Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3330303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a3330303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          YfQaByjU8VY8I+wKvaatEEOpH0KjDvMIY6RpoFjzU2U=
Subject key identifier:   66:D1:1D:B9:FD:BA:58:B1:FB:54:94:10:FE:DA:AC:EE:3F:74:2F:A0
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       55496DD7477BF1CEEFD547615743282F8B6A8417
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3330303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:45:45 +0000
ROA not before:           Fri 08 Mar 2024 18:40:45 +0000
ROA not after:            Fri 07 Mar 2025 18:45:45 +0000
asID:                     267458
IP address blocks:        2804:41d0:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:49:6d:d7:47:7b:f1:ce:ef:d5:47:61:57:43:28:2f:8b:6a:84:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:40:45 2024 GMT
            Not After : Mar  7 18:45:45 2025 GMT
        Subject: CN=66D11DB9FDBA58B1FB549410FEDAACEE3F742FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:a1:19:51:45:18:70:e9:a4:a0:30:9d:9c:
                    1a:b9:32:0d:9a:43:af:bc:35:73:4d:d1:41:43:03:
                    8b:4c:f3:a9:3e:c4:c9:90:08:2b:c8:61:18:2c:65:
                    37:43:51:fa:64:80:7b:91:dc:72:7a:18:e8:a7:29:
                    4b:59:1b:11:c1:ad:d2:35:a1:19:b5:93:9a:0c:3a:
                    9c:ab:d1:a9:e9:f7:93:03:7b:49:fe:4a:c4:1b:d5:
                    be:ae:2a:3a:ed:f6:55:b7:54:fd:9a:a8:07:18:ef:
                    db:a0:bb:8b:57:28:f5:27:13:e8:4d:1c:e4:70:5a:
                    a6:6e:00:ec:ad:e5:5b:f8:d2:6a:81:8b:8c:fa:4c:
                    e4:db:27:69:d2:fa:4b:f8:38:3b:0d:0c:67:e6:b3:
                    bf:86:d9:95:57:e6:3e:9b:cd:b2:0f:0d:23:89:6d:
                    96:2e:5f:0b:c3:48:ab:1e:65:fe:94:7c:19:dc:ae:
                    85:b7:1f:31:8f:e2:f1:94:7c:bf:18:c7:11:f8:27:
                    4c:b5:8d:d8:56:ff:99:cf:11:39:22:b5:07:de:4d:
                    f4:b7:f3:0c:26:15:9f:be:f5:c7:04:e2:de:14:db:
                    b4:39:bd:7b:06:12:ae:29:c4:88:9e:24:8b:e3:89:
                    89:93:c0:cb:19:1a:a3:bd:1f:0c:1f:53:00:18:84:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D1:1D:B9:FD:BA:58:B1:FB:54:94:10:FE:DA:AC:EE:3F:74:2F:A0
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3330303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:a2:3e:00:7c:83:a9:ca:ff:91:b3:e2:c1:6f:83:21:77:f6:
         f0:77:aa:7e:a8:ac:12:2b:47:18:54:bf:31:23:66:bc:47:b0:
         00:c5:6d:ee:32:d4:86:98:45:c3:0a:68:d0:7b:2a:c6:4a:3d:
         15:7c:29:81:66:61:d9:61:05:e1:d5:af:1e:29:95:4f:88:b9:
         ca:ec:9f:6b:89:84:9c:ad:28:35:4d:43:d4:67:72:46:08:09:
         76:6a:23:74:38:a1:1a:d8:08:2b:fd:fd:fc:f8:58:c1:52:01:
         8a:15:81:c1:93:82:43:3b:0c:02:14:ae:f3:42:4c:91:4d:4d:
         32:c1:48:e2:ba:37:a1:d5:d6:74:2c:c1:36:9b:ec:e8:ef:d6:
         81:fe:25:51:a3:3c:3a:9a:5e:5e:fb:60:18:ca:30:73:34:35:
         65:79:a1:8f:17:a0:00:e4:40:ac:21:9e:36:f5:bf:5c:0d:9c:
         55:fa:6c:43:4b:04:7a:c3:60:39:78:8b:78:b4:fe:7d:c1:40:
         6d:14:90:b2:55:56:fc:d9:89:9b:a9:3a:ba:e5:4c:b4:22:9a:
         27:4e:40:04:30:3e:f0:07:10:68:73:b2:76:23:70:53:33:56:
         05:4d:f1:d3:e8:02:7a:e4:6f:cf:a8:3d:77:52:e3:e8:0d:f5:
         ab:b4:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org