Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a383030303a3a2f33332d3333203d3e20323732363435.roa
File:                     323830343a383637383a383030303a3a2f33332d3333203d3e20323732363435.roa (raw, json)
Hash identifier:          dGc8rbQJjR4fCUgWhGPf4IgewakehOIe2/nVn1oelTo=
Subject key identifier:   4B:91:41:87:16:A6:1B:6A:27:D6:2F:A9:A3:CA:47:F7:1A:77:2A:3C
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       276E6DB5B2C61729A061325BE3FD4888038F88A1
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a383030303a3a2f33332d3333203d3e20323732363435.roa
Signing time:             Wed 20 Mar 2024 23:22:21 +0000
ROA not before:           Wed 20 Mar 2024 23:17:21 +0000
ROA not after:            Wed 19 Mar 2025 23:22:21 +0000
asID:                     272645
IP address blocks:        2804:8678:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6e:6d:b5:b2:c6:17:29:a0:61:32:5b:e3:fd:48:88:03:8f:88:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 20 23:17:21 2024 GMT
            Not After : Mar 19 23:22:21 2025 GMT
        Subject: CN=4B91418716A61B6A27D62FA9A3CA47F71A772A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:00:6f:9a:68:8e:59:76:36:51:a2:5b:1c:
                    56:93:85:be:2a:71:b9:db:13:5b:29:ea:46:60:37:
                    ca:9c:cd:fa:f9:d6:b3:bd:02:c4:36:b2:ed:c5:0c:
                    87:04:17:2a:eb:e3:0b:9c:d0:0b:f7:bb:ae:42:a1:
                    2b:94:e6:4e:7d:7b:b1:29:3b:73:f4:ef:4e:c1:6e:
                    1c:7c:89:6b:d2:74:1d:40:56:b1:6a:03:0a:2a:de:
                    36:37:59:75:e0:00:03:12:0a:8a:05:af:4b:32:a0:
                    24:96:e6:67:f0:25:6f:bc:9d:e8:8a:c9:c8:9c:87:
                    9d:b9:fb:fb:55:52:d8:7e:fd:99:42:f5:84:47:0e:
                    07:04:24:5c:79:7d:3a:22:a1:90:26:20:ba:38:25:
                    b7:2a:a7:eb:e9:fe:7b:d2:4e:d3:73:c5:b0:09:ad:
                    54:f4:39:5e:69:58:95:48:56:63:fc:70:6a:a3:43:
                    9a:73:dd:f0:c5:94:06:35:bb:88:93:80:dc:f7:09:
                    1c:d8:10:3d:05:ff:3d:b8:59:b0:c1:04:83:08:e2:
                    8b:4a:d1:80:f5:3f:92:61:7b:7f:10:5c:2c:42:40:
                    15:1f:bf:14:e1:93:2d:5d:dc:ad:2a:57:f0:4c:61:
                    4a:8d:99:d8:16:b2:e5:90:41:6c:f6:e2:c2:27:6c:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:41:87:16:A6:1B:6A:27:D6:2F:A9:A3:CA:47:F7:1A:77:2A:3C
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a383030303a3a2f33332d3333203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:ff:85:82:b7:e5:84:99:d7:2d:a0:1a:b1:8e:1f:07:e6:
         a7:0c:4b:00:3f:d0:67:26:8b:ff:f9:69:c0:91:0e:b1:c6:d0:
         8e:27:1d:4c:1c:f3:53:d8:1e:30:76:4e:70:93:ce:a1:4f:82:
         d1:52:5e:39:33:41:83:90:bd:b9:42:ca:75:47:c9:ef:65:68:
         71:9c:6f:97:51:29:27:c2:be:0a:1b:5d:13:07:3a:8c:fc:ea:
         13:b7:c1:9a:da:e9:7f:74:1f:0d:a9:a4:9a:e6:b5:8a:db:b0:
         db:f5:97:b1:0a:48:6b:d7:8b:02:3d:c9:12:fa:45:e2:84:40:
         63:14:5b:9c:9e:ec:73:ab:10:a5:ef:ca:e8:89:97:00:c5:69:
         d1:88:45:63:07:28:03:d1:01:ad:ea:11:f4:a9:b7:1c:45:a6:
         e2:13:42:02:90:b3:25:ed:f9:15:30:47:36:39:f0:3c:7c:ed:
         49:b4:83:18:42:ec:66:95:7f:31:ff:8a:4a:ff:4a:27:1b:87:
         fd:e3:af:5c:86:68:97:21:1f:28:46:ac:a9:aa:26:9d:5b:d6:
         5c:11:4d:29:36:e4:3a:94:42:74:a0:e0:40:fe:7f:2e:5b:26:
         5c:43:0d:d3:73:ee:45:d1:62:8a:6d:48:e7:10:e3:d7:38:e5:
         a2:32:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org