Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          NvlnordIDoOLyK4vjFGOxoXDhTYOYIp/c4OFmW3RnRQ=
Subject key identifier:   71:04:54:D4:4C:B6:1C:29:1D:95:6D:8F:28:5C:B3:DE:D6:BF:AC:17
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       1B349C72B9A78852C99BBCE5143E0787B7FC607F
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:31 +0000
ROA not before:           Wed 03 Apr 2024 13:48:31 +0000
ROA not after:            Wed 02 Apr 2025 13:53:31 +0000
asID:                     270266
IP address blocks:        2804:6960:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:9c:72:b9:a7:88:52:c9:9b:bc:e5:14:3e:07:87:b7:fc:60:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:31 2024 GMT
            Not After : Apr  2 13:53:31 2025 GMT
        Subject: CN=710454D44CB61C291D956D8F285CB3DED6BFAC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:98:f7:b5:0b:54:f6:5a:a2:70:56:1d:0f:
                    0d:43:b5:f8:d6:ca:cf:d7:22:35:1b:bb:ed:82:5c:
                    07:d3:2e:70:2f:3b:dc:a9:74:ee:f0:ff:53:de:e1:
                    9b:48:69:cb:61:1a:6a:3c:e3:6e:3a:28:79:37:ba:
                    57:cf:98:4a:d3:4b:13:db:55:85:4c:1c:f0:c2:0a:
                    ff:31:8a:0a:25:93:f9:e7:19:0f:3f:08:fc:ff:43:
                    68:59:48:ec:f9:9f:79:c8:fb:cf:3d:21:12:bf:a4:
                    a4:b6:9c:4f:6e:3d:15:96:f6:a8:16:0f:32:24:6e:
                    b5:5d:d9:67:11:70:f6:ca:00:ce:4a:af:0a:e4:aa:
                    3a:7a:56:71:5f:33:fa:58:bc:89:d3:23:4d:0c:09:
                    f1:04:44:16:87:5c:bc:a1:67:46:26:34:37:be:bf:
                    2b:2b:81:b0:52:1d:5f:08:47:81:0c:0d:79:62:03:
                    26:28:f6:44:53:7a:d5:f6:8d:c6:b6:e3:95:88:44:
                    9a:81:5f:fd:b6:1c:61:70:c2:88:5a:9d:82:07:38:
                    58:e1:51:ea:f4:c4:46:f7:2a:53:04:89:2e:eb:18:
                    e4:18:0e:9b:b7:af:a7:1f:f9:2e:77:b4:f5:6c:d5:
                    f6:b3:82:0d:fb:87:70:38:c6:6e:b0:62:ac:0e:a5:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:54:D4:4C:B6:1C:29:1D:95:6D:8F:28:5C:B3:DE:D6:BF:AC:17
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:2b:a1:d8:da:1a:6f:c9:6d:98:ab:21:30:f8:c7:e9:fc:
         99:cc:f6:71:35:09:ae:0f:7a:3b:dd:4c:90:86:8f:06:0e:41:
         e7:2d:7b:eb:90:6a:89:70:64:19:54:1d:8b:3a:8c:6e:97:1a:
         3a:0a:6a:e7:8c:24:b0:06:de:ea:33:83:1b:92:19:93:aa:2e:
         40:c2:39:37:9e:bb:66:82:24:0e:be:95:c2:8d:83:07:52:59:
         85:c7:66:83:86:ad:83:7c:88:79:91:c4:d3:88:e8:b7:ce:83:
         ef:e6:4e:46:01:f2:36:a5:ed:ba:c5:49:9f:7f:89:92:37:9e:
         1d:d9:5c:09:20:6c:32:c9:22:d0:23:6f:f0:d4:12:b7:4d:e4:
         88:a9:45:e7:02:3c:10:54:bd:8e:64:7a:09:27:f8:a7:7a:37:
         f8:fa:e5:86:ed:c6:8e:9b:81:96:21:c2:8a:89:0a:d3:39:51:
         02:6f:87:72:56:7e:5e:7a:da:db:05:60:ac:df:b1:a0:bd:d4:
         be:7f:dc:78:e5:3a:0b:5c:e7:e5:1c:f1:9f:eb:93:36:f0:88:
         26:cf:9b:cb:6c:83:11:7b:62:75:c3:07:c2:0f:86:08:a3:43:
         b1:5c:c8:b6:fd:c7:d8:da:88:91:1c:67:b5:de:c7:4e:76:03:
         17:1e:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org