Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3230303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a3230303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          79mG1Qo0M8UjME1nUkI6MWZhIhMujkXzpz12wcif3XM=
Subject key identifier:   2D:9C:FA:F8:56:48:7F:5E:39:DA:B3:81:5B:9C:7B:15:43:F6:C5:F1
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       264A7AD896F905BD9A4CFC2049128BFC5EF7D96F
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3230303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:45:43 +0000
ROA not before:           Fri 08 Mar 2024 18:40:43 +0000
ROA not after:            Fri 07 Mar 2025 18:45:43 +0000
asID:                     267458
IP address blocks:        2804:41d0:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4a:7a:d8:96:f9:05:bd:9a:4c:fc:20:49:12:8b:fc:5e:f7:d9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:40:43 2024 GMT
            Not After : Mar  7 18:45:43 2025 GMT
        Subject: CN=2D9CFAF856487F5E39DAB3815B9C7B1543F6C5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:b3:b5:1b:62:dd:23:6d:08:27:a2:a1:58:
                    b7:e8:f4:fe:8f:48:6e:69:b2:44:9d:ba:33:71:c9:
                    bf:05:01:b2:e5:13:cd:b8:90:16:ba:55:7f:19:a2:
                    bf:22:5e:e0:93:9c:3b:7a:29:e5:17:09:68:d8:24:
                    30:11:61:dd:d3:fd:e6:12:7c:83:b6:ee:ae:8f:86:
                    22:59:c2:c6:df:21:3e:eb:00:98:c4:3b:c3:c5:3d:
                    88:b2:21:cc:58:d1:de:f9:04:cb:3e:37:7c:f9:b4:
                    b4:4b:30:35:08:f5:22:c7:8c:41:1b:73:bb:7c:2a:
                    56:99:cd:c0:b3:4b:8e:68:f6:db:5b:9c:b6:7f:fd:
                    e3:8d:8e:6d:fa:2e:d6:9d:af:b0:c0:d9:85:5d:91:
                    05:62:2c:6f:7e:4b:a5:74:41:a6:d4:21:42:9f:d6:
                    1c:9a:8c:70:e8:40:1c:eb:e4:6f:ce:e2:8c:e1:c0:
                    91:83:a5:8a:3c:b7:77:62:da:8d:6a:b8:55:4b:47:
                    4a:fe:76:87:6f:d8:9b:de:bd:0d:88:2b:c9:66:f2:
                    f9:2e:71:dd:a3:b4:01:c9:cd:78:47:cf:50:3f:d8:
                    76:c3:b9:ae:fe:42:1c:aa:fd:42:76:6a:65:d5:97:
                    9a:92:be:60:ba:53:b4:67:86:e9:5b:a2:6b:85:10:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9C:FA:F8:56:48:7F:5E:39:DA:B3:81:5B:9C:7B:15:43:F6:C5:F1
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3230303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:6d:33:15:ee:c4:00:b2:66:3b:c4:ed:c9:dd:60:b6:f1:
         fe:dc:8f:84:31:40:72:4b:47:1f:ea:a0:7e:c6:08:6b:03:e1:
         13:b8:03:d2:42:79:32:33:46:9f:ca:44:bf:a0:84:13:f8:56:
         2e:c9:9f:b9:df:ef:69:91:47:e8:24:3e:73:8c:10:d8:9c:fb:
         0a:57:ec:27:2f:6e:aa:94:b2:f3:73:b5:20:59:06:12:e4:94:
         af:c1:eb:a7:91:29:03:3b:f1:83:10:5c:ef:68:60:1f:19:1d:
         7c:ed:22:95:46:91:10:40:f4:28:69:ca:98:02:6a:c0:fb:05:
         e9:ad:59:7e:76:72:3c:35:34:79:da:e4:8e:2f:55:9b:3e:25:
         85:5c:e4:66:da:fc:30:17:1e:b5:62:de:96:f4:f0:b3:60:bf:
         3b:83:11:75:be:9d:fd:e9:26:ae:41:fa:b3:00:08:ac:69:58:
         0c:d6:be:99:42:d1:1e:ec:03:0d:b2:fb:84:9b:6f:13:cf:9f:
         4c:65:c8:91:a8:a9:ce:34:0b:74:eb:3d:d1:b3:14:9a:17:92:
         5a:21:0f:c7:a6:18:54:fc:63:73:f6:23:fc:da:ff:5c:3e:1a:
         b0:26:f2:03:98:c9:86:78:83:76:66:b0:5e:65:d8:d3:1e:cd:
         d0:7b:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org