Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d3438203d3e20323732363435.roa
File:                     323830343a383637383a3a2f33322d3438203d3e20323732363435.roa (raw, json)
Hash identifier:          lfb2CC/6zJzDYu5iNAjAR13GmKNk9m/lMUEuqgUV/HI=
Subject key identifier:   E3:8F:88:6B:69:15:21:DD:FA:90:A3:F0:4F:69:24:5A:E7:DC:6B:8D
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       15112F2E93B3E30E81B2271B18FF030B794A05D7
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d3438203d3e20323732363435.roa
Signing time:             Thu 21 Mar 2024 00:05:13 +0000
ROA not before:           Thu 21 Mar 2024 00:00:13 +0000
ROA not after:            Thu 20 Mar 2025 00:05:13 +0000
asID:                     272645
IP address blocks:        2804:8678::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:11:2f:2e:93:b3:e3:0e:81:b2:27:1b:18:ff:03:0b:79:4a:05:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 21 00:00:13 2024 GMT
            Not After : Mar 20 00:05:13 2025 GMT
        Subject: CN=E38F886B691521DDFA90A3F04F69245AE7DC6B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:cc:76:7b:ca:ff:cf:44:fa:02:af:de:77:
                    98:c2:f5:6f:8d:a1:e2:0f:20:63:2f:91:da:18:8a:
                    dd:a4:b8:f6:47:77:46:96:9f:3e:28:44:d1:e2:26:
                    92:4c:90:39:3e:6a:3d:d4:c0:c6:da:e1:5b:44:d1:
                    09:6f:07:8d:ed:d2:c2:df:41:59:fc:99:37:80:5e:
                    2f:4e:64:aa:95:48:92:4b:38:29:3f:0d:29:d0:e9:
                    3b:0f:80:92:84:b2:c2:14:1f:2e:03:a7:ef:76:27:
                    b0:46:9b:75:21:ec:5b:6a:54:b7:34:92:99:0a:28:
                    7e:ac:49:5f:bd:f3:4b:60:34:b6:fd:1b:f1:96:76:
                    8b:7a:bd:6f:62:40:40:aa:ff:8c:8f:8c:22:e0:78:
                    d6:82:0c:c5:35:fe:5b:50:65:49:c9:59:f0:e4:42:
                    9c:91:f8:b2:41:7f:07:b4:db:fe:e8:f0:f7:01:30:
                    ac:cb:86:57:fe:44:cf:93:37:23:08:c4:01:42:b0:
                    2d:a5:69:0b:19:cc:b4:89:a3:b9:72:92:2a:0f:53:
                    fe:72:45:8f:3b:07:b3:06:fb:33:52:65:7f:09:7c:
                    c5:4e:67:69:18:f4:15:29:72:a7:ee:26:e3:83:93:
                    07:67:f7:17:51:b4:2a:a6:a0:c9:3b:78:38:a6:15:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8F:88:6B:69:15:21:DD:FA:90:A3:F0:4F:69:24:5A:E7:DC:6B:8D
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d3438203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:81:1c:c5:4d:83:40:27:5d:de:91:0b:d8:fe:6a:56:b5:
         55:dc:fd:0f:10:1f:10:db:0b:db:e4:59:b9:ae:e2:81:d2:56:
         5b:26:db:4b:39:89:be:a1:4c:cd:68:75:33:9f:19:c9:a1:c6:
         14:a6:34:88:01:ac:b0:3c:a3:3a:41:2e:b0:22:f7:66:72:1d:
         5b:a6:35:dc:ed:68:4b:2f:a1:ef:cc:b2:38:bb:63:c2:ce:f9:
         fe:4b:f0:69:c5:6d:08:98:7c:8e:c3:a0:27:02:3b:4b:91:8c:
         e1:ba:dc:36:0a:5a:a8:0f:f0:89:97:03:bd:68:4a:7a:48:76:
         b2:c2:5f:08:a4:46:64:5b:ec:b4:67:5e:1f:1d:7a:70:38:2f:
         00:7d:60:94:b7:8c:99:1a:c0:4d:f6:90:c6:17:60:25:b9:ed:
         a5:32:d1:e1:bd:e8:ed:a4:0d:7b:04:2e:29:6e:ee:01:a0:06:
         d1:64:8f:d6:c4:b1:18:4c:4d:43:63:d3:64:5b:37:36:ef:e4:
         7d:ac:3a:a4:c0:8a:60:5c:36:b7:2e:60:cc:ef:52:c8:87:db:
         00:0d:71:67:95:bc:ec:56:8a:e0:3f:b6:2d:5f:50:b3:49:6f:
         48:2c:3f:d3:31:3f:5a:1e:df:1f:44:5b:72:5a:31:27:dc:9b:
         49:92:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org