Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          h16m/NW1YUt8dmQS1AMLRBspWQPybXeUNUr5StCy728=
Subject key identifier:   99:1F:95:9C:3B:C8:51:D6:26:19:F6:06:BE:EC:8F:98:92:08:41:12
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       3550BFD83858931CF3E293C5A2A887E0AEA305C8
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:25 +0000
ROA not before:           Wed 03 Apr 2024 13:48:25 +0000
ROA not after:            Wed 02 Apr 2025 13:53:25 +0000
asID:                     270266
IP address blocks:        2804:6960:5001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:50:bf:d8:38:58:93:1c:f3:e2:93:c5:a2:a8:87:e0:ae:a3:05:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:25 2024 GMT
            Not After : Apr  2 13:53:25 2025 GMT
        Subject: CN=991F959C3BC851D62619F606BEEC8F9892084112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:81:b2:91:5d:5d:89:7d:bd:7e:8a:04:aa:
                    4a:a5:b8:be:9a:9e:46:8a:e6:d9:72:e3:ee:22:d5:
                    47:df:dd:df:42:3d:51:7d:6a:e3:83:9f:1c:03:95:
                    97:b1:a7:5c:ad:9d:b2:40:cf:29:e9:10:94:fb:4c:
                    6a:26:8a:30:23:5e:b6:ac:cc:b2:ab:96:a5:fc:59:
                    03:ce:d5:1c:80:ed:19:5d:53:ae:51:b7:0d:97:44:
                    8b:2f:f3:ba:03:5f:5c:b8:a2:c8:fa:e9:81:95:c4:
                    29:a3:49:8b:e7:7e:47:2c:57:08:b2:6d:4d:42:2c:
                    cc:86:d8:e4:34:1a:3b:57:a9:a3:b4:cc:29:33:7b:
                    ed:ed:4f:9b:2b:72:02:88:df:70:53:34:58:90:1f:
                    3a:4b:af:68:a4:ac:fd:74:ab:15:29:17:ff:6c:77:
                    f3:a5:86:7c:57:5e:80:0f:9b:7f:10:07:d4:b5:8c:
                    25:73:98:8c:b6:8c:b2:52:c1:a6:cc:e8:4b:3f:9e:
                    a3:31:45:a1:f4:1b:71:d7:f2:0c:6e:7d:96:de:71:
                    2d:bd:f2:56:f7:f2:60:eb:d9:04:e3:7f:92:f8:7a:
                    c7:67:8f:10:bb:64:45:65:34:63:36:1e:b6:29:3d:
                    5c:92:8e:cf:51:1d:8d:ad:cd:8a:ef:8b:de:0f:ff:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1F:95:9C:3B:C8:51:D6:26:19:F6:06:BE:EC:8F:98:92:08:41:12
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:3c:c0:dc:fc:eb:7b:09:10:47:30:87:7b:9d:64:b6:5b:
         be:c4:94:b7:87:7d:68:0f:e6:fa:9f:cf:f8:fd:a0:ac:03:74:
         35:49:99:b1:5b:10:0a:3e:99:19:e7:46:7b:84:22:3a:7e:c5:
         be:e0:db:b6:67:96:c4:5c:db:ad:17:01:b2:5a:9e:83:4a:a3:
         b3:df:6b:5b:65:e4:85:2e:d9:c6:e3:36:e9:b9:90:8d:3a:c5:
         26:83:8a:10:6f:a5:a0:2f:15:ac:6a:f0:42:e9:c1:e7:c0:b7:
         dd:fc:b6:ef:f8:2d:8a:d1:19:2a:be:52:17:5a:50:e1:0d:ea:
         72:af:20:b0:d7:90:38:d2:7e:15:86:9e:88:97:7d:c6:78:f7:
         59:d3:8b:db:70:f0:53:6a:6f:f7:8e:dd:44:c4:30:d3:4f:e9:
         e1:09:fc:b7:35:0b:e6:2b:f6:cd:00:7f:66:75:80:16:9c:71:
         d5:cf:8a:b8:a4:4f:39:14:ea:8c:f1:2c:dc:72:cb:cc:f2:45:
         30:a3:f3:e5:b2:ce:f7:0f:53:b9:e4:34:b0:d1:a0:c0:bf:c6:
         ec:ff:b0:64:d4:7b:9e:13:90:26:0f:2f:bb:b3:a2:f5:82:4e:
         81:45:90:0a:b8:63:20:7b:92:32:9f:7c:c8:77:c4:9f:2b:82:
         0f:14:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org