Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          wUOuxIhNIeB5DP4qy1XhRtrW2wqfZLMawNfPpxQNw1E=
Subject key identifier:   18:2B:D2:EA:61:3F:3E:32:3C:09:58:3A:C4:3B:C6:71:F8:06:D2:B2
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       3EF05BB1A3070092C42B8DE6EF71939747FCE784
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:20 +0000
ROA not before:           Fri 08 Mar 2024 18:41:20 +0000
ROA not after:            Fri 07 Mar 2025 18:46:20 +0000
asID:                     267458
IP address blocks:        2804:41d0:4400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:5b:b1:a3:07:00:92:c4:2b:8d:e6:ef:71:93:97:47:fc:e7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:20 2024 GMT
            Not After : Mar  7 18:46:20 2025 GMT
        Subject: CN=182BD2EA613F3E323C09583AC43BC671F806D2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:13:6a:a2:a2:25:df:54:87:38:5e:02:63:
                    48:68:e7:6e:f6:1f:73:66:87:fc:aa:aa:bb:0b:f4:
                    08:5a:d3:fd:1d:04:6a:85:e0:80:aa:3e:ef:be:16:
                    49:5b:08:9a:59:ca:4e:e2:fb:55:a7:3e:b6:b5:17:
                    4a:22:ea:9e:cb:d0:db:a8:c5:88:16:30:0e:77:c5:
                    f4:78:d5:4b:70:8f:84:b7:d6:1f:c2:c7:fe:54:13:
                    8b:57:17:71:a6:21:6c:b3:aa:05:a3:92:9d:b0:bd:
                    49:c8:14:8a:2e:22:ea:91:fd:56:f2:84:29:8b:06:
                    f4:3f:f4:36:ad:9a:d2:67:9b:d7:45:47:ff:49:5a:
                    6c:a2:fe:e7:b8:c2:ac:ed:ee:2e:86:a2:d9:7b:b1:
                    20:76:c2:a3:07:ea:cf:40:d0:8f:c6:75:da:ba:46:
                    30:f5:c5:fb:0d:14:5f:5c:bc:06:15:9a:f2:8e:03:
                    6c:f1:ef:78:74:44:f1:b0:da:0e:b3:4d:b0:d5:29:
                    0d:ec:f6:ed:4a:0c:73:3a:b0:8b:13:38:1f:b8:5f:
                    1d:36:ae:f8:d5:06:d7:9d:2b:ac:a5:51:c8:75:dc:
                    8f:37:45:dc:20:1b:5f:5d:22:2e:e4:f6:7d:5e:a4:
                    85:cb:58:44:8c:8d:c7:91:5b:cf:b9:e1:13:5e:97:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:D2:EA:61:3F:3E:32:3C:09:58:3A:C4:3B:C6:71:F8:06:D2:B2
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:83:fb:1b:ee:99:38:5b:ae:06:b1:6f:4c:99:5c:10:43:
         9f:16:44:77:7f:8e:e2:3d:ce:ca:bc:f3:a8:6f:2b:db:31:01:
         d9:3e:ed:2e:50:ae:a7:1e:52:f2:20:3e:12:8d:8a:3d:a8:1c:
         14:6a:ce:bf:0c:95:46:b1:96:64:07:09:94:ee:f1:66:b9:92:
         15:62:d9:43:70:bc:e9:a7:97:ec:a1:a3:3e:46:0a:6a:9c:ed:
         24:27:c7:ab:80:9e:75:c9:b6:55:68:34:c7:7a:09:f5:86:ac:
         6a:27:f2:73:30:74:91:e7:5f:c7:cf:0f:81:f1:ba:f9:ee:59:
         ce:47:96:95:69:cb:08:cf:d4:41:c8:d9:3a:3a:45:74:69:5a:
         1b:80:63:86:cd:c5:a8:60:a4:99:8b:06:ba:25:6b:e1:35:1d:
         4a:37:a8:06:68:48:1b:f9:0a:68:ed:e6:4d:49:23:99:4c:5a:
         48:d7:bf:53:77:f3:36:f8:20:23:c4:4a:01:b4:5d:79:11:3c:
         1d:42:9e:72:6a:39:bb:1e:a1:eb:be:48:3b:78:2e:4f:aa:ea:
         16:74:a8:00:32:0d:46:44:47:90:1a:3e:25:c1:38:be:0a:64:
         75:17:90:6d:1b:e3:cb:ca:59:3f:e0:49:0a:40:99:94:a9:c7:
         4b:30:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org