Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          hYKg9jy9gvY53Cba5MOSkzafhBO2ChbtwAXtpFoFemM=
Subject key identifier:   77:C6:97:DA:15:8D:58:FB:59:5B:C1:48:16:E4:EF:4E:D3:E8:80:28
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       2E31A87AB0F5FEDC434CF4C2C4401600986E90EC
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:45:49 +0000
ROA not before:           Fri 08 Mar 2024 18:40:49 +0000
ROA not after:            Fri 07 Mar 2025 18:45:49 +0000
asID:                     267458
IP address blocks:        2804:41d0:1400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:31:a8:7a:b0:f5:fe:dc:43:4c:f4:c2:c4:40:16:00:98:6e:90:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:40:49 2024 GMT
            Not After : Mar  7 18:45:49 2025 GMT
        Subject: CN=77C697DA158D58FB595BC14816E4EF4ED3E88028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:08:9f:3d:6c:d8:15:ba:06:59:80:ab:53:
                    67:df:29:ba:e2:10:4b:7d:82:d4:f4:6a:ac:d6:a7:
                    66:23:fe:e3:bf:cf:6b:bf:1b:a9:e0:2a:0a:a4:68:
                    93:9d:f7:3f:25:9c:58:c4:10:8f:c9:7d:d0:41:8e:
                    c5:81:6c:e8:da:37:3c:8d:f0:d8:33:04:18:a6:40:
                    08:63:fb:fb:98:67:b5:a3:e7:6c:cd:d7:a1:6d:3b:
                    b3:29:66:d4:83:61:14:0c:b3:f5:2a:2e:be:ed:2d:
                    ac:23:1d:97:98:32:37:ff:c0:8b:b5:49:b4:82:b4:
                    38:07:34:f4:77:eb:24:26:41:e4:34:70:9c:cd:92:
                    db:30:31:92:3f:30:5e:8f:ee:45:12:03:10:e9:cc:
                    f1:95:fd:37:66:28:1b:9f:e9:1c:b9:90:cf:2b:d6:
                    d6:3d:e9:bc:b9:14:3e:c0:64:0a:86:53:61:ae:ba:
                    ce:46:16:17:b5:97:34:f3:5e:c7:99:c8:65:39:38:
                    a2:dc:bf:98:3c:7d:5d:f6:a0:4f:22:af:ce:30:3c:
                    77:22:7a:b2:a6:7f:83:ce:48:91:47:7b:62:bb:d4:
                    aa:13:c1:64:d5:36:eb:58:90:4e:9b:ca:8e:36:b2:
                    ac:10:e4:8d:38:ee:97:a8:55:a1:80:57:73:5f:99:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:97:DA:15:8D:58:FB:59:5B:C1:48:16:E4:EF:4E:D3:E8:80:28
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:58:ba:f9:9b:8e:5b:36:4b:8a:ac:9c:12:51:79:bf:ef:da:
         48:fd:56:3d:02:9c:d4:56:d9:7d:3f:4c:79:dc:eb:73:7c:2d:
         e9:2d:f3:38:74:6f:3e:88:57:b0:99:7e:8e:d0:cc:ac:8d:05:
         48:42:5e:28:bc:d4:af:f6:78:99:44:fb:7f:81:63:a4:5a:bc:
         29:54:9b:cf:1d:df:b4:96:b6:27:88:1a:0e:7e:e3:c9:75:51:
         1b:a8:5d:96:88:8c:80:e7:40:d9:cd:55:7c:83:a9:d2:1a:82:
         9b:70:c9:ad:8c:45:5c:26:d4:0b:f0:42:ec:57:7f:05:99:9b:
         e6:b6:e2:f5:b4:e8:d4:1f:7e:09:6c:ba:ae:56:bb:0a:36:3c:
         6d:7f:65:ba:3a:38:9b:f6:4f:c4:97:8b:df:36:4d:95:66:27:
         dc:54:62:4b:d5:0e:f8:12:c0:11:4b:1f:71:e2:cd:16:4d:83:
         ce:1c:62:66:5d:06:02:fc:7b:59:7a:4b:48:10:c9:8c:fa:8c:
         a1:e7:eb:41:8b:9e:41:fb:cc:53:78:e8:7f:30:7f:cf:e9:e9:
         1c:f0:d9:9d:63:77:a0:59:12:ec:21:30:86:04:ac:6a:7b:c8:
         73:2a:c9:a5:25:17:7e:1f:02:39:5b:c1:a5:a6:a6:2b:37:f4:
         10:f8:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org