Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          Ab0XVR0wG/cRA3L9oVEG7PMmMsPkNxS7uoFYX9Y9DLo=
Subject key identifier:   87:8A:83:41:BF:FE:A0:3B:6D:D0:6B:2E:5C:D5:B0:CD:08:C1:4F:3C
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       5513C32BDDE254C84055C574ADFFB6E11AE723FD
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:29 +0000
ROA not before:           Wed 03 Apr 2024 13:48:29 +0000
ROA not after:            Wed 02 Apr 2025 13:53:29 +0000
asID:                     270266
IP address blocks:        2804:6960:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:13:c3:2b:dd:e2:54:c8:40:55:c5:74:ad:ff:b6:e1:1a:e7:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:29 2024 GMT
            Not After : Apr  2 13:53:29 2025 GMT
        Subject: CN=878A8341BFFEA03B6DD06B2E5CD5B0CD08C14F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:16:56:5a:d8:ab:79:a0:7c:22:ae:07:22:
                    ac:d5:87:a3:0e:f0:d9:84:4b:0c:c2:5a:5e:22:47:
                    fa:48:1c:a4:3d:39:06:c2:0f:8c:1b:dc:91:60:00:
                    6b:3c:e9:b9:d6:46:3a:d5:fe:b1:92:c7:39:82:17:
                    ad:0e:f4:40:d2:11:6d:47:5d:91:7e:ee:7f:76:5a:
                    e4:81:36:f1:fa:f5:77:a1:ae:7f:66:bd:be:3a:2f:
                    d3:55:8e:5b:aa:ba:20:9b:9f:02:a0:c4:29:bf:96:
                    96:11:38:fd:c1:01:75:e6:a6:00:41:07:ad:f7:66:
                    f6:cf:fd:31:67:b7:75:d4:38:f3:b6:72:94:d5:fa:
                    8d:56:45:01:b7:c4:ee:31:16:0f:b2:dc:30:3f:bf:
                    2e:f7:85:5f:9f:7c:ef:c5:1d:93:3f:30:d1:73:b3:
                    4b:c1:f8:e5:a5:fc:0d:0b:c6:a1:f4:9d:5a:e5:d5:
                    f0:71:82:f9:cf:58:3a:b2:f1:82:b3:d3:46:12:81:
                    24:e3:00:f0:f0:bb:b7:ed:01:c8:38:45:c7:e7:96:
                    de:0e:3c:c6:dd:76:5b:69:19:39:1e:28:9a:69:ca:
                    14:cb:56:31:b8:33:51:39:f9:bc:7b:bd:83:6c:cd:
                    5a:1f:74:17:33:3b:a1:9f:99:3d:0f:e5:1f:72:78:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:83:41:BF:FE:A0:3B:6D:D0:6B:2E:5C:D5:B0:CD:08:C1:4F:3C
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:7f:5f:c1:d2:7a:ac:cd:5e:7c:58:26:b4:b1:38:e6:e3:e0:
         a0:57:ac:af:42:4d:68:2c:58:bd:43:d9:08:2d:21:8c:a7:78:
         ba:13:e8:b7:8b:74:5d:7a:f6:1e:02:70:21:4d:2a:b0:56:35:
         ac:b9:b9:7b:45:4d:c8:a5:01:2a:48:2c:e7:aa:6f:69:d2:33:
         07:4a:7f:52:cd:d0:d1:8a:76:a5:ec:f6:a7:ba:5e:e2:3e:6f:
         ef:a4:3f:55:80:b3:bc:cf:a1:96:8d:e1:ab:c6:42:40:5b:49:
         1c:ec:93:f6:4d:fc:3b:20:c2:22:8a:0a:9b:32:c7:81:bd:78:
         06:17:0a:fb:82:8e:6e:fb:ea:36:86:39:63:bf:23:91:80:53:
         7d:b5:c3:e1:e3:81:7d:e4:ba:27:4a:ae:f8:84:02:99:c8:28:
         e9:42:8f:e4:e6:c2:32:5a:de:8c:bc:95:bb:14:7d:67:bd:ea:
         e0:c0:73:47:a7:f9:1a:e1:52:74:5f:b3:c8:af:ea:3b:97:bb:
         29:53:22:f8:dc:5c:81:e2:f5:83:38:bf:fd:b9:e9:b0:8b:f1:
         d7:3c:3e:0e:7e:93:d8:91:89:54:63:0f:b4:28:e7:44:c0:10:
         14:bb:79:71:3b:3c:8b:e1:27:b9:9b:f3:a4:a3:5a:9a:78:f0:
         9f:4c:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org