Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a336536303a3a2f34342d3434203d3e20323632373133.roa
File:                     323830343a3634303a336536303a3a2f34342d3434203d3e20323632373133.roa (raw, json)
Hash identifier:          dymY+tSQ6yECGRlVud2AWceE/Brwj3Y5H5kMVNJMiJg=
Subject key identifier:   1F:E4:FA:4C:B7:D6:66:83:0D:2B:B2:E7:CE:79:25:EB:EB:B6:0E:EB
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       722FEF72F983C44AB265BC3936F5177C8139B37A
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a336536303a3a2f34342d3434203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     262713
IP address blocks:        2804:640:3e60::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2f:ef:72:f9:83:c4:4a:b2:65:bc:39:36:f5:17:7c:81:39:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:c6:ca:e8:80:0b:dc:c5:d3:dc:ae:ef:73:
                    22:31:09:e2:02:41:ea:28:cc:60:5a:44:90:45:99:
                    3e:7d:29:e9:46:60:d1:d4:ea:ec:d0:9b:38:e2:5e:
                    50:91:d4:79:c3:18:c3:fd:77:c6:5f:63:db:2f:0c:
                    cc:fe:ae:fc:f5:ca:40:12:45:28:f0:ff:3e:85:8f:
                    95:8c:6d:24:8b:0f:70:16:ca:a6:52:3d:7f:5f:53:
                    37:8b:2d:7b:74:25:e8:f7:d7:a5:ee:d5:d6:dd:a0:
                    14:53:8d:74:d7:3a:fd:45:ce:dd:bf:d2:f9:64:90:
                    f7:9b:fd:44:cb:2b:77:36:05:af:bb:1d:8c:d5:d1:
                    a5:6b:42:ed:88:6a:c6:3e:be:be:62:fc:71:37:2e:
                    91:30:b6:67:4d:ce:c6:c0:9c:18:80:09:c8:ab:1d:
                    0b:d8:41:bf:5a:0e:bd:80:74:e5:57:b2:9c:d7:49:
                    ba:61:b3:6e:e2:0d:b6:c9:7d:e9:79:d0:11:ce:06:
                    36:32:6d:d9:6e:b6:c5:a3:4a:87:cf:b9:78:51:43:
                    9f:84:12:3e:3d:8f:55:a1:be:42:1a:8b:a4:30:f1:
                    be:d5:e4:b0:f8:58:6f:ad:01:60:46:36:65:8c:62:
                    5c:95:c1:72:1c:d8:09:47:ff:9f:dc:e2:4d:19:3d:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:FA:4C:B7:D6:66:83:0D:2B:B2:E7:CE:79:25:EB:EB:B6:0E:EB
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a336536303a3a2f34342d3434203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e60::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:96:66:b4:80:71:61:db:8e:17:df:66:f4:ff:a8:e5:1d:f6:
         10:5a:76:a3:1f:70:36:a3:c4:68:9f:16:71:12:ff:d5:ac:08:
         b2:56:61:5b:ff:c4:4c:60:31:51:9c:b9:ce:18:e7:a7:c2:bc:
         ce:3f:aa:7f:d8:34:73:dc:fd:3a:4d:82:5a:b2:87:96:8b:32:
         3d:5d:3d:f0:56:23:c1:11:2c:4c:a0:12:9e:d8:5b:0d:ad:d1:
         75:12:1c:09:e3:25:ea:72:e9:29:86:9c:62:d5:52:5a:28:c9:
         33:64:9c:dc:8f:3f:3c:6e:c2:e1:63:ae:72:b6:45:d5:ac:ed:
         22:a7:c3:21:3a:82:9c:5c:e2:ae:dd:25:8f:4c:68:70:6b:f2:
         28:5c:65:5e:54:1d:4b:2a:4a:31:48:85:41:97:5e:81:39:c8:
         60:7a:19:d2:d9:1e:d3:15:db:e5:0b:2b:71:d3:b4:3e:05:f1:
         08:ea:03:a9:7e:13:91:e0:fd:46:a5:95:53:bf:04:c5:d9:7a:
         59:7f:da:01:53:30:6f:fc:73:70:32:3c:76:a2:73:e2:90:64:
         59:0e:93:6f:51:d7:9b:22:7d:a9:27:c4:14:65:c2:d8:4d:2a:
         1f:72:bf:ad:a9:c0:1f:f1:c4:31:cc:d7:f9:78:b4:c0:13:0a:
         aa:de:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:34 2024 by rpki-client on console-ams.rpki-client.org