Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333630303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333630303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          svz1S8mZ7/gMW+FO/+afUm1cPHW6F8/BFRssd9C2EZY=
Subject key identifier:   F9:3F:D6:D3:9D:2B:B0:4C:39:AB:0A:C7:25:21:0C:E9:B6:0C:41:06
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       63C5B5E0E4F19D92E15CF3AA8EC3E225DDC7C574
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333630303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:12 +0000
ROA not before:           Fri 08 Mar 2024 18:41:12 +0000
ROA not after:            Fri 07 Mar 2025 18:46:12 +0000
asID:                     267458
IP address blocks:        2804:41d0:3600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c5:b5:e0:e4:f1:9d:92:e1:5c:f3:aa:8e:c3:e2:25:dd:c7:c5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:12 2024 GMT
            Not After : Mar  7 18:46:12 2025 GMT
        Subject: CN=F93FD6D39D2BB04C39AB0AC725210CE9B60C4106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:29:67:ee:91:7f:69:85:e2:69:5c:c8:bb:
                    47:17:2f:67:d4:40:56:13:ae:f5:2f:c6:0c:4a:4e:
                    25:f2:fc:5d:8b:d0:b5:1c:3d:d6:20:d9:d2:b0:6e:
                    1a:50:4e:02:26:76:af:78:6e:1f:fb:6d:a2:3c:c5:
                    cd:d6:a0:e1:ff:d3:df:92:d4:0e:a5:a2:af:e0:be:
                    79:18:c3:b7:6c:1a:30:7d:59:eb:81:a7:79:1d:6e:
                    75:a4:07:46:71:fa:aa:97:28:07:4b:ef:24:04:f0:
                    ef:8e:bf:f2:5b:db:4a:8b:56:87:d7:3c:6d:1c:41:
                    75:5a:12:53:61:bf:71:8a:4b:51:45:39:31:36:b7:
                    6f:f5:32:77:8c:81:b2:7c:db:a1:7e:20:40:78:ac:
                    b2:2c:04:da:f6:2a:e3:0e:30:e3:0a:6c:55:3c:50:
                    00:fb:ea:2c:80:95:f7:33:4b:6e:c6:d9:6f:bb:ed:
                    0b:8d:73:6e:a4:45:b6:a2:4b:29:e3:f0:1b:b7:0b:
                    f6:f1:13:c2:d2:07:09:87:13:99:cd:4e:d4:3b:ce:
                    b5:06:84:dd:1f:c3:84:76:3e:01:9e:a9:5f:80:ad:
                    4c:42:ee:0e:26:e0:c9:e5:31:fd:c7:25:42:ce:1b:
                    42:0d:12:23:3b:46:6e:b2:45:c6:74:a3:b4:f7:9d:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3F:D6:D3:9D:2B:B0:4C:39:AB:0A:C7:25:21:0C:E9:B6:0C:41:06
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333630303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:78:00:00:7b:41:1d:02:2b:8b:0f:2a:0c:6b:71:ae:c3:83:
         c5:72:3d:c6:1a:4e:04:1c:a9:99:7b:2c:19:9e:bc:de:15:ad:
         b6:a7:c6:19:dc:44:c7:a4:de:56:e2:06:ac:06:6b:30:0d:81:
         9a:52:1e:97:d4:c9:72:d8:0b:48:52:83:d2:97:d7:a4:cd:51:
         cf:a2:7d:3e:05:9f:ca:02:06:4c:af:57:9a:8c:4d:6a:43:f5:
         f6:69:08:53:dc:cb:1c:00:07:98:d7:9f:4f:72:99:3e:f1:9f:
         3f:17:c5:6d:0e:4a:70:a0:07:9f:ff:79:38:63:ac:fe:e8:0c:
         86:08:b9:44:4c:57:23:1a:46:00:26:38:ca:8e:7e:e5:ee:4f:
         9b:bc:ff:30:64:a7:fa:e8:38:dd:28:ec:94:81:88:34:97:98:
         61:24:58:f4:3d:37:72:2d:5b:ea:94:14:46:a0:db:4e:dc:71:
         43:cf:9e:5c:f9:54:bd:d0:9e:6d:23:7b:73:69:80:f8:a4:5f:
         c2:af:5e:72:58:8e:ec:24:99:1a:8f:ae:ad:5f:73:21:ee:0c:
         35:9a:ce:2d:4b:06:6a:a4:9a:0b:32:b5:16:67:0b:2d:bc:03:
         3e:70:fe:bc:3a:d8:c8:bf:1d:22:4d:ac:c3:88:a1:59:9d:3a:
         ab:cd:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org