Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f34382d3438203d3e20323732363435.roa
File:                     323830343a383637383a3a2f34382d3438203d3e20323732363435.roa (raw, json)
Hash identifier:          ATkn74444/78KPMBNo28uSod2kRjz83pcSZ89qWH5jk=
Subject key identifier:   64:C6:4B:61:2A:30:10:B9:88:24:08:88:D3:1F:8D:FB:B1:4B:19:92
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       104995E760B67452DFD2E5A7120CF674757000D8
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f34382d3438203d3e20323732363435.roa
Signing time:             Wed 20 Mar 2024 23:22:20 +0000
ROA not before:           Wed 20 Mar 2024 23:17:20 +0000
ROA not after:            Wed 19 Mar 2025 23:22:20 +0000
asID:                     272645
IP address blocks:        2804:8678::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:49:95:e7:60:b6:74:52:df:d2:e5:a7:12:0c:f6:74:75:70:00:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 20 23:17:20 2024 GMT
            Not After : Mar 19 23:22:20 2025 GMT
        Subject: CN=64C64B612A3010B988240888D31F8DFBB14B1992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:61:00:f5:79:22:d8:f3:1e:f0:e5:f2:5d:
                    7c:34:13:70:a3:f6:61:a1:fa:5a:0b:50:38:86:91:
                    cf:5f:f6:cf:eb:6e:7f:f2:81:63:a4:71:33:59:b5:
                    db:61:35:10:26:cd:68:0c:43:b7:be:65:f5:44:63:
                    5a:30:1e:7c:40:d3:f3:7f:e7:8f:da:b7:e3:73:b6:
                    a0:14:27:6e:35:4f:50:f8:e6:37:9f:fc:92:ef:63:
                    bf:cd:94:ae:3c:bc:d9:b4:27:7e:dd:af:dc:f9:ce:
                    31:64:6e:e7:e6:e3:35:a6:a7:92:b3:4f:01:16:c5:
                    0a:ba:36:66:e5:d1:c1:d7:5c:0c:ed:25:cd:20:e8:
                    b0:33:92:84:4f:f9:1b:7f:1e:82:6d:ad:c0:8d:9c:
                    71:e5:85:40:87:39:c1:61:2f:a4:5e:26:a4:ce:08:
                    4d:f5:c7:79:c3:c1:34:09:0a:d1:76:5e:ef:9b:77:
                    e9:7b:24:6e:5a:c1:56:28:d9:9c:af:76:63:9e:0f:
                    7f:82:06:9b:8e:20:c7:01:24:f4:91:b6:d5:dc:b6:
                    ba:8b:23:98:44:1c:21:3a:f8:e2:92:bb:47:b9:9f:
                    47:6e:09:d8:15:bf:0f:22:3b:79:93:88:a4:6c:65:
                    cc:87:98:11:9c:9c:c0:8b:aa:b0:f5:1b:34:45:73:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C6:4B:61:2A:30:10:B9:88:24:08:88:D3:1F:8D:FB:B1:4B:19:92
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f34382d3438203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:9f:dc:52:ea:61:2b:33:8f:f7:e1:d4:c6:9f:bf:7b:3d:
         b9:d1:40:8b:aa:7e:75:c6:69:39:89:0e:42:6c:d3:d7:9f:09:
         84:e8:23:68:cf:16:af:c0:ff:85:ea:9a:f4:e6:00:87:1b:d3:
         f5:1d:94:93:6c:32:3c:4b:3a:57:d4:f8:bd:0b:42:2c:7a:a6:
         4f:f1:aa:d0:a6:2f:fa:c0:d2:70:36:e8:49:31:fa:75:99:23:
         00:7b:0e:07:80:5d:d5:4f:2d:73:10:d4:e7:3b:71:53:6b:f6:
         bf:9b:d3:1c:d1:cc:67:b5:23:78:df:d2:67:e9:35:3d:85:de:
         4c:9b:9b:48:cc:cf:0b:a9:51:72:83:39:ef:14:9c:49:2e:7d:
         71:b7:d0:de:6d:02:4d:56:32:81:e1:d7:51:2d:d3:94:37:bd:
         13:10:34:4f:f4:ae:e4:a7:f1:0e:81:c6:fe:2f:c0:47:34:11:
         30:b3:09:c5:95:a8:4b:2c:f3:f2:91:66:1b:5d:eb:fd:02:86:
         e9:99:90:41:78:0e:1f:8c:70:b3:95:c3:b6:13:56:2f:c0:ad:
         ec:e5:de:88:4c:06:01:e4:6b:9e:3d:fa:70:d1:ae:92:d6:8e:
         55:c8:89:26:89:dc:c1:51:a2:a9:43:a1:a6:12:21:29:b4:82:
         7d:73:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org