Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          /V+0pLzU+TaWQmQHFTjRNZLDRv/lsOPdVbUjC6LfzFc=
Subject key identifier:   4C:EA:08:65:EC:FA:52:12:E9:E8:EF:12:F1:F5:4C:FF:AD:99:4F:8D
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       626005DCBC61534B71C572E67A81F1565DA2E9E6
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:14 +0000
ROA not before:           Fri 08 Mar 2024 18:41:14 +0000
ROA not after:            Fri 07 Mar 2025 18:46:14 +0000
asID:                     267458
IP address blocks:        2804:41d0:3700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:60:05:dc:bc:61:53:4b:71:c5:72:e6:7a:81:f1:56:5d:a2:e9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:14 2024 GMT
            Not After : Mar  7 18:46:14 2025 GMT
        Subject: CN=4CEA0865ECFA5212E9E8EF12F1F54CFFAD994F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:b0:2c:bb:a6:7f:83:44:ef:36:e3:d9:33:
                    a8:23:fe:b1:64:7e:ae:bf:fb:e1:5d:d1:7e:42:49:
                    77:c7:a7:82:6b:b9:37:8c:80:f8:a1:eb:43:78:55:
                    f1:31:06:51:8e:3a:4c:67:11:74:ab:a1:fb:d8:f5:
                    07:27:5d:e1:4d:69:c1:df:82:22:7d:d8:d1:a0:e5:
                    c8:d5:e1:a8:2b:39:08:b5:5b:49:33:5a:1c:66:fa:
                    b1:27:09:71:f4:ec:a4:9d:30:89:c7:2b:63:92:f9:
                    93:32:84:53:14:73:fa:6d:a2:fa:da:fb:c9:9d:a3:
                    ab:8f:81:1c:a8:de:1a:88:e5:0c:55:fa:e2:5b:a8:
                    84:fc:cc:1e:ba:b7:8e:68:5d:67:5f:69:fd:03:c6:
                    b4:ff:cf:52:fc:68:0d:b6:1a:be:78:b0:32:30:3d:
                    ef:d8:cd:8e:27:6b:48:d7:90:43:cd:f4:84:9a:d6:
                    04:71:da:ec:1f:f4:bc:10:87:58:bc:ad:b8:39:46:
                    20:7e:40:cd:9d:01:0a:fa:39:24:ed:4e:fc:8c:e4:
                    44:77:f9:4a:e6:95:a6:a2:cf:12:55:61:ea:f5:8d:
                    0b:75:a5:b5:6f:c8:c6:30:d1:36:47:f9:e1:9d:c4:
                    e1:ec:0e:63:d0:e0:78:19:14:d1:48:d8:07:33:32:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:08:65:EC:FA:52:12:E9:E8:EF:12:F1:F5:4C:FF:AD:99:4F:8D
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:3b:bd:ec:a6:04:7e:e9:65:48:72:5f:4f:36:b7:88:1e:
         2f:80:6d:d6:ef:e1:5a:65:38:6e:20:99:56:38:f9:f9:d1:1b:
         76:ba:c0:d0:29:91:c0:07:d7:85:80:a6:40:e6:09:ef:c1:e1:
         c4:b1:a3:5e:29:61:01:ee:42:7a:47:a9:f0:de:5f:f4:78:e3:
         e7:09:a3:12:dc:1c:8c:5a:db:a5:7d:c5:d3:94:c6:b0:2d:d1:
         0e:95:5b:df:27:93:f9:8f:d6:fe:57:31:ed:64:52:6b:08:9e:
         16:b1:bd:ac:8a:ce:7a:03:a8:ad:7b:7f:c7:fb:35:c6:6f:49:
         b2:a4:fc:31:07:72:f4:3f:fc:c8:fc:aa:d6:ac:28:75:0b:b8:
         71:60:ec:74:62:29:16:1a:c8:40:6d:d0:91:27:00:b3:21:15:
         90:be:5c:48:c2:d0:d7:57:b5:19:94:52:ed:6d:70:af:dd:28:
         7e:01:97:b9:29:1b:32:b4:ab:ef:f2:8c:6a:99:6e:d3:5b:0a:
         5f:11:88:da:04:a2:12:e1:4d:74:a0:53:54:dd:6c:29:d6:32:
         2e:4c:0a:00:f7:44:a1:40:20:a8:21:e5:f2:86:9c:84:ac:7f:
         11:07:f2:e6:0c:a9:ca:1c:2f:d5:7a:de:d2:1f:be:a5:96:1d:
         4c:75:0e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org