Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/323830343a366638303a3a2f33322d3438203d3e20323730363634.roa
File:                     323830343a366638303a3a2f33322d3438203d3e20323730363634.roa (raw, json)
Hash identifier:          eBE82ilZ4le9kfDpyKxBfD/fSShnSx24aWjQUxh8PZE=
Subject key identifier:   CD:65:0A:39:C8:67:32:3F:E9:1E:2E:56:4C:3A:9B:A9:23:01:0F:A0
Certificate issuer:       /CN=7948260E0BEAA7417DD376357ACF0E40F6931454
Certificate serial:       3617EAD7468DAC1B76A401C0100BF0D6E0D793B3
Authority key identifier: 79:48:26:0E:0B:EA:A7:41:7D:D3:76:35:7A:CF:0E:40:F6:93:14:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7948260E0BEAA7417DD376357ACF0E40F6931454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/323830343a366638303a3a2f33322d3438203d3e20323730363634.roa
Signing time:             Wed 03 Apr 2024 19:35:52 +0000
ROA not before:           Wed 03 Apr 2024 19:30:52 +0000
ROA not after:            Wed 02 Apr 2025 19:35:52 +0000
asID:                     270664
IP address blocks:        2804:6f80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:17:ea:d7:46:8d:ac:1b:76:a4:01:c0:10:0b:f0:d6:e0:d7:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7948260E0BEAA7417DD376357ACF0E40F6931454
        Validity
            Not Before: Apr  3 19:30:52 2024 GMT
            Not After : Apr  2 19:35:52 2025 GMT
        Subject: CN=CD650A39C867323FE91E2E564C3A9BA923010FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:56:0a:d2:58:0c:bd:6b:43:2c:11:e4:e7:
                    e4:0f:59:82:50:2e:a6:bc:24:55:fa:0f:d7:ac:07:
                    1c:71:9b:38:3e:62:71:ab:51:14:5d:71:d5:3e:49:
                    11:51:7b:23:26:ae:4b:b6:ee:2d:94:09:35:cb:c3:
                    83:cc:28:61:27:7f:b5:98:98:e4:a6:ed:8b:c4:50:
                    3b:78:fa:b5:b5:c0:2e:71:99:48:82:c1:1b:a8:db:
                    b1:7b:1b:08:a1:a6:92:9e:bc:4d:f6:b8:79:f1:a5:
                    6c:6e:9a:65:e4:b1:86:85:92:f0:9f:9f:3e:14:c8:
                    a0:44:e3:61:8c:d2:fc:ed:01:53:f9:00:c5:63:92:
                    15:5f:b6:2b:0a:2f:54:e6:b7:95:88:95:e0:fb:f6:
                    5d:e0:e5:31:9c:0e:5d:4b:c5:e0:bf:5b:a4:98:4a:
                    a4:1c:3b:b3:62:83:5b:5d:53:25:cc:60:55:11:10:
                    8b:54:78:6d:17:7d:2c:b6:7f:df:e0:d9:62:a5:fe:
                    d0:08:31:b7:23:e7:a8:36:99:77:80:d9:30:22:09:
                    56:49:b2:e2:0a:31:bf:c1:81:6a:d3:3c:6d:71:0f:
                    81:11:3f:01:a7:9e:61:c7:ac:dc:66:5c:da:a1:45:
                    08:74:30:ea:66:bc:60:7a:74:08:b0:4c:f6:26:40:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:0A:39:C8:67:32:3F:E9:1E:2E:56:4C:3A:9B:A9:23:01:0F:A0
            X509v3 Authority Key Identifier:
                keyid:79:48:26:0E:0B:EA:A7:41:7D:D3:76:35:7A:CF:0E:40:F6:93:14:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7948260E0BEAA7417DD376357ACF0E40F6931454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/323830343a366638303a3a2f33322d3438203d3e20323730363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:34:70:48:12:bb:55:af:6c:e4:68:04:25:79:47:ca:38:69:
         89:3a:6c:76:a2:f1:4b:a5:6e:2f:c2:78:cc:e8:3f:1b:25:c1:
         59:a7:f1:f6:24:8c:8f:79:e9:b0:5b:23:60:4d:a0:82:7d:53:
         3f:4d:25:e4:4f:a7:f1:33:34:25:a2:72:fa:f6:10:cb:f0:61:
         01:25:86:06:8a:0b:4e:51:08:85:0f:c6:76:39:e9:78:bd:bb:
         40:e9:bc:5c:2b:03:a9:74:8b:e8:14:7e:43:88:71:ba:88:b7:
         4b:cd:bb:c8:c1:c6:7b:65:61:da:e6:3e:b8:19:f7:88:2c:91:
         bf:20:d1:98:72:bf:e3:41:ec:45:17:64:ea:8e:30:9b:ee:21:
         54:01:e4:12:cd:08:56:91:ac:dc:a1:5e:af:ea:3e:7f:3a:85:
         9d:e6:e4:7f:8f:41:e6:18:56:ad:8c:08:ec:af:4d:83:05:c8:
         f1:87:ff:ee:86:48:2a:89:85:10:a1:e9:99:e5:90:01:ce:5c:
         2f:73:4a:f4:06:e8:1b:c3:03:05:94:fc:85:ef:f8:5b:da:ca:
         ec:e3:34:90:34:8d:74:54:19:06:cc:48:83:be:c4:a8:ff:6e:
         14:1e:2a:08:9a:05:c9:af:bb:a6:4a:50:af:89:b5:b9:49:a2:
         f4:23:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org