Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
File:                     323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (raw, json)
Hash identifier:          uBFj+gf6UPCRACO5r00qH8vElnzPG9ncJpuEmyg2uXE=
Subject key identifier:   8B:8C:80:33:65:92:BB:D2:EA:5B:07:38:23:48:EE:C7:C3:A0:32:7C
Certificate issuer:       /CN=F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D
Certificate serial:       797D63A83ACFF9569DB76DC271D3131C904072B2
Authority key identifier: F6:0E:FF:1A:68:A3:BB:6D:52:BB:18:F6:92:09:EF:5E:90:D2:46:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
Signing time:             Thu 04 Apr 2024 18:28:28 +0000
ROA not before:           Thu 04 Apr 2024 18:23:28 +0000
ROA not after:            Thu 03 Apr 2025 18:28:28 +0000
asID:                     264967
IP address blocks:        2804:30a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7d:63:a8:3a:cf:f9:56:9d:b7:6d:c2:71:d3:13:1c:90:40:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D
        Validity
            Not Before: Apr  4 18:23:28 2024 GMT
            Not After : Apr  3 18:28:28 2025 GMT
        Subject: CN=8B8C80336592BBD2EA5B07382348EEC7C3A0327C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:46:0c:ee:76:ba:bb:bc:19:e0:ad:61:20:
                    79:b4:f2:f8:f9:60:1f:33:bb:16:cc:21:ca:f0:67:
                    4d:3e:af:5d:71:22:f4:80:da:67:29:d1:ad:09:63:
                    64:fa:6b:14:18:86:11:83:1f:4a:17:f2:fc:32:70:
                    dd:df:88:df:9e:3a:25:74:0e:6f:ba:4e:76:cb:82:
                    f4:b4:cd:7e:05:71:54:80:0a:7f:6f:49:47:ec:c9:
                    a9:ff:2c:50:6f:95:5f:03:16:b4:92:11:03:21:3f:
                    b1:db:a1:47:53:c3:81:3e:29:ef:73:e7:2f:2d:ee:
                    e3:12:db:87:45:fb:d4:d9:64:75:5f:1d:91:74:ba:
                    e9:8c:8b:69:ae:0e:41:2e:29:24:87:bc:40:90:35:
                    8f:1b:3c:39:58:38:f0:29:13:d6:49:96:b2:67:30:
                    d8:8e:f8:0f:e7:90:ca:92:96:1a:53:20:3a:26:c5:
                    93:6a:b0:1d:5a:2c:83:19:7e:b8:e0:8c:89:38:b0:
                    5d:87:41:1e:0d:5b:ea:b9:63:48:cc:b0:32:e8:a9:
                    da:ca:75:f0:a9:39:21:bd:a3:df:c5:56:d4:97:23:
                    8a:65:a7:c6:a4:67:5a:43:96:f0:7f:a7:c3:17:00:
                    90:af:92:bf:bb:9f:de:5b:57:ef:1b:ba:b7:67:d0:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:80:33:65:92:BB:D2:EA:5B:07:38:23:48:EE:C7:C3:A0:32:7C
            X509v3 Authority Key Identifier:
                keyid:F6:0E:FF:1A:68:A3:BB:6D:52:BB:18:F6:92:09:EF:5E:90:D2:46:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:69:62:8d:4f:f8:f0:25:51:e8:6e:56:f2:f5:da:25:49:
         f6:ae:1f:5b:d8:e3:63:ef:c6:d4:02:a7:f1:a4:53:48:ad:6f:
         d7:c8:66:25:5e:b7:83:13:bd:c6:ec:8f:f6:72:94:d6:64:18:
         67:64:83:73:a2:42:a7:99:e4:26:61:31:05:3c:d4:d6:d6:c6:
         a4:b4:f4:d1:62:bd:8c:81:58:e5:e4:8f:05:f9:53:82:fe:23:
         84:fd:c6:fb:41:7e:75:38:2e:b8:3d:26:6d:25:83:cd:30:e9:
         69:e5:2a:2f:4c:53:58:ca:01:28:4c:c5:c7:4f:ca:b3:b1:bb:
         08:e0:9a:76:05:38:41:2c:cc:93:78:32:33:93:61:4a:e8:54:
         32:07:e1:95:68:09:68:b3:d3:c2:f0:09:b2:10:af:bf:80:8f:
         c9:8e:d3:3f:0e:9b:fb:78:a7:79:21:8e:18:9b:37:cf:de:d8:
         13:d9:98:f6:56:a1:ba:03:6a:a2:bd:2f:8e:1a:78:2f:bc:26:
         82:97:ca:76:37:c2:e9:8c:08:17:fb:08:d0:09:5e:0b:82:50:
         28:d2:e4:f5:b0:5a:36:cf:3f:38:03:41:22:e4:e5:d5:35:97:
         3b:50:fc:b1:2b:ac:db:ab:fe:1d:c9:8f:18:d6:fa:be:7e:53:
         74:77:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 23:17:47 2024 by rpki-client on console-ams.rpki-client.org