Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/323830343a316432343a3a2f33322d3438203d3e20323634333530.roa
File:                     323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (raw, json)
Hash identifier:          cFXV3Vh6fU+hW5Qi6ZRHm7lPblD25BEHdC7+tHapHY4=
Subject key identifier:   70:FF:1B:7D:67:E7:7F:68:F8:36:FF:ED:B2:85:A4:15:5B:F3:45:AB
Certificate issuer:       /CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
Certificate serial:       0397D440134FA5751F67AB68FFFBAA9E60A17140
Authority key identifier: 3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/323830343a316432343a3a2f33322d3438203d3e20323634333530.roa
Signing time:             Fri 15 Sep 2023 17:36:29 +0000
ROA not before:           Fri 15 Sep 2023 17:31:29 +0000
ROA not after:            Fri 13 Sep 2024 17:36:29 +0000
asID:                     264350
IP address blocks:        2804:1d24::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:97:d4:40:13:4f:a5:75:1f:67:ab:68:ff:fb:aa:9e:60:a1:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
        Validity
            Not Before: Sep 15 17:31:29 2023 GMT
            Not After : Sep 13 17:36:29 2024 GMT
        Subject: CN=70FF1B7D67E77F68F836FFEDB285A4155BF345AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:d6:08:46:93:18:d3:45:cf:fc:d7:ec:bb:
                    e8:c4:43:e3:0e:29:3f:b7:cf:51:fc:cb:0e:28:74:
                    16:3e:97:6d:ca:5a:41:d3:bb:0e:3a:42:c1:05:00:
                    05:b9:1a:df:c2:0a:e6:ba:bf:39:5f:fd:77:c8:99:
                    21:7a:3b:2d:e6:cf:11:2c:26:86:d9:4e:dc:29:37:
                    2d:d1:bf:6d:ef:b6:84:19:6c:27:d6:49:00:7d:ae:
                    4d:0b:d1:d8:b7:7c:27:7e:9e:38:98:f4:76:22:8a:
                    47:fc:0c:dd:e2:66:93:0c:2b:e8:dc:b9:8d:b4:3b:
                    f3:4c:61:10:2e:c9:45:16:cc:6d:fc:af:ee:fb:ba:
                    ed:e1:57:dd:bd:17:2b:10:ac:c6:58:63:7b:4e:44:
                    f7:40:9d:3c:dd:7a:13:96:02:e3:6b:f0:63:46:80:
                    55:8f:b2:0f:79:df:0b:1c:1e:44:5b:3f:c2:9b:42:
                    80:c4:60:b5:d1:5f:ed:0c:02:f5:a2:dd:c7:6a:23:
                    40:14:d5:c1:c5:f9:23:f5:f3:8e:27:db:fb:48:68:
                    32:98:85:5c:16:91:c0:4b:dc:06:cb:ba:d0:23:2c:
                    9b:a4:fd:ca:0b:87:b6:a1:04:8c:dc:91:e3:6b:cd:
                    a2:2f:fe:3e:53:8c:a1:c8:2f:57:7d:31:9a:f1:25:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FF:1B:7D:67:E7:7F:68:F8:36:FF:ED:B2:85:A4:15:5B:F3:45:AB
            X509v3 Authority Key Identifier:
                keyid:3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/323830343a316432343a3a2f33322d3438203d3e20323634333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:7a:33:af:ac:be:e8:80:af:f3:8e:08:5d:30:b3:59:97:
         9e:09:e9:7f:ba:d8:3e:16:f7:53:22:36:52:8b:5b:0f:ff:37:
         c7:97:07:10:ae:65:c1:d7:1d:cf:9f:be:23:d2:b7:7b:3a:80:
         51:84:55:a1:ee:cd:d8:04:91:1d:69:42:68:36:d8:e1:37:e9:
         12:aa:bd:d3:73:ea:10:25:f2:3c:76:99:0c:bf:ea:68:d0:87:
         9f:97:52:33:ed:38:d8:94:e9:a1:ac:83:31:95:5b:fb:ec:1b:
         8a:58:43:32:ef:cc:d2:68:e1:0a:7e:33:ea:1c:53:75:e7:2c:
         d8:cd:1b:d3:04:cb:a9:94:b0:42:80:c9:1a:a0:e0:16:0c:68:
         ec:cb:3c:3b:56:71:98:d3:bc:43:c1:09:f4:a6:40:74:4d:05:
         60:47:1f:60:33:45:5a:a0:a8:0c:6c:7d:4e:04:5c:ac:03:f5:
         08:0c:3b:92:f5:23:c4:37:c1:6a:b5:21:6e:bd:37:c6:f3:87:
         04:4f:42:17:ef:1c:37:99:46:9d:2c:03:82:22:d8:6a:68:c6:
         05:81:c0:01:a8:4b:d9:76:b2:91:a7:b6:9a:be:f7:ca:6e:2d:
         98:b3:f3:5f:89:da:e7:3f:44:1c:cb:22:ff:27:7e:01:c3:b6:
         ce:e1:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org