Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a383030303a3a2f33352d3335203d3e20323731303432.roa
File:                     323830343a373536303a383030303a3a2f33352d3335203d3e20323731303432.roa (raw, json)
Hash identifier:          I8PJgUCm9MZ5YTMtkXdchaXG9asvwae1dhOY9KNB7hk=
Subject key identifier:   D1:64:CE:F5:B2:B1:8C:00:91:A9:34:C6:E6:23:2C:F5:5C:F3:B8:52
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       0494B46F8DC261086C7D6BD71E01237F6114D147
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a383030303a3a2f33352d3335203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:17 +0000
ROA not before:           Tue 07 Nov 2023 16:14:17 +0000
ROA not after:            Tue 05 Nov 2024 16:19:17 +0000
asID:                     271042
IP address blocks:        2804:7560:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:94:b4:6f:8d:c2:61:08:6c:7d:6b:d7:1e:01:23:7f:61:14:d1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:17 2023 GMT
            Not After : Nov  5 16:19:17 2024 GMT
        Subject: CN=D164CEF5B2B18C0091A934C6E6232CF55CF3B852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:aa:75:ae:e3:67:16:61:a5:f8:b6:cc:35:
                    9e:bf:6c:c8:0b:d5:c9:0b:49:98:de:12:b1:45:25:
                    e7:6f:ca:74:7c:68:92:f6:c9:bc:33:a3:3e:64:5f:
                    0d:40:6e:0b:b1:4b:5d:a4:81:3d:a2:fc:15:5f:3f:
                    b1:0d:bb:83:89:a7:fe:c1:b2:ae:e8:d8:31:e5:c8:
                    4d:e7:a9:97:d0:6f:91:99:f1:69:38:7d:a3:06:a1:
                    f9:7d:7b:e1:67:39:c1:09:43:24:ad:d9:b6:1f:77:
                    52:cc:3a:2c:1e:ec:09:94:ed:dd:69:1e:dc:bf:b4:
                    7c:d7:8a:b2:33:53:86:f6:a1:88:95:a5:f6:bb:62:
                    b6:bb:38:de:90:08:c7:b7:48:35:96:ce:1b:b9:aa:
                    3d:6d:09:35:1f:75:51:ae:c1:e5:51:89:e1:b6:ad:
                    1a:2f:2a:d0:95:58:d3:6f:81:3c:2d:4d:d3:b5:0f:
                    4c:17:29:fb:2a:8e:57:e7:c9:3a:9b:fb:84:d9:87:
                    17:94:a4:5d:21:13:b9:8c:6d:e5:a4:ba:ba:df:ad:
                    db:dc:d4:50:26:f8:62:ac:86:06:42:e7:0f:b2:ca:
                    13:e5:18:10:63:3b:e5:b7:e6:e9:5c:9b:c2:78:04:
                    6c:09:73:47:89:cb:ea:75:1b:a5:18:26:57:3b:9e:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:CE:F5:B2:B1:8C:00:91:A9:34:C6:E6:23:2C:F5:5C:F3:B8:52
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a383030303a3a2f33352d3335203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:ba:0c:87:51:52:a0:65:27:70:a9:dc:f2:5e:ef:1e:3d:
         dc:78:aa:fc:17:5c:40:e7:a4:4e:cb:b3:99:f0:02:25:2a:8e:
         c6:9d:48:fe:ab:d6:5b:71:2d:02:69:c3:8e:a4:18:15:47:ab:
         7b:6f:d4:20:e6:c4:19:96:d0:28:ed:4a:09:0a:cf:22:5e:44:
         6a:3c:e1:44:6a:a1:59:cd:18:98:8f:0b:68:8f:d6:9a:08:75:
         c4:55:51:c4:65:29:18:c3:b1:6c:ed:4b:a4:c4:40:ea:1b:d8:
         76:f2:7b:b0:00:27:1d:9f:be:af:cb:dc:7b:cb:4e:b1:a8:c8:
         f0:18:f6:33:db:a1:2e:6b:27:a4:33:1f:3f:16:74:e4:a5:21:
         77:9a:f9:36:c9:e3:7e:1b:ec:3a:57:6f:12:23:9c:b6:63:fa:
         24:4f:91:14:bd:4a:cb:c9:1e:fa:20:3c:c8:f7:f5:51:da:da:
         a7:df:2c:c7:78:5d:5f:9d:24:00:b3:61:61:0b:09:14:b7:80:
         4d:0b:32:93:da:91:c8:f9:d7:d2:9d:e7:a0:a4:4c:80:86:f6:
         fa:38:75:29:01:3d:bf:be:5a:a8:9e:19:26:b1:8c:d7:75:b1:
         5e:2e:5d:8f:74:e0:f6:48:da:90:07:cc:47:e6:e2:75:5f:66:
         eb:be:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org