Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333230303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333230303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          v2lCG4tlU8NJsZ/U7RAba7yIbMDmWSlO1ojkiAvIUEQ=
Subject key identifier:   4E:91:52:B5:BA:37:6D:E6:87:72:07:48:4B:C0:D9:98:0E:27:37:7F
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       296569C6D739E8F8D382BEA4A1837096C1FCED94
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333230303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:04 +0000
ROA not before:           Fri 08 Mar 2024 18:41:04 +0000
ROA not after:            Fri 07 Mar 2025 18:46:04 +0000
asID:                     267458
IP address blocks:        2804:41d0:3200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:65:69:c6:d7:39:e8:f8:d3:82:be:a4:a1:83:70:96:c1:fc:ed:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:04 2024 GMT
            Not After : Mar  7 18:46:04 2025 GMT
        Subject: CN=4E9152B5BA376DE6877207484BC0D9980E27377F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:ed:d0:12:2f:a4:f1:da:5d:ac:b9:c0:52:
                    26:97:77:57:bf:93:9e:70:ae:e8:3e:76:25:17:0d:
                    f8:f2:71:95:6b:92:90:93:7b:15:52:bc:9f:82:44:
                    87:a3:e0:5c:b0:02:8b:9e:a1:99:48:a9:59:f1:ff:
                    fc:fb:28:08:fe:fd:03:d7:8c:e7:b4:65:04:eb:ca:
                    5e:80:5b:7c:c3:8f:14:80:22:30:37:f9:27:4a:94:
                    ef:d7:73:06:a1:06:d6:02:73:4e:49:52:7b:63:8f:
                    89:e7:41:13:33:35:bb:fb:ab:90:fb:7e:7f:81:3e:
                    4f:d3:ad:8e:39:07:16:03:13:cb:07:f7:a6:0d:06:
                    32:99:70:98:26:e4:0e:1e:b7:e3:7c:82:c7:c8:bb:
                    51:f9:e6:76:f8:d0:8a:7b:9c:ca:30:2b:6a:48:cb:
                    1b:10:9e:7a:f4:ec:a8:bd:cb:44:57:98:12:7d:de:
                    af:00:fd:1d:24:17:6e:81:78:bd:c4:45:54:6c:b9:
                    8f:24:38:97:ec:d8:db:2e:76:37:9a:95:e2:7e:a6:
                    a6:6a:ca:d7:0d:fc:12:d4:a1:8e:6c:ab:12:95:74:
                    ba:da:71:c1:f5:f0:b0:9b:96:b5:24:a3:1a:27:16:
                    88:85:c5:a9:26:2e:28:0d:7d:28:c9:7c:30:02:a0:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:91:52:B5:BA:37:6D:E6:87:72:07:48:4B:C0:D9:98:0E:27:37:7F
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333230303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:7c:26:5a:1f:54:31:41:85:ad:76:9b:7e:94:7f:6e:d6:
         b5:13:82:e1:c6:18:0f:81:71:3c:dd:7a:c2:48:da:52:07:28:
         d4:09:66:fd:8d:35:d7:cb:1f:0a:7a:16:30:f3:70:95:5b:a2:
         c6:52:92:1e:76:c9:a9:f2:63:fa:50:a6:d5:6c:12:64:78:a0:
         f5:67:c8:7a:39:cf:9a:89:c0:66:b9:f2:22:f1:5c:32:73:d5:
         ba:fd:fc:e3:9f:6e:96:c4:21:cf:3e:17:2d:97:f1:dc:3a:2d:
         c6:74:68:17:7c:e5:c6:20:f0:0f:1c:b9:9a:70:10:c8:42:d5:
         4b:8c:5b:4a:99:5e:db:29:01:2f:4c:4c:9e:2c:44:c3:52:2e:
         79:d7:df:d5:7b:a7:23:eb:c9:38:ea:bd:11:e7:7f:86:eb:b6:
         19:38:28:d9:6e:01:f2:bb:76:95:9d:69:72:dc:ef:d9:a8:a0:
         d6:23:f4:ed:b6:0e:bd:dc:90:54:51:bf:97:58:d3:57:0f:7f:
         63:4c:30:50:94:4c:67:c6:8e:83:02:59:b8:7f:a3:31:af:26:
         86:cf:42:90:20:03:e6:2e:f3:fa:e9:5d:6d:ea:7f:17:d2:6a:
         30:cb:c9:22:29:1a:06:08:cc:46:59:b1:7e:54:f5:e5:5f:9b:
         a6:bc:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org