Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa
File:                     323830343a373636633a3a2f33322d3332203d3e20323731313131.roa (raw, json)
Hash identifier:          1ud9OzPdfBXUwLabi/y7UYnoZuLbMgfAxWnkVsZmois=
Subject key identifier:   A4:27:58:EE:B7:23:9E:A8:FD:F2:41:68:D3:7F:AA:9B:9F:60:A9:91
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       21A10461577C5A995CA3867CB6CC0A96761F5E57
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:57 +0000
ROA not before:           Wed 20 Mar 2024 19:23:57 +0000
ROA not after:            Wed 19 Mar 2025 19:28:57 +0000
asID:                     271111
IP address blocks:        2804:766c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a1:04:61:57:7c:5a:99:5c:a3:86:7c:b6:cc:0a:96:76:1f:5e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:57 2024 GMT
            Not After : Mar 19 19:28:57 2025 GMT
        Subject: CN=A42758EEB7239EA8FDF24168D37FAA9B9F60A991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:10:96:6f:4a:ee:aa:61:36:03:97:69:e6:
                    44:af:b6:24:98:0b:5a:72:0a:7f:78:63:1f:56:57:
                    c7:f3:4c:bb:dc:c9:07:3c:0a:a0:3e:3e:c4:f3:f0:
                    17:c1:c4:da:57:c1:de:82:43:85:1f:08:30:d1:28:
                    9e:a6:8d:03:9e:23:6b:61:21:66:b8:6d:c3:a3:c2:
                    3a:55:95:99:4f:c3:eb:e1:ef:18:f6:88:e8:aa:7e:
                    42:ba:6f:ef:d0:ee:0e:3a:63:6c:e9:fe:98:4f:a4:
                    cd:a1:0f:e0:d4:af:aa:4b:47:5c:e4:4f:53:dc:84:
                    88:fa:c0:9a:34:c6:0a:56:43:a4:9d:19:63:ba:08:
                    bf:b7:5f:95:ca:24:10:1f:13:ee:7c:6e:48:c5:42:
                    e8:4e:eb:a3:02:36:b0:98:c5:14:0b:4c:6c:a0:05:
                    4c:e8:5f:28:03:57:57:a1:e6:65:44:3f:0f:9f:49:
                    a4:d3:99:c4:8f:33:f9:de:23:9f:9b:9f:6f:fb:5e:
                    07:c9:e8:ff:5d:aa:5a:ff:25:f6:05:6d:0b:82:38:
                    e4:a9:e5:9c:49:62:db:8e:8e:c1:d8:27:63:97:0b:
                    4a:f1:7e:ca:8c:7c:92:8f:1a:80:10:a6:0f:56:b8:
                    8a:dd:6d:0e:ea:67:9a:bc:a0:09:f8:15:fd:eb:1b:
                    f6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:27:58:EE:B7:23:9E:A8:FD:F2:41:68:D3:7F:AA:9B:9F:60:A9:91
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:78:e0:85:d9:0d:f7:0f:b0:20:19:48:f2:58:e4:2d:33:
         3c:b1:c7:80:a0:33:2a:69:8f:be:98:b4:79:d2:d5:39:83:cf:
         b6:c1:3c:ad:30:ce:44:61:08:21:90:3d:6d:e8:ec:d1:d4:fd:
         cb:9b:28:fe:fb:62:20:3e:72:94:1e:07:ad:13:44:9c:da:09:
         59:67:67:51:e3:27:ee:8c:91:dd:99:6e:11:02:28:3a:0a:8e:
         e9:47:0d:a0:96:87:98:ac:77:fc:86:37:21:c2:f0:b4:5f:34:
         61:ec:11:1b:b8:8f:7d:73:b9:88:b9:7b:28:a6:d7:c4:b2:93:
         26:d3:c6:8a:f0:f3:aa:92:26:aa:fa:b7:6b:22:63:5d:2d:62:
         e7:8a:19:2a:6f:46:a6:79:54:15:b5:37:86:bf:7f:c2:65:27:
         4f:73:ed:c7:69:e1:cb:ca:42:c1:bf:b4:c0:aa:d0:ee:65:73:
         7f:84:2a:bf:ea:9f:00:10:27:a0:c6:f0:04:7d:a1:97:83:9e:
         4f:cb:47:30:aa:19:fb:f7:93:42:de:04:76:bc:08:3f:ea:4b:
         76:24:8f:88:bf:c8:a3:74:06:7b:46:10:0a:20:d2:3a:65:4d:
         76:c3:e0:65:4d:d9:12:4c:75:72:f5:94:d8:60:b3:71:34:83:
         a4:05:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org