Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333530303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333530303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          LeL9XdZRUj/rLNnhqj/oQaxpStjlBpW++RJwhYWe7G8=
Subject key identifier:   98:E5:44:D6:95:E2:1D:AE:AF:84:FC:F6:C5:80:58:CE:F1:9B:6D:06
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       626CA2FDD98F62C2E8BD32DCD850E3885093282F
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333530303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:10 +0000
ROA not before:           Fri 08 Mar 2024 18:41:10 +0000
ROA not after:            Fri 07 Mar 2025 18:46:10 +0000
asID:                     267458
IP address blocks:        2804:41d0:3500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6c:a2:fd:d9:8f:62:c2:e8:bd:32:dc:d8:50:e3:88:50:93:28:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:10 2024 GMT
            Not After : Mar  7 18:46:10 2025 GMT
        Subject: CN=98E544D695E21DAEAF84FCF6C58058CEF19B6D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:41:b3:54:cd:c8:9f:b7:b8:f7:57:84:83:
                    ac:3e:20:11:13:ab:75:cb:63:06:80:89:4a:d0:9f:
                    3b:03:d1:4d:d7:8d:cc:bc:19:a6:9d:bd:7f:f8:2d:
                    b7:49:7e:56:82:de:9e:9c:6d:63:c4:6a:eb:40:41:
                    47:34:17:b7:ca:0b:32:cb:55:04:0d:00:a1:48:bf:
                    7a:99:bd:3f:f9:9b:62:e6:d0:12:96:a8:bb:17:17:
                    5c:a5:8c:ae:a3:24:c3:62:47:dd:9b:15:d5:20:69:
                    4c:12:fc:ca:2f:00:37:9a:06:30:cb:11:99:7a:79:
                    8e:55:0c:5e:e8:57:d4:b4:c3:9b:a4:d8:66:29:c8:
                    25:fe:ac:56:87:48:d6:4e:ac:bf:c4:a1:31:83:40:
                    e6:07:5d:7e:54:04:76:4b:93:20:ce:14:53:7f:bf:
                    f3:8b:5f:2f:4f:58:65:a7:85:59:f4:f8:cf:39:27:
                    5b:59:5d:58:65:f7:60:42:f8:94:92:7c:29:7c:22:
                    46:6c:8a:dd:d0:7f:58:cf:42:b6:cb:06:cb:a4:0f:
                    33:2f:55:b0:32:91:62:b1:9d:bf:6b:23:10:05:92:
                    2f:fb:db:3c:93:22:c4:b8:e0:84:d5:12:ab:0c:42:
                    99:c0:3d:ca:13:84:af:17:ea:03:1d:e3:13:94:f9:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:44:D6:95:E2:1D:AE:AF:84:FC:F6:C5:80:58:CE:F1:9B:6D:06
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333530303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:00:fe:7d:96:b5:a0:1d:ea:c4:a0:2e:b2:d6:06:3b:34:
         39:49:b2:c5:ec:b6:fd:6b:12:88:c3:b9:fa:cb:79:82:10:3f:
         96:68:4a:9c:ad:a4:24:2b:1f:b7:23:e9:6a:ae:73:19:f8:b3:
         9c:58:4b:a0:dc:a5:e4:62:89:23:34:31:81:00:19:5f:40:98:
         34:e4:2b:69:97:f2:a6:7e:89:50:3d:9c:ac:e5:e8:4b:b9:1a:
         b4:65:69:f7:c2:ab:87:04:d2:03:bd:10:ce:10:8c:5c:ce:10:
         af:1f:70:a7:95:6a:5e:ec:ed:d8:56:e4:e3:94:4d:0d:05:dd:
         1b:25:2a:e7:f9:b1:07:07:eb:34:2a:85:fd:0b:2c:f5:10:04:
         cd:1d:62:a1:8f:ab:35:70:d7:bc:35:c2:93:33:7d:72:81:d1:
         4e:e7:e6:5a:b4:d1:7d:27:94:02:79:1d:a5:87:b1:0a:f6:00:
         b0:b4:29:ce:3e:01:68:a1:81:55:72:02:40:81:e1:78:cf:8a:
         3d:c0:81:5f:bf:c1:fa:e5:33:b5:84:97:f5:d5:a6:dd:cc:cb:
         9e:50:5a:ae:17:3e:24:02:26:9a:93:8a:a9:a1:38:ec:81:cc:
         23:f7:33:7c:e6:e8:83:53:b1:51:ba:9f:67:dd:03:95:5b:2b:
         98:68:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org