Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/323830343a376437303a3a2f33322d313238203d3e20323731353631.roa
File:                     323830343a376437303a3a2f33322d313238203d3e20323731353631.roa (raw, json)
Hash identifier:          EBn3lNhFfPSmg4zjb3qxaw0wKPMcq7OyD/LqQl+AQ/c=
Subject key identifier:   2F:37:71:3E:FA:7E:EF:07:4E:1D:E8:15:72:7D:70:56:47:D0:53:D3
Certificate issuer:       /CN=708F064BF344A2F78B8AB54D553811C27DBF477C
Certificate serial:       148CC01C64E1D7BB2550EAB307F0420A213150BC
Authority key identifier: 70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/323830343a376437303a3a2f33322d313238203d3e20323731353631.roa
Signing time:             Fri 05 Apr 2024 03:30:42 +0000
ROA not before:           Fri 05 Apr 2024 03:25:42 +0000
ROA not after:            Fri 04 Apr 2025 03:30:42 +0000
asID:                     271561
IP address blocks:        2804:7d70::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8c:c0:1c:64:e1:d7:bb:25:50:ea:b3:07:f0:42:0a:21:31:50:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708F064BF344A2F78B8AB54D553811C27DBF477C
        Validity
            Not Before: Apr  5 03:25:42 2024 GMT
            Not After : Apr  4 03:30:42 2025 GMT
        Subject: CN=2F37713EFA7EEF074E1DE815727D705647D053D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:26:5d:a7:35:c8:6e:be:27:0c:d1:e2:98:
                    d7:34:f6:89:21:38:24:a5:e9:de:a4:e7:56:20:83:
                    54:de:06:9d:5a:20:24:a3:ef:e8:e2:98:27:1b:76:
                    0e:69:1a:7d:8e:77:75:53:f8:b4:43:1b:d4:84:84:
                    8a:b2:8c:72:28:de:b8:e9:3a:8e:9c:43:3b:8f:36:
                    98:32:fd:26:72:47:47:04:c1:7f:1c:1d:89:ba:99:
                    5d:46:21:e8:da:a8:26:45:49:91:4d:75:e1:bc:02:
                    e1:8d:c6:4b:15:a1:c1:0d:e3:39:8b:d0:a1:eb:64:
                    1f:5e:47:64:72:dc:8c:3d:08:80:ab:60:6a:25:6a:
                    38:ba:39:4d:d5:07:d4:4e:83:4f:9e:9f:b9:13:fd:
                    be:26:a1:64:26:35:39:f8:04:d7:b7:22:47:a0:ed:
                    ea:ac:03:cf:2f:3e:ab:68:37:6b:f4:9a:eb:27:13:
                    96:93:32:8b:87:e3:2a:37:0a:05:ef:4c:8b:1d:fb:
                    45:66:5a:88:0c:9b:88:34:c9:b2:98:44:51:4f:c9:
                    d1:0e:47:73:f0:f3:73:1c:08:e7:98:5d:60:6c:12:
                    f4:7b:f7:0a:01:c9:53:bd:3c:ff:b1:e5:c3:d1:10:
                    74:a4:b4:bf:d1:61:a3:33:df:c6:db:a2:58:4b:47:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:71:3E:FA:7E:EF:07:4E:1D:E8:15:72:7D:70:56:47:D0:53:D3
            X509v3 Authority Key Identifier:
                keyid:70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/323830343a376437303a3a2f33322d313238203d3e20323731353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:57:59:e5:9f:11:fb:2b:84:06:e0:14:36:12:4c:e0:67:5a:
         bd:9e:99:f1:f0:25:13:0a:cf:a8:d4:23:4b:50:a3:8d:8e:ec:
         d0:d7:bf:16:33:93:e3:7b:dc:02:6f:29:7c:cc:9b:c5:d4:01:
         1b:64:cb:39:26:c1:41:2d:d3:5b:4a:c9:5a:cb:54:5e:87:d5:
         29:ca:ca:d7:ef:ba:59:0c:19:2b:04:70:a0:9c:f2:ff:d7:e6:
         53:09:55:16:34:8c:08:69:e4:40:ef:99:83:c9:07:f5:fe:f4:
         b1:20:36:6a:35:00:16:8d:74:86:37:8a:26:66:9b:60:55:36:
         36:e7:00:57:97:aa:01:a7:60:ca:f2:ec:1f:ae:34:5b:a3:9c:
         b4:23:9c:a1:3f:59:8a:35:7b:3e:16:1b:b0:67:db:26:8a:cd:
         01:d4:88:43:29:7b:4c:76:cc:30:da:e8:13:3e:24:fc:90:75:
         64:d4:03:b8:68:a2:5f:a8:d3:6b:7a:19:1e:ad:40:7f:67:f4:
         cf:f6:7f:45:cb:27:29:1a:32:1c:28:de:b9:2c:2b:9d:10:12:
         40:25:cd:e0:4a:84:08:ea:39:84:4f:cc:d4:62:31:44:92:0a:
         30:57:29:ef:a7:c2:91:cb:1c:78:16:c7:d7:ef:23:00:27:41:
         ea:70:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org