Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3335203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3335203d3e20323637343538.roa (raw, json)
Hash identifier:          scaupLq1rcswZ9wOpvaJe5bGXfUEQxgwacEKT9GNsRA=
Subject key identifier:   DC:40:86:51:6D:4A:94:CD:6A:CC:9D:36:C4:42:88:19:95:39:B8:A3
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       683FA8C992AD486D37DEC235453EABCE43CCE660
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3335203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:27:03 +0000
ROA not before:           Fri 08 Mar 2024 18:22:03 +0000
ROA not after:            Fri 07 Mar 2025 18:27:03 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3f:a8:c9:92:ad:48:6d:37:de:c2:35:45:3e:ab:ce:43:cc:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:22:03 2024 GMT
            Not After : Mar  7 18:27:03 2025 GMT
        Subject: CN=DC4086516D4A94CD6ACC9D36C44288199539B8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:c3:67:a8:06:d8:55:1d:84:81:0f:24:e2:
                    a9:83:e4:bb:10:a8:1b:42:9b:48:cd:ce:40:be:d1:
                    12:36:c9:9f:d2:51:d1:62:86:d1:80:76:f5:b6:89:
                    76:00:7d:91:c9:79:d6:a8:42:64:7b:32:56:e1:99:
                    ab:db:b1:e7:f4:7c:d6:ed:4f:a0:1f:fb:01:88:52:
                    da:b9:c0:62:86:7b:15:6c:9d:8e:67:85:b6:7a:73:
                    1c:af:1b:b8:7e:4a:94:be:df:82:49:20:52:2c:26:
                    9d:c4:3e:42:48:b7:aa:7e:98:c3:92:87:c4:32:97:
                    5c:2d:ee:90:d3:11:9e:98:4e:e9:a5:0e:27:ff:ae:
                    89:bb:55:ed:68:65:ae:f2:64:0e:fa:ea:fb:50:d0:
                    b1:16:9a:13:09:d4:cf:1b:a7:d2:a6:cb:92:9b:12:
                    16:a9:2b:de:43:00:d9:29:ba:2d:88:dc:68:e0:52:
                    3f:a3:89:54:6b:23:6f:68:c0:d9:a3:74:f2:18:5b:
                    a2:aa:79:7b:6c:ff:9b:13:29:47:e0:5c:36:d5:1f:
                    f7:d9:2e:f6:ef:76:57:c0:47:ea:b0:1d:46:b8:7c:
                    90:f4:b1:46:13:d5:21:75:41:45:8f:36:07:f4:f7:
                    d4:e7:c0:ae:d2:af:d0:de:6f:cb:77:54:81:28:ed:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:86:51:6D:4A:94:CD:6A:CC:9D:36:C4:42:88:19:95:39:B8:A3
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3335203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:9a:2c:87:10:be:96:af:3d:9c:bc:3d:a3:67:a5:e4:69:
         8b:c2:65:2e:5e:27:4b:44:e3:8b:37:d7:48:82:5b:db:dc:03:
         0d:06:47:ba:39:3b:2a:f1:ea:8f:26:07:2a:b8:62:9b:38:0d:
         d3:c2:a2:ae:47:97:03:8f:22:02:b2:bc:2b:47:db:a4:a1:0e:
         0e:45:fb:90:9f:8e:07:6a:70:73:0f:25:38:e2:55:49:56:b9:
         e4:06:d1:07:17:b7:75:06:cd:30:cd:a8:a8:4e:6d:a1:e5:61:
         b0:bf:aa:97:0d:b4:38:51:28:7d:18:9d:12:64:fe:cc:4d:e4:
         fe:12:93:21:30:df:59:e0:58:5b:fa:cb:22:19:10:53:2f:9a:
         a5:a8:c5:56:43:05:cd:b9:63:d6:f8:c0:b8:24:a7:bb:a1:ef:
         b9:53:80:75:0e:be:58:a4:d2:2a:d8:00:54:62:c7:f4:95:9b:
         ff:89:c3:f7:31:68:f5:74:2b:68:c7:85:6a:d4:f2:e1:3e:fe:
         08:c3:bd:79:48:f1:21:9b:89:c0:89:e2:a4:20:bb:b8:33:df:
         27:4a:6a:c2:53:b5:80:cc:44:24:30:d9:da:af:04:f4:fc:82:
         25:dc:9c:75:79:b4:14:67:a2:ca:5a:d9:2f:17:26:2a:69:d0:
         30:10:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org