Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa
File:                     323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa (raw, json)
Hash identifier:          ErkrpTdNg3Mi5m8L3sUngsB4pnXRI3Y4/6/DmWdAKmE=
Subject key identifier:   B2:7F:8B:3B:A7:C6:0D:B9:EA:84:1F:7D:9E:73:19:C3:11:50:1C:6A
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       36D4E014FCA42498953913234ED11B37F9CE7970
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:36 +0000
ROA not before:           Fri 29 Dec 2023 18:33:36 +0000
ROA not after:            Fri 27 Dec 2024 18:38:36 +0000
asID:                     262847
IP address blocks:        2804:2e8:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d4:e0:14:fc:a4:24:98:95:39:13:23:4e:d1:1b:37:f9:ce:79:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:36 2023 GMT
            Not After : Dec 27 18:38:36 2024 GMT
        Subject: CN=B27F8B3BA7C60DB9EA841F7D9E7319C311501C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:1e:62:bf:ab:e8:33:a9:26:52:f6:64:3a:
                    4f:2e:02:2a:bb:f6:fa:ce:85:70:32:bd:8a:cb:d1:
                    ef:96:37:ef:50:29:d2:90:58:38:00:2d:a2:95:41:
                    71:8c:d7:4e:e6:3b:4b:4e:fc:18:49:4a:ed:33:52:
                    71:65:a9:6c:b0:3f:55:9c:6c:8e:ee:df:ce:3c:50:
                    47:0d:9b:cb:cc:ed:3a:06:bc:d7:fe:3e:00:d5:b9:
                    c2:f4:d4:a1:2f:e9:a8:d6:c5:3d:09:2e:36:53:81:
                    69:20:6b:c3:ec:45:be:26:1d:94:dd:3d:9f:5f:09:
                    bb:bb:f1:6d:91:12:09:87:1d:0d:b3:a6:bb:3e:9b:
                    bc:a9:97:5a:b6:5a:5b:ef:c7:db:3e:2f:14:e0:dd:
                    64:64:70:d9:b0:87:16:00:10:cc:05:c0:85:95:c5:
                    8b:14:63:c4:85:c8:67:15:b6:f3:66:9c:1e:04:fc:
                    fe:31:56:a6:58:1b:f2:f6:f4:1b:a4:62:24:ac:d8:
                    01:b0:b1:eb:95:a3:13:8b:59:d1:aa:a7:72:27:c0:
                    51:b3:e1:d1:8f:5a:c3:c3:e8:c2:93:ff:be:1d:7c:
                    bf:0b:6b:4a:ea:06:e9:1f:1d:d5:3e:dc:0c:58:9b:
                    40:2a:7c:16:20:ac:b5:d5:80:a8:70:2f:e3:03:53:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:8B:3B:A7:C6:0D:B9:EA:84:1F:7D:9E:73:19:C3:11:50:1C:6A
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:f6:d7:99:ec:6c:f7:23:e3:30:fc:f8:d1:a9:db:99:4b:
         9a:35:0f:28:10:0c:09:11:6f:65:5f:55:a3:3c:ea:53:f2:3a:
         da:11:c7:33:04:53:6e:57:af:b9:e0:28:32:0f:f4:9b:83:ba:
         36:c0:9d:09:b8:91:0a:17:e4:da:13:fc:ca:49:1e:a1:fa:f5:
         55:de:2c:78:a1:5f:43:38:73:58:21:21:9d:4d:c5:16:ad:cf:
         fa:f0:8c:69:1b:12:26:ef:ea:5d:54:6b:0e:4a:a9:ae:2a:c8:
         6a:37:73:81:cd:b7:f6:0f:3f:05:35:75:62:10:4e:6e:05:fc:
         fe:c6:51:e6:e5:f8:b6:93:1f:d5:97:c6:7a:e0:e1:28:af:e1:
         76:bd:ba:97:ab:e1:48:bc:29:15:59:84:d2:87:c0:c6:39:3b:
         a5:d4:f3:a6:8f:71:91:9c:5d:fe:13:8a:48:d7:22:d6:55:e0:
         3e:ce:a6:64:d3:37:bc:34:ea:64:0c:ba:52:6d:ae:6e:e6:08:
         d3:6e:8e:1e:4d:3f:57:5f:a1:74:5b:8d:0d:da:47:bb:a7:67:
         41:44:0d:2e:3f:46:40:e7:e8:47:aa:17:91:af:e0:66:97:82:
         20:59:2f:9e:e8:92:1e:c3:c5:79:63:7f:f5:4c:3f:4d:26:f4:
         61:82:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org