Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/323830343a366263633a3a2f33322d3438203d3e20323730343236.roa
File:                     323830343a366263633a3a2f33322d3438203d3e20323730343236.roa (raw, json)
Hash identifier:          BJWEYzq6QpYOocweW9thfHzX6DF/IV4zYSapW56lGpg=
Subject key identifier:   33:DD:27:14:90:68:5D:08:2F:34:FF:76:D5:49:37:BF:AF:A1:9F:A1
Certificate issuer:       /CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
Certificate serial:       3BA39A19A2B9AB2C0FE2558BC1AE97496494379D
Authority key identifier: 7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/323830343a366263633a3a2f33322d3438203d3e20323730343236.roa
Signing time:             Thu 04 Apr 2024 04:07:34 +0000
ROA not before:           Thu 04 Apr 2024 04:02:34 +0000
ROA not after:            Thu 03 Apr 2025 04:07:34 +0000
asID:                     270426
IP address blocks:        2804:6bcc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a3:9a:19:a2:b9:ab:2c:0f:e2:55:8b:c1:ae:97:49:64:94:37:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
        Validity
            Not Before: Apr  4 04:02:34 2024 GMT
            Not After : Apr  3 04:07:34 2025 GMT
        Subject: CN=33DD271490685D082F34FF76D54937BFAFA19FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:03:18:3b:c2:ff:04:7b:fd:89:38:bb:f4:
                    59:34:6a:d5:79:ea:60:cd:24:7d:3e:33:b5:a6:f7:
                    27:64:39:7d:81:70:6a:5c:6b:9d:ab:b3:4f:ee:ab:
                    ca:8a:2d:29:2f:81:b9:cc:6e:f3:6d:c9:89:6c:42:
                    44:e1:25:c9:40:4c:88:ca:07:f0:4b:bf:f6:76:f4:
                    52:cb:59:75:47:69:8b:c0:1f:56:d9:c8:55:cb:a2:
                    fa:1f:07:29:1c:bd:fe:a2:a3:23:6b:77:53:b8:3b:
                    d7:e2:8b:dc:a9:c6:38:12:7f:89:b5:08:fb:4f:8e:
                    01:ec:e5:5a:99:33:dc:29:12:6e:9b:b7:61:ff:d5:
                    16:f1:9a:0d:e4:61:69:8e:69:01:b6:fd:8d:26:2f:
                    4a:a3:59:70:7e:7b:62:72:5a:2b:4f:b7:ed:a4:1a:
                    34:6b:16:19:af:95:60:e6:c8:1d:c8:ff:a4:a5:33:
                    2e:76:85:92:61:2e:fd:08:72:a8:c8:f9:be:18:0b:
                    a6:f7:2c:b7:61:63:2b:0b:0e:ff:de:05:a8:71:9d:
                    15:bc:5d:81:5d:89:23:b7:e1:cc:cf:02:b0:8f:17:
                    68:c1:29:63:11:fb:6d:c0:7d:e8:8d:11:ab:e9:56:
                    b9:93:f6:03:22:b9:67:77:ac:96:05:5b:97:14:0d:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DD:27:14:90:68:5D:08:2F:34:FF:76:D5:49:37:BF:AF:A1:9F:A1
            X509v3 Authority Key Identifier:
                keyid:7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/323830343a366263633a3a2f33322d3438203d3e20323730343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:07:ac:75:6d:b1:fe:2a:2c:c3:b0:aa:2f:85:dd:fd:fa:
         32:ad:65:ed:57:a1:ce:77:69:ec:a4:e8:4f:15:e1:07:04:33:
         98:0e:ef:26:11:d7:55:15:d7:12:98:6f:bb:47:3e:6b:b1:ed:
         97:d1:38:7d:29:c7:35:c3:b9:63:78:60:8a:11:32:95:4e:f6:
         72:db:08:71:b6:66:b0:76:17:01:64:fc:1c:72:46:1a:15:ce:
         40:28:64:eb:33:8c:ae:7a:90:6a:1c:77:43:51:29:43:77:ba:
         16:d0:33:b9:de:e7:4e:7a:ee:bb:59:8f:fa:6f:82:fe:fa:df:
         b8:89:27:60:33:87:aa:58:f0:9d:71:24:fc:e7:73:79:8a:bb:
         53:03:85:4d:b7:e5:88:5c:61:95:0e:ef:24:ff:2e:27:7d:01:
         7c:14:30:61:32:a0:38:3a:f4:7c:6c:7e:93:13:26:72:1e:d7:
         df:66:4f:e4:03:18:b0:fc:76:d2:0b:74:6f:c6:3a:77:f5:14:
         fb:d0:88:e5:d7:fd:c6:36:24:c9:9a:50:20:d3:22:22:6d:8d:
         41:da:47:e7:20:c9:b9:9c:bc:9d:00:b4:10:32:aa:12:f1:c7:
         4e:e9:77:96:ff:16:cb:d8:fc:6b:0c:60:5d:53:73:40:cc:dd:
         e2:a3:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org