Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa
File:                     323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa (raw, json)
Hash identifier:          74UIvKuIU3YCT4E4MhlBXARMoV2xhHF0D3MW7aqeho4=
Subject key identifier:   4B:AB:D8:4F:0F:8C:11:14:06:A1:19:B8:48:90:97:54:0A:4E:06:71
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       4450606BCCDAF721C42957097CA0865784B60D98
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:50 +0000
ROA not before:           Wed 03 Apr 2024 18:25:50 +0000
ROA not after:            Wed 02 Apr 2025 18:30:50 +0000
asID:                     263053
IP address blocks:        2804:920:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:50:60:6b:cc:da:f7:21:c4:29:57:09:7c:a0:86:57:84:b6:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=4BABD84F0F8C111406A119B8489097540A4E0671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:ae:98:35:f0:58:38:75:94:fd:c3:c2:28:
                    21:0b:ec:4b:e5:59:96:e1:ce:ba:cf:7b:15:70:7b:
                    e7:ae:50:3e:98:75:3c:89:42:6f:9b:37:a7:2f:11:
                    74:1f:cc:bf:33:05:77:9f:b2:fd:1e:d6:b0:ad:bc:
                    6b:2f:9f:51:20:aa:8a:0c:37:eb:51:36:b5:7c:13:
                    4d:52:55:61:4a:66:4b:51:8a:3c:70:f7:8c:2c:8d:
                    a0:34:e7:a4:25:77:7d:52:1b:d0:1b:92:de:9a:bc:
                    05:03:18:9d:40:8f:f6:96:f5:7a:bb:d1:35:9f:02:
                    67:18:c4:ac:73:89:07:9e:62:b2:6e:81:b6:1c:86:
                    f8:f9:34:57:db:e2:83:6c:f8:6e:a5:e2:01:31:f4:
                    ee:ee:56:f4:ab:90:ef:ce:b5:0e:d4:48:8c:24:1c:
                    20:6a:e5:f0:11:15:2c:a9:e0:1d:30:3b:6a:f1:dc:
                    83:a8:8f:37:8e:5a:e4:40:4d:50:2b:1e:5b:20:d0:
                    23:bf:59:a0:22:de:b7:34:94:43:4c:ff:8b:ed:27:
                    cd:92:d0:20:7c:96:63:f4:e4:de:e3:99:7e:94:3d:
                    70:37:4e:76:2d:ad:cd:84:6a:2c:15:47:d6:e2:7d:
                    68:b0:d5:cf:aa:2f:6f:3e:97:35:74:f0:01:d9:de:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:D8:4F:0F:8C:11:14:06:A1:19:B8:48:90:97:54:0A:4E:06:71
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:6d:73:99:cd:7f:2f:5b:35:f0:43:62:d1:47:61:a6:3e:
         4e:6e:53:32:52:7e:24:a8:d4:a7:67:44:c3:32:83:82:5f:5f:
         27:1c:fe:3b:3d:fc:8d:43:05:e0:6e:dc:50:89:a0:c7:98:ca:
         01:5a:1f:42:07:95:1e:67:8e:c3:a7:e1:df:df:6a:8d:9d:07:
         f1:d2:1c:b1:2e:c9:16:6c:a9:d9:36:66:98:2c:d3:57:97:0f:
         43:0c:d9:0e:54:33:ab:9e:f1:d8:63:bc:4d:4c:48:cf:86:71:
         0c:77:e7:3a:09:f5:fa:c7:fe:3a:16:92:df:eb:bc:b0:88:ef:
         ea:37:1b:65:04:f0:67:39:2e:dd:9d:96:bd:44:34:42:5b:96:
         10:4a:ba:6a:83:f8:4b:24:be:a4:ca:e5:95:15:e5:e6:76:d6:
         21:01:85:17:77:ce:fa:66:bb:b3:b2:07:d3:f6:bf:90:f7:cb:
         38:12:db:f8:d6:e9:28:43:4c:d3:ad:ea:30:14:62:6d:35:61:
         f7:93:df:11:3f:19:df:7c:36:25:3a:6c:9b:0c:f0:23:e6:2d:
         07:2d:75:d2:79:f6:9d:83:fb:a0:4b:8c:cf:74:15:91:bd:8a:
         44:97:31:7e:16:d6:c1:b2:17:cd:b5:b5:a8:36:2f:c6:0d:97:
         f9:c5:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org