Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa
File:                     323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (raw, json)
Hash identifier:          BR9xLqgPA4RT6TZLU/NX8GnZ5Nc/Wc4+P612xljy1WE=
Subject key identifier:   AC:AB:72:9E:29:D2:B2:50:EB:D7:5D:FE:2B:69:18:F7:4A:D3:A0:8A
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       723B1E11B863855D41C482E63B2316C1454B3CDC
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:31 +0000
ROA not before:           Mon 18 Mar 2024 13:58:31 +0000
ROA not after:            Mon 17 Mar 2025 14:03:31 +0000
asID:                     271090
IP address blocks:        2804:761c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3b:1e:11:b8:63:85:5d:41:c4:82:e6:3b:23:16:c1:45:4b:3c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:31 2024 GMT
            Not After : Mar 17 14:03:31 2025 GMT
        Subject: CN=ACAB729E29D2B250EBD75DFE2B6918F74AD3A08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:e7:9a:0a:95:4b:52:6e:d2:fe:fd:30:ec:
                    d1:21:31:fe:5a:a8:a7:87:85:8d:0e:86:71:82:cd:
                    58:ee:ab:67:21:f5:71:72:e5:d1:d8:5e:d0:8b:be:
                    73:26:84:0b:eb:01:42:13:1e:d9:de:be:bb:0e:8e:
                    f2:8a:86:ff:03:7b:43:84:57:93:d9:90:39:6a:a0:
                    25:4d:84:3c:7f:35:07:28:51:08:6c:11:6c:23:f3:
                    01:d6:0d:b0:7a:4a:d9:f1:99:d7:7f:ee:08:2e:a1:
                    9f:72:38:af:b1:93:73:39:0d:62:0a:ea:6f:d7:c6:
                    2b:f7:9a:3c:a2:2f:04:8b:8a:6c:62:d6:84:e1:31:
                    9b:e9:f3:1c:47:e5:71:f9:2b:51:b3:3b:28:e1:27:
                    36:52:fa:ac:af:3e:cc:4b:28:b4:90:cc:59:59:bb:
                    2a:d3:af:0d:cd:2b:16:13:c9:6a:97:5f:3d:bb:35:
                    c5:bc:a8:cc:d7:6f:5f:92:d6:d3:45:b3:ad:62:0f:
                    a9:e3:d6:c8:00:d9:18:90:d3:6b:fa:70:23:54:bc:
                    cb:77:cd:81:8b:46:cf:b1:b2:0a:8f:d1:4a:00:d2:
                    6d:67:d8:69:41:76:1f:82:73:1b:d4:f2:2d:07:63:
                    e5:71:6f:78:71:8e:35:7a:1f:34:7c:fa:03:c1:e2:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AB:72:9E:29:D2:B2:50:EB:D7:5D:FE:2B:69:18:F7:4A:D3:A0:8A
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:761c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:92:38:bf:c1:dd:98:58:55:1d:db:df:ba:0f:84:6e:c2:
         76:5f:32:60:55:10:70:5f:61:3a:34:84:75:2c:f0:ac:0f:67:
         03:be:3b:70:db:51:99:af:7c:86:ab:d0:77:4c:08:88:05:a4:
         fc:24:54:c2:15:ff:c6:c4:a7:30:12:df:97:de:5b:a4:95:bb:
         f8:c3:0f:d3:04:fe:de:0c:d2:cc:9b:3d:8b:a3:e8:db:fa:0a:
         a3:5c:c2:52:ea:9c:1f:17:1c:7b:17:1b:66:82:2d:4c:ae:c5:
         fa:b9:60:f7:b2:0c:4f:4e:e6:52:a6:48:a8:85:92:0d:d2:65:
         b2:53:e3:9b:9e:e2:08:0e:66:09:70:52:ee:53:aa:d8:6c:b3:
         cb:9d:c0:5e:07:82:07:73:7e:96:9d:6a:81:0f:2a:3d:71:6e:
         3a:4e:33:86:5b:23:37:4c:fb:5d:b7:52:2b:fa:82:04:a2:56:
         c4:e0:da:40:b3:19:b5:d9:ee:65:b4:1b:5d:a3:2c:4d:6a:a3:
         48:0e:ed:64:8b:0d:88:9e:00:54:f7:71:e2:95:3e:86:0e:5f:
         44:30:48:0a:e1:33:85:b6:89:50:ab:ec:51:d3:9e:47:9e:92:
         ed:48:75:bb:73:db:c2:cf:87:7a:8c:bb:80:c6:dd:4b:2b:85:
         31:99:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org