Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323a3a2f34382d3438203d3e20323731303432.roa
File:                     323830343a373536303a323a3a2f34382d3438203d3e20323731303432.roa (raw, json)
Hash identifier:          ScRtLmRdOZ7ZwbetqMofcnMGNB5wRgqFzlqb0tIFYqU=
Subject key identifier:   CE:C2:83:48:2E:1D:8C:43:C2:7F:C8:1B:99:9A:34:61:26:6E:57:87
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       3C4A12A451A690D4FD25723B7A44B399DA9F0E1B
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323a3a2f34382d3438203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:17 +0000
ROA not before:           Tue 07 Nov 2023 16:14:17 +0000
ROA not after:            Tue 05 Nov 2024 16:19:17 +0000
asID:                     271042
IP address blocks:        2804:7560:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4a:12:a4:51:a6:90:d4:fd:25:72:3b:7a:44:b3:99:da:9f:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:17 2023 GMT
            Not After : Nov  5 16:19:17 2024 GMT
        Subject: CN=CEC283482E1D8C43C27FC81B999A3461266E5787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:58:0f:75:d4:9a:fe:e1:e0:60:88:b1:38:
                    c0:dc:c6:36:f4:8a:36:80:a6:a7:86:d7:df:23:9b:
                    44:75:30:b8:1b:9c:8b:84:9c:d8:d1:13:68:47:63:
                    d8:3f:85:fc:23:f9:85:0e:59:25:73:93:6e:ea:04:
                    76:4a:de:a0:6c:f6:36:5a:9f:df:2a:5f:9e:78:b7:
                    e3:0c:d0:6c:90:a6:32:25:cb:1f:db:69:57:d6:6a:
                    6f:ae:5a:25:bc:9f:df:22:8d:b7:0d:a8:a3:0b:49:
                    ff:1f:5d:b0:3b:80:81:55:9a:54:21:63:80:3c:de:
                    74:72:2b:7f:8f:2f:22:0f:cf:4b:94:9e:9d:56:27:
                    49:cb:19:5d:8e:54:16:74:7a:9e:85:e8:f6:d9:30:
                    e1:82:d3:27:9a:79:c4:b8:08:4b:0c:41:96:ed:79:
                    24:01:4e:50:43:34:0d:4f:0d:a0:b4:a8:56:8f:a8:
                    65:0d:05:b4:62:88:c9:6c:7c:07:a7:6b:92:52:2d:
                    cf:d4:94:31:92:6a:b2:24:b7:38:2d:28:d5:57:d6:
                    77:c0:ae:9e:44:02:04:a8:42:b4:73:6f:bc:f7:dc:
                    2c:8b:e5:34:22:5c:12:1a:04:cf:d0:66:84:07:19:
                    82:77:0b:17:ad:96:35:53:56:09:92:c7:ee:53:e5:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C2:83:48:2E:1D:8C:43:C2:7F:C8:1B:99:9A:34:61:26:6E:57:87
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323a3a2f34382d3438203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:36:8b:54:97:a5:9b:40:98:40:4f:06:25:a6:09:60:52:d4:
         ad:90:0f:1a:e9:37:b8:d9:65:ad:cd:77:a5:f2:4f:c3:0b:18:
         79:e0:cb:56:b8:ad:e5:01:99:4e:9a:08:95:88:a6:33:81:8e:
         a9:6c:1b:df:17:41:21:a0:17:30:9d:d1:4c:c7:42:b7:6c:5e:
         da:6b:56:65:67:27:70:27:42:ba:f4:df:2e:c5:ee:07:69:ad:
         36:d9:a2:cd:24:32:4b:87:e6:95:1b:99:8c:14:69:27:e6:9c:
         32:8e:11:33:2d:8d:16:0b:fe:f1:48:51:a0:ee:90:17:74:a6:
         56:64:ad:bf:bc:40:90:fc:94:5b:0f:85:87:76:48:45:30:3a:
         27:64:84:1a:84:11:90:a6:61:a4:2f:d5:d2:f5:51:df:77:4b:
         5b:be:70:ef:f4:89:56:88:5f:33:d9:2a:3f:54:66:2c:06:6f:
         e7:5b:66:ca:d2:22:4a:b1:14:a2:4a:8b:94:40:14:32:80:2a:
         c1:ea:e5:28:b8:32:25:bd:96:35:61:3f:89:29:5f:25:7d:93:
         8e:67:df:76:87:b5:fd:84:91:0e:61:e3:61:87:17:da:b5:b0:
         0a:1c:02:f0:a6:59:a6:2f:a5:31:81:89:ba:94:22:a0:10:b8:
         9d:64:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:58 2024 by rpki-client on console.sobornost.net