Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          zQ1TvO2ibvMgQeD3XvJg/tiudnkjwAdETooWvLwyJXo=
Subject key identifier:   CE:14:BD:92:BA:C5:72:D7:5B:4E:25:04:E3:20:E5:10:AF:4E:C2:9B
Certificate issuer:       /CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
Certificate serial:       2DF47761197C128181C1FFC7F5127416B8B507E7
Authority key identifier: 3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Wed 28 Feb 2024 16:58:27 +0000
ROA not before:           Wed 28 Feb 2024 16:53:27 +0000
ROA not after:            Wed 26 Feb 2025 16:58:27 +0000
asID:                     271548
IP address blocks:        2804:7d3c:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f4:77:61:19:7c:12:81:81:c1:ff:c7:f5:12:74:16:b8:b5:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
        Validity
            Not Before: Feb 28 16:53:27 2024 GMT
            Not After : Feb 26 16:58:27 2025 GMT
        Subject: CN=CE14BD92BAC572D75B4E2504E320E510AF4EC29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:85:68:70:40:c4:42:e4:65:99:2c:73:8f:
                    df:a3:b2:a0:23:c2:fa:07:f4:d1:81:8b:77:d8:d1:
                    3a:76:bb:80:34:5d:a3:fe:9f:87:66:5f:60:f5:26:
                    fb:d6:c7:84:d6:b6:0a:d0:65:b4:59:a5:aa:fd:07:
                    ec:c3:8d:10:1c:5a:46:33:31:54:23:3e:84:1f:2b:
                    2e:3c:fb:8a:d5:7d:a8:69:c9:49:fa:e7:66:a1:18:
                    fe:0d:0a:d7:05:0b:56:8f:24:61:18:9c:0c:12:58:
                    70:c1:59:69:a5:05:bd:82:9c:0c:72:cd:04:fe:4b:
                    14:e5:39:b3:3f:b3:b6:cc:8a:08:ab:83:7b:c3:23:
                    08:fa:7b:b4:80:ae:6d:15:c3:00:56:80:46:f9:57:
                    c9:dd:84:64:b2:50:ed:f8:f1:77:53:69:d6:27:c7:
                    77:f8:50:cc:bc:21:07:7d:07:ef:bf:3c:53:0c:35:
                    d1:05:0b:62:4f:18:b1:86:eb:f1:74:d2:f2:93:61:
                    ca:c7:e5:c5:f8:60:86:de:59:28:e1:b8:71:10:56:
                    d6:d0:8a:a8:08:b2:e9:cd:45:7c:d3:d6:0b:1e:bc:
                    d5:c7:97:e8:31:a9:70:b2:ec:58:d1:ff:b9:b7:e0:
                    fb:7e:15:5b:d4:c5:3c:42:0f:fb:91:bd:7e:3e:b2:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:14:BD:92:BA:C5:72:D7:5B:4E:25:04:E3:20:E5:10:AF:4E:C2:9B
            X509v3 Authority Key Identifier:
                keyid:3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ad:2d:1d:d5:61:61:aa:c8:6e:eb:13:7c:4c:35:dc:f6:a5:67:
         f5:19:11:01:cb:88:eb:4e:cf:82:14:2a:8f:2e:8f:0b:ca:6f:
         fc:83:76:7d:41:bc:77:df:e4:e0:06:82:23:5d:d8:e8:f8:d6:
         33:77:41:c9:67:3a:c3:e2:31:8d:0c:7e:7c:50:e5:59:ed:b4:
         64:a5:05:b9:3b:39:62:a4:d4:46:d4:fc:d4:e7:b2:09:ad:86:
         30:b5:bf:32:0c:97:a6:05:59:65:94:a5:4a:99:6b:2c:48:c1:
         42:5d:cf:1f:66:1b:b2:8c:7b:47:bd:a5:58:0f:d9:69:d2:44:
         0a:cc:5d:fa:ef:7d:04:22:a8:3a:40:f2:4e:46:9f:3e:ee:63:
         3e:3f:fe:58:25:56:0a:0f:5a:b6:8f:c6:ef:ff:7d:37:2a:1b:
         da:4c:af:c9:e2:10:36:95:15:b9:ab:7a:9f:c3:3c:c8:66:fb:
         1e:b2:40:56:63:64:6e:7b:aa:47:6e:32:91:1a:07:3e:0d:5e:
         e7:cc:f7:2b:f8:01:bb:8c:08:4a:3f:5b:c7:7b:db:88:c7:cc:
         ad:ad:82:ed:7b:9a:a6:7a:bc:5c:8b:6a:ae:68:aa:16:e1:c5:
         32:9d:e9:cf:1b:6c:44:3a:b5:91:b4:ea:c5:52:3c:e8:ac:12:
         74:2f:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org