Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          g1qaboWFDeBiYHZQCqcJGdM+A9gbLfaKTzRw6c7GP44=
Subject key identifier:   FB:05:FF:57:37:8E:1B:02:3C:B1:F3:9F:75:BB:46:17:FA:1B:3B:04
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       25091EA05006C795720664E428BCE9B4ECB98914
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:45:52 +0000
ROA not before:           Fri 08 Mar 2024 18:40:52 +0000
ROA not after:            Fri 07 Mar 2025 18:45:52 +0000
asID:                     267458
IP address blocks:        2804:41d0:1500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:09:1e:a0:50:06:c7:95:72:06:64:e4:28:bc:e9:b4:ec:b9:89:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:40:52 2024 GMT
            Not After : Mar  7 18:45:52 2025 GMT
        Subject: CN=FB05FF57378E1B023CB1F39F75BB4617FA1B3B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:8a:46:5f:55:b5:9b:80:53:e2:83:eb:4f:
                    79:de:c8:3c:90:b0:a9:eb:66:af:d3:f8:24:8f:04:
                    ce:52:0d:22:ce:27:53:c6:9b:69:91:86:e6:94:d2:
                    86:e8:87:88:32:fc:67:48:08:3e:04:07:66:5b:10:
                    92:ee:e4:23:e8:e5:3c:0b:8a:bf:b6:db:7e:30:79:
                    e5:05:92:7e:97:06:fd:a5:0e:91:5d:21:44:a5:28:
                    06:6f:b8:f0:3c:f9:5f:ef:a5:44:41:b0:9b:fa:ce:
                    46:3c:b4:fc:ef:a5:01:7c:b0:fa:cf:47:73:84:4e:
                    75:6f:1d:2e:c7:9b:43:3b:60:e1:24:0c:7d:81:bb:
                    6f:c0:25:5a:61:0a:f8:86:be:a2:b7:c3:2e:5c:d2:
                    30:58:57:a7:d1:02:1a:2c:d9:8b:96:f9:cc:0f:d3:
                    d2:8a:88:6c:69:30:a1:3e:d2:b7:28:92:05:64:d6:
                    21:1a:13:f8:0d:86:55:57:5d:f3:33:aa:8c:ca:76:
                    4a:48:d8:b1:3a:0b:62:b7:8c:ef:6e:f4:1d:73:06:
                    4b:95:82:a7:58:54:76:ad:4a:9d:80:ed:a2:8e:4b:
                    57:60:1b:a7:ed:8c:6f:4f:29:e8:76:48:df:7e:68:
                    f4:2b:bd:e8:65:34:bf:ca:56:ed:d4:db:df:38:33:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:FF:57:37:8E:1B:02:3C:B1:F3:9F:75:BB:46:17:FA:1B:3B:04
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:03:bc:2d:98:5c:fa:fd:ef:fa:14:4b:3c:fb:f4:98:93:
         b7:0a:2a:02:94:58:16:04:6e:b4:15:dd:ef:10:8d:54:90:37:
         d2:22:5b:13:c1:95:f2:bb:79:37:09:0c:89:e1:cb:ed:8c:a0:
         93:65:c3:b2:00:b7:e9:73:25:31:90:83:c9:67:f6:26:a6:b2:
         27:9d:6d:5d:0f:3e:50:ba:04:f7:c1:b1:7d:d9:25:1c:75:11:
         ca:d4:cd:ce:7c:53:9b:f2:06:73:78:70:e8:56:7a:ec:2c:6c:
         fd:80:25:68:b3:95:f6:9d:68:e3:c3:a2:3f:27:f8:73:15:ff:
         c8:e6:a0:c3:fa:ca:1e:03:11:5f:f9:1c:3e:82:69:d3:0d:3a:
         aa:c3:86:04:3a:5c:69:9e:13:d4:7c:b3:a8:d8:c0:1d:ff:cb:
         f6:eb:1a:a1:74:90:32:2b:b9:c3:fb:0a:d5:01:6b:be:91:62:
         c6:ba:3a:90:87:c8:08:9a:af:ff:78:bd:1f:91:72:45:48:63:
         26:d7:b5:83:b5:09:df:b8:20:e1:66:dc:ba:e5:ea:5e:02:62:
         be:0e:5c:0e:c4:20:02:ee:4d:c0:43:a7:ba:61:30:66:89:78:
         ad:77:ae:a9:ba:b1:18:c8:31:5e:53:a2:7d:99:26:c0:72:36:
         27:3d:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org