Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/323830343a373536303a3a2f33322d3334203d3e20323731303432.roa
File:                     323830343a373536303a3a2f33322d3334203d3e20323731303432.roa (raw, json)
Hash identifier:          IMKY0TlIEu/FZc/qB4rFT5wYF8HLpzzwHZV8028N6BU=
Subject key identifier:   83:D5:C3:77:5E:E5:8B:82:97:6C:B9:A3:33:82:76:47:2A:35:5E:59
Certificate issuer:       /CN=3FA6187385876E0C99E6A9477B130ED98460E752
Certificate serial:       6C249C67A0B1635C0424B9A4787D402BBF14D4F2
Authority key identifier: 3F:A6:18:73:85:87:6E:0C:99:E6:A9:47:7B:13:0E:D9:84:60:E7:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6187385876E0C99E6A9477B130ED98460E752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/323830343a373536303a3a2f33322d3334203d3e20323731303432.roa
Signing time:             Thu 04 Apr 2024 15:31:52 +0000
ROA not before:           Thu 04 Apr 2024 15:26:52 +0000
ROA not after:            Thu 03 Apr 2025 15:31:52 +0000
asID:                     271042
IP address blocks:        2804:7560::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:24:9c:67:a0:b1:63:5c:04:24:b9:a4:78:7d:40:2b:bf:14:d4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6187385876E0C99E6A9477B130ED98460E752
        Validity
            Not Before: Apr  4 15:26:52 2024 GMT
            Not After : Apr  3 15:31:52 2025 GMT
        Subject: CN=83D5C3775EE58B82976CB9A3338276472A355E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:a7:f2:32:20:c7:1c:5e:ee:7e:fc:7d:d1:
                    4a:58:12:d1:59:39:88:f4:b5:d0:26:63:b4:aa:77:
                    42:c4:dc:a4:e2:dd:1e:96:a0:a5:78:fd:2e:bc:79:
                    63:43:ff:d2:81:13:2b:82:6a:8b:43:68:83:76:52:
                    81:6c:b7:47:cd:31:4d:1a:17:8d:20:88:10:a6:9d:
                    9c:5c:6d:3f:fa:d8:e4:58:55:72:a9:2c:68:98:87:
                    f7:78:88:8b:fe:df:bc:1a:ee:75:27:26:6e:aa:46:
                    ef:26:a5:25:24:21:9f:6b:93:e9:ed:01:97:57:ac:
                    ab:79:c3:72:ae:2b:15:e2:0b:5f:75:6d:b8:89:a2:
                    b5:54:4f:96:99:ec:64:7b:60:ca:2e:dd:3d:d4:c2:
                    8c:eb:7e:6f:f7:12:75:a7:4c:70:42:92:7f:a4:41:
                    7d:24:fe:bb:90:3a:91:97:5c:23:40:60:4a:42:86:
                    ed:d4:65:10:b6:ad:d8:66:0d:ec:22:bd:c4:0d:59:
                    0f:85:fd:7f:34:62:de:6e:c1:ce:ec:9d:46:6c:09:
                    f4:92:c8:37:c9:d8:bf:e8:3e:6a:30:2f:d0:4c:81:
                    8e:e2:3e:e7:4e:20:0c:90:e0:97:d9:b6:fc:d5:e0:
                    42:3d:e2:fa:71:63:8e:16:e4:45:06:74:ba:ef:a8:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:C3:77:5E:E5:8B:82:97:6C:B9:A3:33:82:76:47:2A:35:5E:59
            X509v3 Authority Key Identifier:
                keyid:3F:A6:18:73:85:87:6E:0C:99:E6:A9:47:7B:13:0E:D9:84:60:E7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3FA6187385876E0C99E6A9477B130ED98460E752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6187385876E0C99E6A9477B130ED98460E752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/323830343a373536303a3a2f33322d3334203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c3:37:87:40:43:71:08:a9:91:48:a5:e8:ad:61:ad:4f:66:
         a4:30:d5:0e:03:21:b9:ab:fb:c2:a5:d1:07:e9:15:4f:37:81:
         bc:72:a6:94:2e:b3:4a:38:73:3e:3c:a0:b6:33:eb:88:bb:f5:
         99:93:8c:10:01:2a:72:77:8d:98:65:ea:12:32:42:0a:2c:7c:
         0d:d7:42:34:8d:6e:ac:5d:26:9a:79:dd:84:3b:e0:0d:7c:d4:
         e2:61:4c:12:f2:5a:d3:58:69:75:a8:70:87:7e:f5:52:a8:e4:
         4d:c1:80:5d:d5:60:15:08:1e:24:56:0f:ba:a3:68:17:8c:17:
         4b:e5:72:8f:14:59:60:23:86:b2:50:2e:3b:07:d8:b8:30:6b:
         86:8d:fb:8c:7d:79:4a:b6:f7:6f:d1:41:91:1f:58:81:11:d0:
         2e:54:43:ff:e0:67:ef:c1:7b:9d:10:6e:b0:0c:95:86:48:72:
         17:fe:de:77:98:e7:d5:42:f4:fe:a7:91:f9:bb:e7:be:41:42:
         b1:37:80:25:d0:99:63:2f:e1:05:c6:fd:0c:7d:39:5c:9a:e3:
         ef:f9:94:56:95:50:51:f2:2a:5d:06:74:11:28:26:18:d7:a9:
         85:d0:50:cf:55:e7:a2:a2:eb:9a:88:c3:24:5f:28:11:73:1b:
         a6:7d:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org