Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          1hw3VyMcRCb03aP73X7iLFw9tRgmHQPxnmpIvG8tPu8=
Subject key identifier:   73:1C:7D:FA:1E:31:43:4E:AE:E0:93:C9:5E:82:40:61:61:98:35:C0
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       2957A64B80602B206E7B0BB54CE2A47FBA48F0FF
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:38 +0000
ROA not before:           Wed 03 Apr 2024 13:48:38 +0000
ROA not after:            Wed 02 Apr 2025 13:53:38 +0000
asID:                     270266
IP address blocks:        2804:6960:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:57:a6:4b:80:60:2b:20:6e:7b:0b:b5:4c:e2:a4:7f:ba:48:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:38 2024 GMT
            Not After : Apr  2 13:53:38 2025 GMT
        Subject: CN=731C7DFA1E31434EAEE093C95E824061619835C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:75:d2:aa:f5:cf:ed:53:2a:0e:1d:34:bf:
                    05:3f:0a:5f:63:b5:5f:0d:35:ed:03:41:3d:0a:55:
                    10:62:6a:4e:69:0e:21:8c:1c:f3:2e:59:de:aa:6f:
                    c2:11:99:cd:57:bd:ce:c1:1f:34:19:a6:3d:76:9d:
                    b5:f8:52:e0:55:bc:97:98:f4:7c:c6:0a:5b:ac:3c:
                    41:dd:0f:ac:ce:29:5c:f7:af:6a:e1:de:1d:0a:16:
                    2e:a6:11:88:ec:00:ff:49:c4:ed:8f:5a:3d:eb:29:
                    e6:fa:c2:9d:9f:db:1f:af:9a:01:50:1d:37:57:08:
                    76:8a:46:eb:ac:e5:94:1e:46:e5:b5:63:2f:d6:2c:
                    f6:62:8c:24:df:0b:3d:af:05:32:3c:ea:a3:51:3f:
                    a1:b1:6d:f8:b0:e7:a9:e7:9f:6f:2e:b2:83:3e:79:
                    27:83:ce:8c:a2:58:06:a2:dc:f5:26:45:bc:e1:9b:
                    bf:83:0d:a0:bd:75:82:2c:6f:0f:e8:ee:b9:17:e3:
                    6b:5d:75:e5:f4:a2:c5:8b:df:41:9b:e2:06:c0:12:
                    f1:d1:81:45:60:f1:20:fd:08:cd:62:99:95:e5:0f:
                    8e:ce:75:64:bb:52:50:37:35:d4:49:4f:5f:b0:c0:
                    cb:e9:26:e3:37:69:e3:4f:56:3c:ad:79:fc:51:78:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1C:7D:FA:1E:31:43:4E:AE:E0:93:C9:5E:82:40:61:61:98:35:C0
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:0d:8c:4c:98:7d:3c:7c:0a:9e:de:f0:ed:41:25:94:c0:
         2d:e2:c7:44:92:94:10:91:fa:27:3f:74:d0:66:c3:ca:18:34:
         6c:b3:f7:2c:93:d0:52:dc:ee:58:ae:7f:c9:ce:cc:03:f8:dc:
         bc:21:32:70:1d:ab:47:07:cc:71:c9:f2:5c:0d:e8:5c:ce:e6:
         c9:ad:57:c8:de:cb:90:8e:df:13:81:2b:b6:e5:6d:5d:7e:29:
         ac:0a:92:4b:10:8b:6c:85:b0:18:7a:78:4c:8f:c3:83:59:17:
         a0:a7:c8:9b:56:8e:8a:da:e3:28:b6:0f:9d:ce:dc:af:c6:4b:
         a6:93:03:55:53:1e:70:3d:69:6c:87:f4:f6:b2:23:96:d6:aa:
         22:77:96:26:8e:db:56:b4:62:cc:a2:fc:08:a5:85:d2:67:99:
         16:32:65:02:0f:28:1d:c3:ce:4f:bd:54:71:98:01:18:1b:1d:
         e3:ed:73:74:64:0f:db:c0:30:1e:ef:39:3f:38:a3:ce:4a:3e:
         27:5d:19:e5:89:f4:38:ea:58:4a:04:f6:db:e7:23:73:9f:7c:
         7f:5a:cb:f1:fb:13:0e:a9:3a:45:eb:a9:b3:74:e9:a8:61:26:
         e1:fa:64:30:bb:81:2c:1c:39:84:09:5e:5b:21:fd:6e:7a:9b:
         ec:34:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org