Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          TwzW5cRK7/Mi3JRGh2mkKQn2Y4qC76mHA5lExF3/TnI=
Subject key identifier:   BE:E0:8B:E3:38:8C:25:BE:FF:D9:87:A6:00:B1:14:4D:45:04:31:0C
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       600F25E0FC22DF68AA12973757885417387424E8
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     262713
IP address blocks:        2804:640:7b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0f:25:e0:fc:22:df:68:aa:12:97:37:57:88:54:17:38:74:24:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:18:df:0b:06:e7:26:3c:b4:ec:2a:ba:ff:
                    ea:ef:30:1f:15:08:d0:a4:89:56:7f:9d:d4:89:0a:
                    64:d7:fe:dd:63:57:06:6f:7d:72:f1:a3:0d:6b:63:
                    3d:e5:8e:67:23:ab:35:3a:ce:80:1d:18:9b:d7:30:
                    c4:df:ff:15:88:6f:90:5d:20:3f:f1:0d:3b:0e:17:
                    bc:5b:c7:8d:ad:5c:f0:64:5d:6f:5d:9e:fe:05:8e:
                    7f:32:fb:8a:a4:c1:9d:d8:e7:19:1d:a4:22:08:ee:
                    cc:2a:2d:60:70:9a:ba:dd:cd:c7:f0:b8:e8:bf:2c:
                    9b:57:ea:06:d8:44:c5:61:ce:87:79:d5:89:85:a2:
                    41:7b:48:7d:52:6d:cc:35:bb:85:80:68:8b:29:84:
                    59:11:2d:53:41:f6:18:04:14:b1:85:e0:de:b6:64:
                    b2:27:2c:5c:83:68:5e:d7:c8:3e:b1:44:33:8b:47:
                    d3:9c:08:93:a4:4c:21:5f:55:6e:93:ef:b6:fe:ee:
                    89:6e:b4:d9:12:fd:26:ad:e6:b1:dc:e2:b6:c2:a8:
                    41:db:05:4e:95:c4:11:70:6f:b3:d6:72:c0:82:6b:
                    bd:6a:21:20:43:25:40:b9:c8:67:42:91:77:ba:c2:
                    e9:fe:f6:91:d6:a1:7f:3e:17:7b:6c:89:c6:5e:f0:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:8B:E3:38:8C:25:BE:FF:D9:87:A6:00:B1:14:4D:45:04:31:0C
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:8c:72:a2:f5:c1:56:18:75:be:8a:03:24:a8:53:80:e0:
         37:48:a0:24:66:dc:30:95:63:16:de:ec:c0:15:23:5f:0a:51:
         15:54:70:ae:34:55:ba:43:07:12:2e:5a:a3:0f:3b:af:89:a3:
         80:b6:d6:23:cc:1e:24:70:d2:b5:79:f1:13:f9:fb:d9:1d:bf:
         3f:eb:61:a6:1c:75:82:34:ba:36:49:b0:ec:90:72:03:ea:0f:
         ab:ca:f7:94:39:51:29:72:a0:1b:c2:11:dc:15:21:13:ab:f6:
         53:99:84:04:0f:71:b8:d4:4f:a3:30:bc:5d:44:05:40:31:30:
         f3:ae:36:41:f6:b2:78:38:fc:fb:9e:61:75:37:61:3c:b2:b7:
         7a:e4:22:53:7a:15:3e:26:cd:74:51:8d:0b:56:40:79:a0:fb:
         85:16:9d:79:5c:fa:35:70:b7:e4:01:ad:e6:0e:dd:d2:b2:83:
         23:f1:85:69:9a:15:3b:20:a6:69:ed:db:5d:6f:73:e6:f2:a9:
         47:5d:7d:64:98:c5:54:bd:8d:21:80:f8:d2:b5:03:b3:55:1f:
         58:88:ad:13:20:35:91:37:13:d2:09:cf:1f:0d:0f:23:a5:6b:
         af:dc:12:d2:85:16:68:4b:08:91:5e:6b:40:37:4c:f2:6f:04:
         3d:57:0f:d4
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUYA8l4Pwi32iqEpc3V4hUFzh0JOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMENBOTgwOTFEQTg2QjNFNkQxOEZEMjA3RjFGQjY1
ODg1MjQ2MzAeFw0yNDA0MDMxODI1NDdaFw0yNTA0MDIxODMwNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBBMzE4REYwQjA2RTcyNjND
QjRFQzJBQkFGRkVBRUYzMDFGMTUwOEQwQTQ4OTU2N0Y5REQ0ODkwQTY0RDdGRURE
NjM1NzA2NkY3RDcyRjFBMzBENkI2MzNERTU4RTY3MjNBQjM1M0FDRTgwMUQxODlC
RDczMEM0REZGRjE1ODg2RjkwNUQyMDNGRjEwRDNCMEUxN0JDNUJDNzhEQUQ1Q0Yw
NjQ1RDZGNUQ5RUZFMDU4RTdGMzJGQjhBQTRDMTlERDhFNzE5MURBNDIyMDhFRUND
MkEyRDYwNzA5QUJBRERDREM3RjBCOEU4QkYyQzlCNTdFQTA2RDg0NEM1NjFDRTg3
NzlENTg5ODVBMjQxN0I0ODdENTI2RENDMzVCQjg1ODA2ODhCMjk4NDU5MTEyRDUz
NDFGNjE4MDQxNEIxODVFMERFQjY2NEIyMjcyQzVDODM2ODVFRDdDODNFQjE0NDMz
OEI0N0QzOUMwODkzQTQ0QzIxNUY1NTZFOTNFRkI2RkVFRTg5NkVCNEQ5MTJGRDI2
QURFNkIxRENFMkI2QzJBODQxREIwNTRFOTVDNDExNzA2RkIzRDY3MkMwODI2QkJE
NkEyMTIwNDMyNTQwQjlDODY3NDI5MTc3QkFDMkU5RkVGNjkxRDZBMTdGM0UxNzdC
NkM4OUM2NUVGMEVCMkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0KMY3wsG5yY8tOwquv/q7zAfFQjQpIlWf53UiQpk1/7dY1cGb31y
8aMNa2M95Y5nI6s1Os6AHRib1zDE3/8ViG+QXSA/8Q07Dhe8W8eNrVzwZF1vXZ7+
BY5/MvuKpMGd2OcZHaQiCO7MKi1gcJq63c3H8LjovyybV+oG2ETFYc6HedWJhaJB
e0h9Um3MNbuFgGiLKYRZES1TQfYYBBSxheDetmSyJyxcg2he18g+sUQzi0fTnAiT
pEwhX1Vuk++2/u6JbrTZEv0mreax3OK2wqhB2wVOlcQRcG+z1nLAgmu9aiEgQyVA
uchnQpF3usLp/vaR1qF/Phd7bInGXvDrKwIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FL7gi+M4jCW+/9mHpgCxFE1FBDEMMB8GA1UdIwQYMBaAFD8wypgJHahrPm0Y/SB/
H7ZYhSRjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzEvM0YzMENBOTgwOTFEQTg2
QjNFNkQxOEZEMjA3RjFGQjY1ODg1MjQ2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRjMwQ0E5ODA5MURBODZCM0U2RDE4RkQyMDdGMUZCNjU4ODUy
NDYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8xLzMyMzgzMDM0M2EzNjM0MzAzYTM3
NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzNzMxMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBAZAAHswDQYJKoZIhvcNAQELBQADggEBAGyAjHKi9cFWGHW+igMkqFOA4DdI
oCRm3DCVYxbe7MAVI18KURVUcK40VbpDBxIuWqMPO6+Jo4C21iPMHiRw0rV58RP5
+9kdvz/rYaYcdYI0ujZJsOyQcgPqD6vK95Q5USlyoBvCEdwVIROr9lOZhAQPcbjU
T6MwvF1EBUAxMPOuNkH2sng4/PueYXU3YTyyt3rkIlN6FT4mzXRRjQtWQHmg+4UW
nXlc+jVwt+QBreYO3dKygyPxhWmaFTsgpmnt211vc+byqUddfWSYxVS9jSGA+NK1
A7NVH1iIrRMgNZE3E9IJzx8NDyOla6/cEtKFFmhLCJFea0A3TPJvBD1XD9Q=
-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:34 2024 by rpki-client on console-ams.rpki-client.org