Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a373130303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a373130303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          NqkUtjf5DCPu1r8RBhKctusXH3uqFNJpUnJ3Lq0VZaQ=
Subject key identifier:   C8:4C:89:8F:EF:C8:A7:07:79:B8:E3:98:DB:15:29:0D:D5:85:F9:72
Certificate issuer:       /CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
Certificate serial:       0F803F1A4D253F859493E09E83F116AB65F80770
Authority key identifier: 6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a373130303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Thu 04 Apr 2024 18:05:30 +0000
ROA not before:           Thu 04 Apr 2024 18:00:30 +0000
ROA not after:            Thu 03 Apr 2025 18:05:30 +0000
asID:                     270764
IP address blocks:        2804:7110:7100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:80:3f:1a:4d:25:3f:85:94:93:e0:9e:83:f1:16:ab:65:f8:07:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
        Validity
            Not Before: Apr  4 18:00:30 2024 GMT
            Not After : Apr  3 18:05:30 2025 GMT
        Subject: CN=C84C898FEFC8A70779B8E398DB15290DD585F972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:b9:ce:64:52:fe:51:87:5f:76:c7:94:a5:
                    fc:af:9e:2e:63:85:d0:43:50:64:b7:bf:d8:62:ae:
                    31:90:dc:23:44:af:2f:ae:79:80:7f:ae:e7:89:ed:
                    9c:2c:0e:79:a2:63:3f:a3:5c:94:5a:90:71:d8:03:
                    6f:d1:9c:3d:1d:82:56:49:29:2a:99:f6:ad:55:ff:
                    09:69:8c:ae:30:6c:35:ec:a8:ac:6f:3e:8a:e9:db:
                    dc:a8:39:36:dc:fa:49:a8:89:2e:e6:1c:59:1c:d2:
                    25:6d:4d:b7:b4:e7:04:0b:48:4b:7e:2f:89:b8:2c:
                    28:d4:00:32:ab:22:92:d6:b3:d7:39:07:3f:64:61:
                    9d:32:21:de:f1:d2:5b:33:e3:a3:33:40:e4:eb:3b:
                    27:0b:fe:55:f0:f2:9e:8f:20:3c:46:c1:5d:9d:fd:
                    ae:ed:5c:dd:95:92:31:3c:54:2a:45:41:c5:34:d0:
                    cc:b6:7f:07:73:5a:94:86:31:4d:3e:b0:ce:77:27:
                    fc:a5:7b:17:6c:0d:ad:94:53:bb:fa:fd:89:e7:27:
                    49:64:ef:d6:0d:18:91:db:ea:25:19:4c:39:13:f9:
                    f3:82:04:ac:77:88:e5:ef:1b:3f:15:e3:d0:49:6c:
                    ff:cc:c2:72:29:37:6e:2c:88:01:af:02:1b:af:c4:
                    17:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4C:89:8F:EF:C8:A7:07:79:B8:E3:98:DB:15:29:0D:D5:85:F9:72
            X509v3 Authority Key Identifier:
                keyid:6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a373130303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:7100::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ac:de:d8:31:95:f8:65:20:32:a4:f8:90:48:84:ea:66:db:
         f9:9d:90:78:de:12:79:ca:55:05:43:5e:53:f0:8b:e6:af:a3:
         65:be:e8:eb:02:14:46:cf:04:42:27:e6:d5:28:f2:9d:f5:31:
         85:02:93:36:33:cb:47:44:49:49:bd:a1:14:9b:ff:25:7e:b6:
         89:ff:4d:1c:59:34:c6:67:06:8f:ff:43:13:6a:cc:7f:1c:e3:
         48:7d:b8:15:17:3e:ba:91:7c:bb:e8:65:5a:fc:ff:a8:e2:00:
         46:70:e7:c3:ad:ff:3c:88:29:c0:b5:39:86:02:08:3a:ff:0d:
         73:3b:bf:d0:46:48:54:58:f3:cf:64:a7:13:7a:25:d1:8a:33:
         36:cb:4a:ba:7c:1c:c2:98:80:f4:96:2b:37:68:95:44:66:2b:
         06:e5:bf:bb:3f:ce:53:0e:59:7c:cc:ee:cc:1c:fb:41:4d:28:
         e6:18:cb:4b:4c:ff:64:7c:84:f4:a3:61:d9:b0:16:40:4b:60:
         25:b7:77:f2:e4:c4:19:72:9f:fe:39:c5:94:3c:43:dc:38:9a:
         d1:a1:10:70:5d:a2:48:2b:ed:95:b0:9c:32:e7:de:3c:60:d8:
         8a:59:d3:56:4b:e3:8e:d7:8e:dd:97:28:e2:e8:e7:ca:5a:fe:
         f6:3c:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org