:4a:
                    55:38:99:2d:ec:e2:52:51:90:0a:e7:fa:63:36:ac:
                    e4:6b:bf:08:e7:3a:31:8a:eb:d8:53:a9:22:42:2d:
                    3e:fb:8a:c6:bf:20:53:bf:a2:3c:e5:e6:33:88:0a:
                    e7:cf:bd:11:98:a1:70:ae:b3:6d:97:e9:04:9e:7c:
                    31:ef:70:6a:4e:89:57:d1:3f:eb:4e:5a:d9:7e:06:
                    a5:5d:cf:b6:fa:07:fd:6b:2c:20:6c:b7:37:9a:3e:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:AE:32:19:70:12:3D:39:15:7F:9F:9A:9C:AA:9F:11:DC:82:8A
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33332d3334203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:d1:f5:30:47:f6:99:4c:b6:e6:dd:5b:b7:23:3e:51:be:
         e3:1f:94:0a:81:9c:77:31:af:34:bf:a9:ce:a3:dd:42:b7:16:
         41:32:99:fb:a9:69:e4:71:bc:6b:87:eb:29:83:0f:ad:c3:a4:
         97:ce:c5:7f:d6:a8:8c:c1:75:84:d5:bd:3e:b3:34:91:14:92:
         b7:41:55:d9:8b:cb:40:c9:f7:34:4f:2f:10:a0:de:7d:45:ef:
         bf:7d:c9:d7:a8:cc:8d:61:8a:5d:94:e2:08:5f:e6:d2:7b:69:
         88:4a:ee:1c:7a:72:a0:15:89:3e:7c:d2:0b:fc:f6:57:9c:27:
         dc:26:d3:3f:de:d8:a9:63:ed:e2:04:ad:6e:62:35:02:71:65:
         60:56:66:65:c8:5a:87:ab:76:40:d0:84:46:2b:38:f7:70:c7:
         7f:30:74:a9:42:9c:01:f8:73:ae:73:1a:0e:57:9e:76:29:f1:
         bb:0b:31:33:74:45:e3:fe:84:55:f8:b0:7f:dc:73:ca:67:f9:
         e9:70:6a:6c:4e:db:8b:7a:1c:a5:5a:c8:ae:3a:25:20:b5:5c:
         f2:75:d8:71:14:dd:fa:cb:10:50:e3:ab:6f:52:a4:0e:55:f3:
         74:8b:50:97:6b:c0:79:b3:7c:b5:a4:cb:3d:71:be:8c:87:8e:
         57:79:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org