Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa
File:                     323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa (raw, json)
Hash identifier:          t06G24Z60C8+BxxSprNOMjQJ6L3OmvvT3S/So4TMP8Y=
Subject key identifier:   0E:6C:39:4D:E3:9B:92:69:3F:BB:54:22:83:61:FC:47:F9:1B:1E:6A
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       21549C3E9078497B0D73307D0FBA71A13FE7DD7F
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     262713
IP address blocks:        2804:640:100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:54:9c:3e:90:78:49:7b:0d:73:30:7d:0f:ba:71:a1:3f:e7:dd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:46:ab:09:41:40:65:c9:a5:cf:30:d6:7e:
                    6f:54:ca:73:9d:86:f4:c3:c3:10:27:cb:5d:9e:da:
                    ad:84:aa:73:07:c6:3c:68:e8:1a:c5:cd:1a:36:db:
                    96:4f:bc:5e:5d:45:70:e9:21:1e:c2:03:42:4c:04:
                    a2:7b:4c:e6:d7:0a:51:6f:e4:b0:c6:77:c7:e0:f2:
                    cb:55:dd:86:91:e2:e2:2a:62:82:01:b3:e2:5d:a5:
                    0c:31:b3:75:2c:66:45:61:df:89:66:6f:6c:96:d6:
                    b6:51:07:2a:a3:74:88:e7:79:f4:2e:a2:f7:f6:03:
                    94:87:32:a9:9a:a1:1d:4f:4e:aa:97:5a:8d:a8:21:
                    a0:5f:34:41:6a:eb:e9:f1:ad:c4:2c:0a:1f:38:0b:
                    a6:7f:0a:46:af:0e:c7:8e:13:10:07:3f:0a:9e:0c:
                    df:a4:b3:c8:0c:3a:db:6d:36:5a:7c:fd:f7:29:97:
                    ba:56:c1:63:1f:92:ae:5f:49:c0:37:06:ba:fe:20:
                    6d:2f:cf:c2:b8:73:69:62:0f:da:87:a0:c6:0d:e6:
                    20:f8:75:b8:53:a7:ab:23:0a:b3:ef:56:d3:28:cb:
                    59:38:30:35:bd:9e:4c:56:b8:f5:64:c4:79:f3:7c:
                    bd:0f:b3:36:98:a6:d3:1b:25:75:35:19:72:c0:43:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6C:39:4D:E3:9B:92:69:3F:BB:54:22:83:61:FC:47:F9:1B:1E:6A
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:1e:f5:4e:d7:52:31:13:b3:21:42:cd:e2:2d:b1:d9:fe:
         58:12:e8:5c:54:e9:55:8d:11:83:79:e8:66:2d:17:fa:89:e6:
         db:ab:4a:9e:c4:13:3f:f2:f2:80:fe:86:dd:4f:d2:62:df:57:
         8e:f3:78:15:93:2d:84:8d:85:87:66:69:10:26:d6:4a:68:d6:
         6b:d7:a2:b8:11:83:b7:1f:bb:ea:fb:55:f7:f1:ac:29:b1:e2:
         b8:a2:64:45:0b:8c:75:c5:94:b8:b0:d9:78:a9:ef:04:01:64:
         f9:0f:b4:03:46:8b:5c:4a:72:d9:1a:ae:71:7f:16:85:b5:e3:
         24:c9:95:94:c8:9d:69:88:a2:e2:92:d6:03:1d:ac:62:6e:b2:
         ea:a5:67:6b:c5:70:3a:7f:b1:c6:e6:d7:3e:74:73:95:82:d3:
         41:81:05:ac:46:8e:b9:a8:ff:47:00:bd:48:2f:52:70:b5:57:
         a0:32:c2:59:65:4a:8c:b2:61:90:e4:e3:ae:bc:16:a4:3a:ca:
         68:1c:fc:e1:a0:c1:59:06:7a:0e:ed:bb:59:d2:e4:0d:57:c0:
         d6:54:39:93:1f:16:b6:05:4a:16:fc:76:6b:73:a7:be:3b:f4:
         8d:b0:42:13:95:8f:a0:91:12:64:dc:09:90:c7:a3:95:9f:ee:
         e8:13:eb:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org