Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          jawVYgkPwl9ieYxyIcpBrmhNQs0Gizz2VwLH/bdvNyY=
Subject key identifier:   C5:44:78:7D:0A:49:63:A6:C6:46:0C:64:CF:DE:F2:55:81:B6:BA:C8
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       19D76A7A52FA90B0335310FACEEB7872AD7EFA34
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:08 +0000
ROA not before:           Fri 08 Mar 2024 18:41:08 +0000
ROA not after:            Fri 07 Mar 2025 18:46:08 +0000
asID:                     267458
IP address blocks:        2804:41d0:3400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d7:6a:7a:52:fa:90:b0:33:53:10:fa:ce:eb:78:72:ad:7e:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:08 2024 GMT
            Not After : Mar  7 18:46:08 2025 GMT
        Subject: CN=C544787D0A4963A6C6460C64CFDEF25581B6BAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:53:59:cf:c9:5f:76:44:d0:2f:20:1a:6d:
                    65:87:72:c5:a3:b3:6c:47:a0:3b:aa:4a:3d:f1:35:
                    82:8f:09:25:15:77:ca:29:6a:96:50:80:ee:ba:8c:
                    93:bc:ff:5c:ed:a1:77:0f:5c:22:4c:81:ac:1a:45:
                    c9:89:f5:58:71:5d:5c:89:b0:cb:12:ff:d0:63:13:
                    1a:13:8b:1e:e8:a1:95:2b:ec:b3:d0:40:db:77:59:
                    8c:3a:05:73:ce:80:23:c8:31:83:3c:e0:83:31:ac:
                    06:44:6e:67:56:4a:0f:ee:d2:72:f7:2e:88:a8:4e:
                    0a:65:4e:42:25:bf:63:46:51:da:3c:8a:43:44:46:
                    f4:88:9b:e3:a0:ea:98:9b:bc:c5:82:c5:00:71:0c:
                    e4:d3:ff:ab:a7:68:ed:6d:74:62:54:44:9c:fb:96:
                    f2:c8:5c:e7:b8:9a:53:d3:85:a1:25:3a:61:bf:e9:
                    77:d1:df:a1:16:b4:eb:46:97:16:f4:7f:cf:7f:b5:
                    f8:f5:62:51:7e:9d:a2:af:e9:6d:b6:eb:3f:a6:53:
                    14:4a:54:d0:9d:85:26:61:49:9e:a5:65:61:63:ab:
                    80:8b:be:f4:09:c4:78:e1:32:22:84:4a:52:05:58:
                    17:65:30:4d:8a:0d:e5:ee:a4:80:0c:e7:2f:5f:a0:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:44:78:7D:0A:49:63:A6:C6:46:0C:64:CF:DE:F2:55:81:B6:BA:C8
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:76:e7:d4:ea:6b:29:56:43:f5:66:fb:64:9a:3e:1c:08:
         e1:e1:2c:8c:2c:e1:99:f7:69:34:d1:c7:d0:1b:5b:1d:05:dc:
         37:df:ca:d6:29:22:e4:84:46:fe:e3:8b:74:96:6c:0e:7e:60:
         00:e3:d6:a7:1c:92:b8:cb:76:83:34:e0:e7:71:8b:de:9d:96:
         ba:64:ab:3a:e4:61:4b:3a:77:a7:f6:bc:9d:19:4c:8d:0d:16:
         3f:ef:0c:97:31:82:89:98:cf:2e:02:52:1d:84:63:17:2a:ea:
         b0:d9:f2:a0:10:3b:23:cb:96:33:d4:a4:65:8d:b0:a3:25:57:
         f5:01:35:33:d3:02:db:54:10:f9:40:93:60:14:66:6f:d8:80:
         00:99:98:e3:53:e5:3e:8b:4d:38:c1:fd:14:ce:c9:8a:14:9a:
         e4:59:d1:15:72:e0:61:92:c8:98:a5:d5:86:6d:0e:04:32:ee:
         89:cf:89:b7:8e:89:a0:9b:0c:64:43:d8:0d:7c:38:b5:18:59:
         a0:7d:e4:15:7c:32:fd:d5:6b:17:36:26:dc:be:22:bf:8a:d8:
         9f:41:25:b6:86:24:8d:c5:be:da:7d:e7:4a:e8:0a:65:5c:fb:
         a2:e8:58:ba:90:37:1e:bb:54:5d:72:04:1e:d9:07:77:59:a1:
         23:61:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org