Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33332d3333203d3e20323732363435.roa
File:                     323830343a383637383a3a2f33332d3333203d3e20323732363435.roa (raw, json)
Hash identifier:          oHfCfyUI3Z8Ak9XgecbpaQYfRgPf092LdtP0q1XR7+s=
Subject key identifier:   57:42:B3:8E:2B:B7:10:AB:FC:20:80:BF:12:DC:D7:E1:86:18:CE:FC
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       478424E56B7635844C24D1CD49291D7F349A0BB2
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33332d3333203d3e20323732363435.roa
Signing time:             Wed 20 Mar 2024 23:22:18 +0000
ROA not before:           Wed 20 Mar 2024 23:17:18 +0000
ROA not after:            Wed 19 Mar 2025 23:22:18 +0000
asID:                     272645
IP address blocks:        2804:8678::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:84:24:e5:6b:76:35:84:4c:24:d1:cd:49:29:1d:7f:34:9a:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 20 23:17:18 2024 GMT
            Not After : Mar 19 23:22:18 2025 GMT
        Subject: CN=5742B38E2BB710ABFC2080BF12DCD7E18618CEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:81:86:f2:b9:d5:5d:33:0b:c0:c1:da:8a:
                    da:14:26:64:90:f1:94:fb:9e:9c:68:35:aa:be:63:
                    e3:9b:81:28:aa:28:2b:e9:00:0a:1d:89:b3:f5:1b:
                    d1:7d:a7:2e:0d:83:5f:3f:8c:19:4c:02:a2:a7:d1:
                    8c:a2:03:50:f6:f9:e1:be:2e:c5:3a:5b:70:43:de:
                    b3:77:7f:27:4a:6e:17:cc:2b:f5:6d:0f:4c:46:18:
                    88:3c:f6:6d:46:fc:b4:97:bd:e2:84:f6:ac:01:cd:
                    ea:72:3b:c8:47:99:36:58:a4:5d:01:e3:28:66:1e:
                    a1:d8:7f:dc:3c:1d:fd:8b:8a:b8:75:3d:75:f5:3e:
                    df:6f:b4:f4:07:cb:e7:a8:07:fc:f2:2b:47:c2:3c:
                    6e:95:f2:83:64:e8:00:a6:b1:46:1e:35:ce:9b:04:
                    ec:46:ef:3b:a6:3d:9f:cc:ec:ba:fd:40:4e:a1:2b:
                    a6:71:08:8b:0e:ea:b3:85:b9:1a:5b:d7:bc:17:55:
                    85:18:b6:32:73:bf:4c:f4:f1:a9:7a:9e:f6:2a:02:
                    8d:e2:52:6e:0c:ca:dc:3f:cb:26:64:62:cd:59:6b:
                    e8:00:37:d2:5a:da:18:53:c0:8d:da:fb:e7:3d:97:
                    53:8a:fe:21:59:c8:6e:08:b7:44:b9:25:40:a6:30:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:B3:8E:2B:B7:10:AB:FC:20:80:BF:12:DC:D7:E1:86:18:CE:FC
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33332d3333203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:f5:3e:a0:11:fd:13:72:4d:bd:14:31:49:6a:4b:25:33:a0:
         a5:9d:32:4a:22:d0:d2:c3:a5:b5:56:f9:21:8c:2f:57:8e:3b:
         d8:28:25:cb:84:69:c8:03:c0:7a:fa:8b:e3:7c:e6:bf:11:0e:
         63:c1:77:6b:94:3b:fa:bd:79:00:0f:07:b2:56:1d:11:09:ab:
         94:69:0b:c0:7d:9b:07:d6:c9:6c:a9:2a:ff:29:52:c0:8a:ae:
         97:ff:c5:71:d7:2a:c5:c1:09:e8:7c:b4:01:57:96:49:fd:6f:
         00:f8:b5:92:dd:37:fa:ea:2f:0d:ab:0c:ba:3f:a3:45:51:a5:
         57:27:5f:b1:7d:83:28:8a:52:1c:93:c2:db:44:db:29:f0:1e:
         ba:a6:d8:f7:6c:81:d2:e9:a2:49:e8:cd:3a:e2:8e:1d:f6:54:
         7d:27:23:b4:8a:f3:0b:0f:65:2a:28:fa:03:b4:c2:94:68:d4:
         4c:d2:d3:90:17:6f:03:06:31:de:77:a4:70:79:c4:ee:74:69:
         35:4e:ae:6c:0c:75:f7:8a:42:92:16:4d:5e:8f:e9:14:6a:c1:
         eb:f5:4d:de:08:a4:5e:77:f7:08:21:b0:ee:1d:05:30:82:d7:
         ee:7f:06:32:5b:58:17:76:01:6a:77:54:e3:bd:3c:f3:65:52:
         a8:9b:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org