Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/323830343a363865633a3a2f33322d3332203d3e20323730323337.roa
File:                     323830343a363865633a3a2f33322d3332203d3e20323730323337.roa (raw, json)
Hash identifier:          /bBmdv1+g4xx3bAsLMaflTENNV5XjHlu6B0pZuBHsWs=
Subject key identifier:   03:4A:95:06:8D:B2:06:2A:DA:90:1F:24:0B:85:55:DA:F7:7F:7B:81
Certificate issuer:       /CN=3099D03A6D6B68F55E4289613262727807C4A6A7
Certificate serial:       64D09AFF37CD4E44972827441EA271B10E555DBC
Authority key identifier: 30:99:D0:3A:6D:6B:68:F5:5E:42:89:61:32:62:72:78:07:C4:A6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3099D03A6D6B68F55E4289613262727807C4A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/323830343a363865633a3a2f33322d3332203d3e20323730323337.roa
Signing time:             Tue 05 Mar 2024 19:55:02 +0000
ROA not before:           Tue 05 Mar 2024 19:50:02 +0000
ROA not after:            Tue 04 Mar 2025 19:55:02 +0000
asID:                     270237
IP address blocks:        2804:68ec::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d0:9a:ff:37:cd:4e:44:97:28:27:44:1e:a2:71:b1:0e:55:5d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3099D03A6D6B68F55E4289613262727807C4A6A7
        Validity
            Not Before: Mar  5 19:50:02 2024 GMT
            Not After : Mar  4 19:55:02 2025 GMT
        Subject: CN=034A95068DB2062ADA901F240B8555DAF77F7B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:7b:7b:86:81:9f:ca:2a:a9:18:6f:3f:87:
                    b4:85:f6:51:17:92:bd:87:52:09:05:f3:d0:3d:e5:
                    c0:57:fc:d7:2f:a5:6a:f4:a9:7b:18:9e:79:a6:c8:
                    14:fc:ef:6b:c2:c5:db:6f:53:82:96:96:13:63:a5:
                    6e:a9:24:46:10:b7:dd:6e:99:a1:8c:a1:68:4c:27:
                    e3:66:24:ae:fc:b7:d0:c1:7b:f3:56:6a:a1:21:fe:
                    fc:db:1d:e7:35:29:8d:55:35:4d:48:ce:f6:7b:0d:
                    4c:df:78:a9:90:ad:5b:9a:a6:0a:8f:48:d0:e1:eb:
                    94:70:cb:ca:57:14:a8:59:b5:e4:c5:9b:8e:78:52:
                    f5:04:2f:53:f2:fc:6f:5b:00:41:53:d4:c6:25:7e:
                    54:d8:bd:fa:2c:01:1c:52:c5:77:12:15:2a:ca:3f:
                    94:34:87:cb:f0:f2:19:36:a5:72:a7:34:9d:98:e8:
                    e8:4f:eb:cc:85:4a:e4:7b:10:15:48:4d:b5:2f:10:
                    70:e3:69:2a:48:9d:1e:cb:66:5b:02:57:d5:72:5e:
                    9a:bc:0a:51:fc:c4:eb:ba:bc:22:41:23:de:9a:b5:
                    1a:a0:f4:30:0e:95:bf:27:9b:8a:02:06:a6:7e:13:
                    cd:b8:ee:f7:03:b3:41:dc:a3:4e:3a:fd:cc:54:0a:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:95:06:8D:B2:06:2A:DA:90:1F:24:0B:85:55:DA:F7:7F:7B:81
            X509v3 Authority Key Identifier:
                keyid:30:99:D0:3A:6D:6B:68:F5:5E:42:89:61:32:62:72:78:07:C4:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/3099D03A6D6B68F55E4289613262727807C4A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3099D03A6D6B68F55E4289613262727807C4A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/323830343a363865633a3a2f33322d3332203d3e20323730323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:5b:8c:53:1f:cc:5c:53:08:95:b8:2f:f5:68:58:36:ee:
         d3:d4:82:55:b0:5d:3c:a8:e2:a9:77:24:f7:54:26:1b:ae:61:
         6e:f4:d2:b2:41:a4:cb:c9:0c:43:40:5c:f0:df:da:0d:93:91:
         24:64:05:39:c7:7d:54:e6:aa:cb:cd:de:66:ef:94:97:5e:ac:
         3c:90:89:9c:03:30:51:f4:0d:0a:16:35:8a:67:3f:1f:e6:ba:
         a9:3c:a7:45:5e:a4:58:c5:12:5a:b5:ee:57:61:be:5c:43:47:
         fc:88:28:63:40:11:68:31:90:57:d6:36:f0:86:2c:6b:56:2a:
         dd:58:07:37:84:53:36:6a:a9:ea:ce:74:56:01:58:61:69:dc:
         c8:7a:b4:44:6c:48:bd:1a:d8:b5:37:d8:28:3c:f5:f0:59:56:
         26:cd:7d:6c:7c:6c:a3:57:2f:7f:cf:08:78:98:99:1f:b0:3f:
         7d:b4:08:5f:de:be:69:dc:ec:59:97:eb:72:79:72:fd:70:a0:
         4f:92:81:48:9a:57:4d:95:0f:df:52:48:0d:a4:3c:cb:b8:a1:
         2b:0b:e6:07:08:5e:e0:c9:e7:7d:12:c0:95:73:0e:81:00:4d:
         21:9d:3a:ee:44:34:54:af:5d:a6:88:4a:07:2f:0b:5c:47:52:
         94:df:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org