Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383230303a3a2f34302d3430203d3e20323730373037.roa
File:                     323830343a373032303a383230303a3a2f34302d3430203d3e20323730373037.roa (raw, json)
Hash identifier:          cogWOWDoZIet6S27Yp80K+EZ2aNarv1u1Hn/nqL24cE=
Subject key identifier:   24:AC:40:24:DD:11:E9:71:A4:0A:D4:C8:57:5F:EF:AD:8E:33:76:D3
Certificate issuer:       /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial:       2B7BCD5826335B7DAD8FD4B85A9FBA2E337C6B4B
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383230303a3a2f34302d3430203d3e20323730373037.roa
Signing time:             Tue 13 Jun 2023 04:59:38 +0000
ROA not before:           Tue 13 Jun 2023 04:54:38 +0000
ROA not after:            Tue 11 Jun 2024 04:59:38 +0000
asID:                     270707
IP address blocks:        2804:7020:8200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7b:cd:58:26:33:5b:7d:ad:8f:d4:b8:5a:9f:ba:2e:33:7c:6b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
        Validity
            Not Before: Jun 13 04:54:38 2023 GMT
            Not After : Jun 11 04:59:38 2024 GMT
        Subject: CN=24AC4024DD11E971A40AD4C8575FEFAD8E3376D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:c0:70:79:77:ec:05:e5:b7:37:8a:87:31:
                    1b:59:02:eb:42:fe:82:6e:81:41:28:25:4f:b5:d7:
                    f6:1f:67:cf:fc:a1:52:36:c5:33:b6:84:01:79:ee:
                    3a:f1:e3:42:77:11:2d:95:ca:42:b1:26:dc:be:88:
                    f3:69:64:95:39:a2:fa:c6:6c:70:e9:d7:70:e1:67:
                    90:d2:ba:45:18:dc:4b:4d:0b:14:88:91:e5:3f:08:
                    1f:73:7e:d0:7a:fa:ea:ca:f5:38:45:38:8e:e5:bf:
                    f5:ab:49:f6:c6:a1:21:75:93:d0:ec:6a:ba:9c:ed:
                    d4:98:b1:a5:f4:69:fd:b8:23:dc:12:17:89:3a:7f:
                    10:d9:37:f9:03:35:1f:59:db:9c:c0:ca:26:19:68:
                    9f:88:95:ad:ab:09:77:4d:0a:4a:cd:9e:42:90:34:
                    a7:13:0c:00:fa:a9:5a:dc:bd:af:72:26:5d:1f:6e:
                    4d:f6:19:88:5e:85:7c:2e:18:33:80:ac:8b:37:7a:
                    f5:e5:46:0c:f1:d4:6c:ca:38:cd:34:6e:21:96:a1:
                    02:3b:10:ed:aa:a3:9b:34:a9:5e:7e:76:0f:51:51:
                    ac:df:17:96:5e:57:11:8a:e3:30:47:8a:bf:75:86:
                    b1:62:6b:83:88:6c:2a:04:65:08:57:1b:52:73:70:
                    8f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:40:24:DD:11:E9:71:A4:0A:D4:C8:57:5F:EF:AD:8E:33:76:D3
            X509v3 Authority Key Identifier:
                keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383230303a3a2f34302d3430203d3e20323730373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7020:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:cd:fd:f2:d9:d5:52:96:59:2c:a5:ed:7a:8e:5e:0f:29:e5:
         09:68:0f:61:55:06:76:0a:73:ce:e4:6c:e6:6c:5b:5e:65:59:
         e3:6e:53:e5:1d:fd:be:80:ce:b5:8f:c6:b7:b4:49:4d:7c:5c:
         82:40:b4:cf:ac:49:67:93:07:8c:bf:62:62:ef:f6:64:3c:ae:
         3b:80:db:85:4b:36:69:15:fc:a6:07:40:1e:1d:6d:53:84:c9:
         35:c5:a5:f4:47:b9:28:f6:11:55:c1:2d:95:d8:bd:17:b9:35:
         ef:66:bd:57:ef:56:15:7a:f0:69:c8:b5:58:48:62:60:94:52:
         7f:64:93:9b:b7:dc:84:6d:d0:fc:37:53:a8:4e:c7:9d:ac:f2:
         23:56:9a:b3:d6:ad:c6:0c:ea:e7:99:dc:72:cc:ad:d0:30:21:
         31:05:b6:87:3c:a2:f5:91:5c:41:2a:52:77:fa:9d:39:83:19:
         77:dc:15:ba:db:33:56:7e:f7:55:02:17:45:83:6d:9a:11:d9:
         9c:08:fa:c9:49:12:36:5b:d4:ea:7c:45:ed:a9:11:b2:d7:6c:
         7e:57:a6:ca:4b:cd:5d:0f:81:38:86:c5:59:ce:a7:bc:76:4e:
         ae:2c:80:cd:21:ba:50:eb:27:cd:e0:41:a9:5d:52:e7:9b:77:
         7a:56:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org