Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333030303a3a2f33392d3339203d3e20323637343538.roa
File:                     323830343a343164303a333030303a3a2f33392d3339203d3e20323637343538.roa (raw, json)
Hash identifier:          VtHpOMXA5HO3j09YBKSpnJJQS7y+BWN7tw0OP5X12vc=
Subject key identifier:   44:B4:FF:BF:AE:D2:86:A9:82:CC:A4:6E:D8:61:0C:F0:C1:85:30:04
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       40558D082EAF4386C8D2E8FCC44FB07FB4D51EFB
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333030303a3a2f33392d3339203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:00 +0000
ROA not before:           Fri 08 Mar 2024 18:41:00 +0000
ROA not after:            Fri 07 Mar 2025 18:46:00 +0000
asID:                     267458
IP address blocks:        2804:41d0:3000::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:55:8d:08:2e:af:43:86:c8:d2:e8:fc:c4:4f:b0:7f:b4:d5:1e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:00 2024 GMT
            Not After : Mar  7 18:46:00 2025 GMT
        Subject: CN=44B4FFBFAED286A982CCA46ED8610CF0C1853004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:a2:12:ab:b4:9f:f7:11:c1:4a:19:3e:37:
                    d5:2c:61:5d:cc:36:09:41:1a:33:98:19:2a:68:7b:
                    83:de:69:85:c3:a4:7d:5c:ae:98:cb:54:01:e9:27:
                    07:2a:32:75:1c:2d:6e:62:7b:28:99:85:e4:6a:af:
                    ea:26:82:62:e4:48:f1:c8:f0:19:e5:65:ed:03:be:
                    8d:aa:eb:93:46:ac:0e:df:d0:98:e4:21:5e:a9:1c:
                    cf:5f:62:d4:03:e0:fc:57:e3:de:ba:44:17:06:f8:
                    ec:b1:23:c4:fd:0d:22:7d:ee:29:39:a7:a3:dd:b1:
                    88:1f:2f:7a:86:6f:9f:9d:c0:7a:cd:25:35:df:3b:
                    3b:69:54:26:b4:e1:06:7e:f3:90:58:21:47:16:cd:
                    bb:d6:e9:e4:37:01:f1:39:07:cc:7e:45:98:ab:44:
                    f5:76:65:69:d7:be:45:3a:42:00:98:3f:96:3d:1f:
                    b6:5c:05:00:9c:fa:b1:f1:06:75:a2:06:54:a5:98:
                    06:88:88:58:82:27:e0:2a:77:db:57:9d:0b:5f:79:
                    e5:0f:b7:e1:f1:45:4d:7f:e6:aa:89:5f:03:f2:3c:
                    73:3e:f0:41:d1:4e:cd:89:b6:7d:32:3c:fe:b9:d5:
                    3d:19:e4:ad:54:d9:c1:8c:ad:3c:49:2c:16:6b:0c:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:FF:BF:AE:D2:86:A9:82:CC:A4:6E:D8:61:0C:F0:C1:85:30:04
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333030303a3a2f33392d3339203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:0b:0b:b8:1d:78:79:95:48:40:bd:4c:d0:f0:be:e5:d3:
         b4:48:99:5f:25:05:db:d0:f0:e8:f3:60:82:df:a2:0c:3d:96:
         d8:6b:28:73:a4:d5:ad:f3:f1:78:0a:97:4c:99:b1:41:ee:48:
         84:75:a0:0b:3f:2f:62:7a:96:c6:94:1e:8d:83:62:04:ee:c4:
         97:f8:ad:83:7d:90:67:df:20:d6:0f:d0:42:bf:d1:ae:9b:58:
         cc:87:d4:6d:24:d5:46:29:9c:c8:bc:0b:42:05:cc:d8:b9:ef:
         9b:ec:1a:b8:45:62:11:2d:ea:68:6f:74:5b:b9:1a:29:aa:39:
         86:e9:99:95:1f:c3:cd:80:b7:ff:50:ab:7d:a3:b2:ca:f8:e0:
         52:6b:14:42:a5:5a:33:ab:be:0d:da:66:61:dd:9f:fb:79:eb:
         f3:b9:69:ed:b0:c8:6a:58:ed:7f:c1:4c:31:e3:5a:7c:ad:00:
         fb:84:68:4c:a7:92:18:1a:39:96:e7:11:f6:fe:35:60:7c:f2:
         d6:1c:fb:b0:48:62:35:0c:c6:75:15:3a:86:0b:4b:20:00:f5:
         c2:d8:ee:98:1c:14:3c:c5:54:ab:d2:d1:2f:7e:27:f1:ac:49:
         41:1b:d8:17:d2:cb:3c:30:0b:ac:5d:7a:a1:1c:a0:6c:b1:ec:
         e5:0f:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org