Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/323830343a336135303a3a2f33322d3438203d3e203134323034.roa
File:                     323830343a336135303a3a2f33322d3438203d3e203134323034.roa (raw, json)
Hash identifier:          kZ+6oKupKUBPcipFg5tHeyjKmSPe3uIeRpvtv5e7LCY=
Subject key identifier:   9B:C2:F5:94:0D:C3:C6:FA:FC:2E:60:7D:52:EB:D3:FE:E4:4B:DB:27
Certificate issuer:       /CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
Certificate serial:       46C14C04F69D976318692F38ED617A7D441145D3
Authority key identifier: 3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/323830343a336135303a3a2f33322d3438203d3e203134323034.roa
Signing time:             Wed 03 Apr 2024 18:31:52 +0000
ROA not before:           Wed 03 Apr 2024 18:26:52 +0000
ROA not after:            Wed 02 Apr 2025 18:31:52 +0000
asID:                     14204
IP address blocks:        2804:3a50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c1:4c:04:f6:9d:97:63:18:69:2f:38:ed:61:7a:7d:44:11:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
        Validity
            Not Before: Apr  3 18:26:52 2024 GMT
            Not After : Apr  2 18:31:52 2025 GMT
        Subject: CN=9BC2F5940DC3C6FAFC2E607D52EBD3FEE44BDB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:8c:4d:77:2b:dc:12:de:6c:b1:63:17:42:
                    a0:ae:2d:78:3e:36:ae:ff:29:b6:64:cc:e8:00:30:
                    f9:82:ca:b9:79:60:dc:a5:b4:95:c6:c5:e2:72:44:
                    d7:a7:8c:85:3e:cc:9c:56:11:59:d6:10:c8:f2:7a:
                    12:9e:da:30:8b:eb:96:0e:6d:66:48:ed:0b:8f:c2:
                    c5:fe:ff:ad:09:12:86:61:db:a6:d3:5b:51:ab:9d:
                    42:81:8a:5a:0d:dd:f8:83:e9:2e:4e:1f:de:7a:da:
                    a1:12:04:4f:2b:57:28:a8:63:78:aa:d2:ed:57:a0:
                    47:2d:4d:98:30:14:27:db:3c:7d:ba:cd:76:5d:68:
                    94:06:7e:b0:fb:e2:45:90:d8:f0:35:59:4b:b8:a1:
                    53:c4:28:c0:bf:dd:71:91:7f:44:32:21:ff:3d:e5:
                    8e:34:d8:c8:8e:99:2f:fd:fe:64:e5:eb:84:01:74:
                    fe:33:a8:dc:da:5a:8f:ae:ac:c8:49:8a:68:ff:25:
                    29:e9:5d:55:d3:c7:21:dc:26:88:46:77:83:bd:c6:
                    47:53:3c:be:35:c2:30:cb:2d:33:70:a1:05:d8:49:
                    5c:ea:ff:92:1c:8c:1b:0c:20:d4:34:e3:c1:70:bf:
                    7c:1a:a4:60:8e:5a:da:fb:ad:b0:c7:5d:b1:83:c9:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:F5:94:0D:C3:C6:FA:FC:2E:60:7D:52:EB:D3:FE:E4:4B:DB:27
            X509v3 Authority Key Identifier:
                keyid:3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/323830343a336135303a3a2f33322d3438203d3e203134323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:04:c5:cc:f1:f4:71:61:61:a4:f9:3d:f5:69:fc:93:95:
         d6:d8:1d:3b:01:d9:21:4f:e1:a2:8d:84:e8:80:ff:6a:19:22:
         21:db:b0:4e:26:be:82:b0:b6:95:e0:e7:7d:8b:ed:0b:83:2f:
         b2:11:fb:57:03:74:03:f7:dc:5f:ac:3a:6b:b0:59:85:13:83:
         fe:24:c7:60:b9:b9:b2:18:17:b9:b2:5c:80:63:ab:5c:73:50:
         98:09:c7:d3:ba:a9:aa:cc:e9:db:88:68:62:6e:af:66:ae:64:
         b8:23:67:0e:c3:f8:d0:44:39:fc:51:98:61:c2:31:1f:c6:08:
         d6:05:c3:b6:2d:bc:bf:a0:3c:be:5e:86:27:b4:08:e9:0e:42:
         5b:3e:15:12:7e:7e:be:ac:5e:04:d1:b3:10:22:73:af:13:3b:
         b1:b6:fa:a1:b2:08:66:0f:d7:6a:8d:1d:3c:56:ae:48:54:6a:
         8a:14:a4:bd:0a:a2:8f:ab:57:95:71:0b:e4:2d:9d:f5:7d:66:
         3c:8e:d2:05:d0:f5:9b:cb:45:cd:cd:b9:61:25:4e:14:7a:83:
         c5:71:8e:9d:c4:7f:4f:7e:f4:13:4a:35:b3:9a:a0:ba:ab:7c:
         9b:c1:ec:fe:e1:77:c2:e2:9b:12:3c:7d:b6:9e:9b:7b:b1:f4:
         b9:de:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org