Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/323830343a373362303a3a2f33322d3438203d3e20323730393331.roa
File:                     323830343a373362303a3a2f33322d3438203d3e20323730393331.roa (raw, json)
Hash identifier:          xYsYxasp4xctEg3QRQBJyja2H3EPZTiqmi7VDzHtgfg=
Subject key identifier:   4F:15:0D:57:D5:A1:DA:56:DF:18:B0:E7:AC:EC:0D:AD:EA:85:87:3D
Certificate issuer:       /CN=2B7410E96445484E31D8CA6B9453554810501CE8
Certificate serial:       14A6FD520DFE55CD6041F92D061C45DFCE11A642
Authority key identifier: 2B:74:10:E9:64:45:48:4E:31:D8:CA:6B:94:53:55:48:10:50:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B7410E96445484E31D8CA6B9453554810501CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/323830343a373362303a3a2f33322d3438203d3e20323730393331.roa
Signing time:             Tue 05 Mar 2024 17:14:09 +0000
ROA not before:           Tue 05 Mar 2024 17:09:09 +0000
ROA not after:            Wed 05 Mar 2025 17:14:09 +0000
asID:                     270931
IP address blocks:        2804:73b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a6:fd:52:0d:fe:55:cd:60:41:f9:2d:06:1c:45:df:ce:11:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7410E96445484E31D8CA6B9453554810501CE8
        Validity
            Not Before: Mar  5 17:09:09 2024 GMT
            Not After : Mar  5 17:14:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:43:77:d2:e0:26:44:fe:cb:09:70:78:bc:
                    d4:4f:86:0a:ff:c1:9f:ea:02:bc:71:5e:5f:84:90:
                    cd:79:5f:2e:37:7c:76:5d:b5:10:0c:3f:db:69:ab:
                    fe:91:c5:1e:68:c2:fb:0f:7a:ce:ea:20:68:fe:23:
                    50:9f:68:c4:f8:88:5f:29:a1:ad:ae:75:a6:6e:d8:
                    ed:28:fe:6c:cf:ae:cb:43:f4:af:33:d0:d0:aa:51:
                    67:9f:e9:11:88:f2:bd:cf:e4:ca:50:ad:52:00:4b:
                    3d:bc:9e:f1:49:ad:e3:88:64:4a:6f:e3:2e:54:61:
                    79:de:1f:7e:17:85:21:4b:0e:cc:79:69:f9:3b:0b:
                    29:9c:4f:0c:db:98:8d:c5:f7:f0:c7:53:28:91:14:
                    85:28:5a:2d:bc:26:77:03:42:27:30:70:bf:a2:95:
                    a6:01:3d:4c:16:37:db:6b:e1:98:9f:70:81:51:58:
                    3d:38:cc:8c:e0:49:b6:fa:54:0f:75:4c:76:20:77:
                    2a:af:2a:6e:e5:e5:1e:a6:ce:89:a9:b3:2c:4f:43:
                    de:30:29:6e:27:1f:7a:9e:41:5b:e0:f5:8f:b8:ad:
                    f7:8f:1e:5a:30:50:72:d6:df:f2:0f:e3:0f:30:d4:
                    43:9b:ca:d5:0e:02:ae:f4:b4:fd:11:7f:13:d8:db:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:15:0D:57:D5:A1:DA:56:DF:18:B0:E7:AC:EC:0D:AD:EA:85:87:3D
            X509v3 Authority Key Identifier:
                keyid:2B:74:10:E9:64:45:48:4E:31:D8:CA:6B:94:53:55:48:10:50:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/2B7410E96445484E31D8CA6B9453554810501CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B7410E96445484E31D8CA6B9453554810501CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/323830343a373362303a3a2f33322d3438203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:a7:03:04:64:b5:ec:08:c3:51:29:39:5d:ed:8f:44:83:43:
         40:93:82:da:47:67:62:18:a1:51:ae:ac:2f:b7:84:2f:99:0c:
         04:14:2f:6b:80:a2:ae:e5:c5:5f:71:7e:e5:50:04:89:15:0d:
         51:55:53:69:64:f3:6f:eb:5d:1f:a2:6a:69:0e:e6:44:42:37:
         a7:5d:ac:7c:01:50:37:43:2a:b2:4a:f5:87:6d:42:9d:65:b6:
         51:ad:c6:fc:41:26:9e:f6:ed:47:f9:f3:50:fe:bf:81:db:9b:
         4b:c3:fb:ec:60:9b:2d:f0:d0:ec:c2:ef:48:47:98:98:bb:a2:
         c3:c2:b3:5f:55:01:18:48:67:9f:05:8b:71:90:bb:1e:ee:d0:
         a3:57:c4:df:7d:f3:1e:0b:8f:3b:87:fb:62:43:06:d4:12:e4:
         36:9c:df:50:72:47:09:d0:cb:83:44:f0:8d:03:21:20:2e:7a:
         6d:2f:72:a2:92:cb:82:fd:e2:69:fd:7d:64:f5:f8:f8:bb:7a:
         22:48:16:31:d1:e7:6b:c7:a3:b1:42:cb:55:e0:dc:a1:ba:3a:
         8e:b8:c9:a1:7f:a2:4a:75:38:33:0a:d2:04:a5:77:3e:6b:d5:
         69:b8:b6:ed:85:70:38:52:c9:48:5b:62:7c:39:d6:42:9f:0d:
         3b:54:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org