Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa
File:                     323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa (raw, json)
Hash identifier:          trlkl6auTvXVj/z8fFAHwTfPbgEDyZ1xhtoNRl9EnAA=
Subject key identifier:   B3:C1:E4:15:67:C3:75:01:34:68:5A:EA:4D:70:64:63:EA:C5:91:D3
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       400D64000284454F34F1E4038C2CE443F37DBC35
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:33 +0000
ROA not before:           Wed 03 Apr 2024 13:48:33 +0000
ROA not after:            Wed 02 Apr 2025 13:53:33 +0000
asID:                     270266
IP address blocks:        2804:6960:6800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0d:64:00:02:84:45:4f:34:f1:e4:03:8c:2c:e4:43:f3:7d:bc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:33 2024 GMT
            Not After : Apr  2 13:53:33 2025 GMT
        Subject: CN=B3C1E41567C3750134685AEA4D706463EAC591D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:ad:14:9a:d9:bd:4d:57:dd:42:cd:52:8f:
                    66:02:22:cf:a4:14:c8:03:af:d5:80:f5:3b:46:96:
                    60:92:c4:1f:20:ed:af:b3:1a:91:8f:ee:7e:22:83:
                    96:7b:b8:a8:97:0a:17:a5:d4:18:f5:75:eb:f4:3c:
                    0a:8c:47:86:f6:5e:10:3e:30:e0:8a:7f:f0:4f:ac:
                    52:c9:ae:24:ef:19:b8:f1:d0:28:6a:ea:b0:d5:06:
                    5c:4f:32:18:a5:41:eb:37:44:23:f7:1c:a0:d8:38:
                    4e:f5:c3:dc:2c:f9:94:fb:d1:a2:32:ef:b6:47:d6:
                    d3:c0:59:bd:84:84:cf:60:d0:84:ed:a3:13:bb:07:
                    86:b7:23:61:66:9f:5d:04:c3:72:af:74:ec:9f:2b:
                    fb:34:2c:84:f7:3a:63:40:12:f0:6c:c6:71:72:ab:
                    7c:43:20:20:27:f2:b8:d7:93:4a:9b:08:3b:58:58:
                    27:27:75:82:10:db:7d:25:3d:b5:86:cd:62:e2:10:
                    bf:47:e4:9f:62:e4:e5:18:d0:ba:aa:7b:bd:58:cd:
                    44:fe:ee:e6:af:5b:91:f2:91:d2:47:af:51:75:16:
                    f2:3e:fa:8b:66:6e:3c:1a:4c:4a:06:60:82:4c:10:
                    f2:86:0e:02:2c:33:0d:24:5f:36:74:a0:65:79:8e:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C1:E4:15:67:C3:75:01:34:68:5A:EA:4D:70:64:63:EA:C5:91:D3
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:6800::/37

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:22:dc:e1:16:a2:76:ee:08:13:98:6e:b8:6f:5f:ed:4d:
         a1:a5:6e:bd:a0:90:3a:a5:33:ce:d0:ab:c0:03:9e:ed:8d:d8:
         86:32:34:1d:40:8f:70:10:3d:72:5c:00:90:42:33:bf:5b:77:
         ef:08:25:86:c2:96:3e:1c:65:23:25:2a:d7:ee:9a:74:40:82:
         9a:29:95:a0:e4:8f:73:02:37:bd:69:fe:26:39:16:34:1c:6d:
         01:e0:c5:1f:98:01:1f:e1:aa:88:4f:f6:64:19:7a:f2:1a:07:
         0d:c5:77:0d:db:0e:02:66:13:60:4c:ea:4b:8f:e5:e3:c9:b7:
         a7:f5:a3:c1:cd:3b:f2:29:ad:5d:0d:52:51:29:8d:9b:e9:4d:
         38:94:73:17:1f:ae:41:13:2f:94:82:d9:f8:8e:41:4f:e2:b4:
         bd:50:08:48:bb:8e:41:81:2f:8e:a7:fa:7f:3b:d1:97:98:aa:
         65:e5:16:f7:79:67:7b:af:60:88:59:c4:ca:47:0f:8d:e7:1d:
         2c:0f:3b:fb:25:11:79:a1:74:4f:2f:84:d2:10:13:ff:2b:31:
         d8:a9:5b:ff:44:c9:bd:41:9e:2e:ff:8a:61:5b:ee:f9:a1:a2:
         7f:2b:b8:3c:3b:49:17:c8:b1:71:f4:4c:21:dc:aa:6b:70:cf:
         e8:b0:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org