Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa
File:                     323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa (raw, json)
Hash identifier:          i+V/Jz31Im4zNl8aLWKX1NZPKv14VVxiK0qPCOxwoo8=
Subject key identifier:   A8:C3:C4:94:EF:DA:36:A9:9C:2F:80:8D:E1:D1:6D:08:6C:36:11:57
Certificate issuer:       /CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
Certificate serial:       7BDC0B32B482D110FC8D242617EEE470A1839F91
Authority key identifier: DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa
Signing time:             Fri 08 Mar 2024 14:15:31 +0000
ROA not before:           Fri 08 Mar 2024 14:10:31 +0000
ROA not after:            Fri 07 Mar 2025 14:15:31 +0000
asID:                     267124
IP address blocks:        2804:487c:6000::/35 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dc:0b:32:b4:82:d1:10:fc:8d:24:26:17:ee:e4:70:a1:83:9f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
        Validity
            Not Before: Mar  8 14:10:31 2024 GMT
            Not After : Mar  7 14:15:31 2025 GMT
        Subject: CN=A8C3C494EFDA36A99C2F808DE1D16D086C361157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:44:e6:87:51:98:ff:df:bc:ce:7b:25:d8:
                    5f:6a:ad:92:91:7d:28:01:6c:da:23:55:6f:1a:27:
                    7a:14:55:2b:5e:25:8c:2e:e9:0c:ea:c7:78:55:84:
                    1b:a7:d0:de:f3:68:27:58:ac:d1:9a:59:fc:7e:5d:
                    37:43:a2:91:26:9a:e4:89:74:e8:29:03:d3:56:f6:
                    c4:c6:f3:dd:80:90:a5:3f:4b:88:cb:ab:ab:f8:7a:
                    59:ed:86:c9:f6:2c:bc:28:b2:f4:d1:33:e3:cc:43:
                    9e:15:60:7a:87:d7:b4:70:45:07:63:36:98:12:54:
                    60:86:54:5d:d7:5a:d8:55:55:d1:61:b6:16:97:bb:
                    bf:3e:7b:d4:53:49:2c:e4:69:02:6a:a9:fe:88:91:
                    c6:2b:7b:73:37:86:98:9a:76:d5:aa:e8:0a:aa:56:
                    2a:70:eb:fe:f2:5c:38:52:b0:8c:bd:a8:94:7d:b8:
                    9d:7f:a4:9e:94:23:5d:0b:97:8b:e7:54:b0:51:ab:
                    5a:60:60:59:86:7a:53:7b:f5:7a:2e:a6:51:df:ab:
                    eb:77:94:0a:f6:de:87:2f:6d:ff:ce:f2:47:41:2b:
                    b9:b2:db:b6:18:50:62:b4:b3:f1:86:af:70:11:8c:
                    73:f0:a5:f0:1c:9d:81:9a:93:71:0f:f0:e7:02:cd:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C3:C4:94:EF:DA:36:A9:9C:2F:80:8D:E1:D1:6D:08:6C:36:11:57
            X509v3 Authority Key Identifier:
                keyid:DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:ca:5c:4c:b7:84:f8:1b:0a:29:ca:ec:ac:34:12:e1:cb:
         50:ab:03:7c:d6:73:c0:66:b3:fd:39:f0:9b:0b:d4:ae:8a:48:
         98:94:c0:05:65:39:11:71:ba:2a:95:92:81:ad:43:04:b9:56:
         28:6f:0c:f4:f5:dc:e2:24:b6:be:0c:a8:8d:58:4c:e5:9b:eb:
         9c:1b:bb:64:20:c4:5e:9d:cc:ee:39:d1:60:41:c2:4a:23:a3:
         aa:cc:40:3e:72:ab:16:6f:b9:09:71:86:1a:5f:15:a6:09:d0:
         24:1f:a0:74:4c:48:b3:60:6f:76:2b:b5:19:3a:e2:a6:4e:60:
         e8:10:dd:62:bd:fa:f4:c2:77:c4:51:ce:9a:f2:e3:3b:20:7b:
         6a:52:c0:d1:3c:f5:ca:9a:33:2d:29:3e:1f:32:80:e1:24:2e:
         17:a4:df:70:b8:4e:00:76:3a:41:8e:c2:ed:9d:c4:27:98:17:
         fb:9d:bf:e0:63:61:ac:52:67:8b:42:1d:97:96:b4:9a:09:94:
         fb:a0:18:7a:12:3c:c2:f9:e5:4e:ce:9e:f3:0a:f2:d9:ee:d7:
         27:e0:89:34:e3:a9:95:f8:d3:40:5b:72:91:8f:d5:1f:a6:19:
         65:c1:98:4f:7d:8a:39:2c:be:5a:a7:04:2b:8c:d5:59:b4:15:
         97:2f:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org