Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a3a2f33322d3332203d3e20323730323636.roa
File:                     323830343a363936303a3a2f33322d3332203d3e20323730323636.roa (raw, json)
Hash identifier:          8F46wCbfh7TuL18vYJyXVT7UTdO3XKu5C1xdQbc1foE=
Subject key identifier:   0E:B2:00:11:62:E0:36:62:27:4C:AB:FD:8A:9C:38:19:D5:56:90:46
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       4F66B6667986FB20BC14694E16C9F86ABD389570
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a3a2f33322d3332203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:32 +0000
ROA not before:           Wed 03 Apr 2024 13:48:32 +0000
ROA not after:            Wed 02 Apr 2025 13:53:32 +0000
asID:                     270266
IP address blocks:        2804:6960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:66:b6:66:79:86:fb:20:bc:14:69:4e:16:c9:f8:6a:bd:38:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:32 2024 GMT
            Not After : Apr  2 13:53:32 2025 GMT
        Subject: CN=0EB2001162E03662274CABFD8A9C3819D5569046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:36:a0:f9:32:cc:a2:4d:7d:cf:25:75:43:
                    dc:78:00:29:c1:f6:4b:99:d4:70:cc:9d:b4:b4:e1:
                    fa:7c:f9:5b:9d:3e:88:94:a7:98:29:78:fd:e4:cc:
                    b4:2b:d4:88:9c:1f:12:9b:22:c6:e1:a8:d7:cf:dd:
                    44:1d:24:6f:80:31:93:de:48:01:7e:98:d8:c5:86:
                    df:32:99:1c:f0:e4:1a:2f:e8:05:21:6a:2f:bb:9a:
                    6d:83:7a:ca:13:64:ac:45:f8:19:63:75:03:6f:44:
                    0f:66:9a:13:e2:5f:b6:22:22:45:41:e7:f9:ec:98:
                    b9:6d:17:d0:c2:d2:b1:eb:25:20:d9:9f:83:ab:6a:
                    19:78:03:b0:74:36:c0:97:50:e4:83:bc:5f:16:00:
                    74:ee:76:72:d0:54:00:ec:0d:b1:00:dc:22:f7:2b:
                    cb:56:91:f9:78:4a:e8:e5:be:dd:d8:2c:c4:ac:ca:
                    5c:c2:f2:47:fc:41:58:d9:6e:ee:03:d6:c6:c3:d2:
                    19:c2:75:78:2a:3b:13:22:0b:f1:b0:b6:77:57:ac:
                    02:a7:90:80:29:d9:63:89:b7:9c:5a:7a:b3:31:83:
                    55:a1:0d:9c:db:37:92:84:f4:52:d1:44:06:30:17:
                    6d:93:51:7d:56:53:04:7e:e7:b9:ee:a1:1e:a3:9a:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B2:00:11:62:E0:36:62:27:4C:AB:FD:8A:9C:38:19:D5:56:90:46
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a3a2f33322d3332203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:e4:2a:f9:fd:25:d4:85:c7:f8:80:43:38:bf:f9:47:fd:f0:
         3c:2e:2b:40:8f:23:48:2e:aa:ed:95:d0:f5:80:bf:ca:be:f9:
         a1:26:55:d7:62:03:b9:1f:d9:fe:c5:73:af:53:d4:61:24:c0:
         89:ec:5f:e2:40:30:c7:10:bb:f5:4f:dd:67:11:c9:09:eb:02:
         69:48:d7:ca:6c:c9:57:9a:58:a3:d1:1b:6f:a3:0a:10:e1:25:
         1e:1c:95:29:60:55:e1:65:4b:af:c9:7c:91:ce:c6:ac:13:3e:
         82:14:6c:b0:d1:ad:06:d9:cb:eb:d4:9c:5e:b8:78:9a:9e:5d:
         eb:78:f6:9c:4d:3f:1e:2e:db:78:33:78:36:3c:65:3c:29:fc:
         e4:76:c1:71:1b:03:77:7a:d1:47:15:98:ce:a0:da:6e:7f:02:
         af:9e:fc:77:84:78:8c:2e:95:ba:c5:80:c5:8f:c1:a1:4e:cc:
         dd:19:f1:02:8a:72:9a:30:1a:29:a1:fe:8b:11:f7:09:11:7b:
         36:a2:95:2e:3b:14:36:20:46:0b:aa:fb:ba:31:d5:30:99:f3:
         a1:06:be:a8:d2:dd:62:c4:d7:cb:3e:73:2f:34:e1:4d:e2:93:
         ac:19:9f:3c:5b:6b:4f:ce:77:80:6a:8f:55:8f:fe:f1:4c:66:
         c6:7c:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org