Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33342d3334203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33342d3334203d3e20323633303533.roa (raw, json)
Hash identifier:          9I7hoNlsd/ONxkxHzd5syrZbJ1pxe4hn4LGlHUA0zR0=
Subject key identifier:   00:DF:E0:25:72:92:73:44:4F:02:AB:1F:73:B0:7D:B4:49:49:29:D9
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       23986A7794DF6392AF4C37F4F13DF033090EF94C
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33342d3334203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:50 +0000
ROA not before:           Wed 03 Apr 2024 18:25:50 +0000
ROA not after:            Wed 02 Apr 2025 18:30:50 +0000
asID:                     263053
IP address blocks:        2804:920::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:98:6a:77:94:df:63:92:af:4c:37:f4:f1:3d:f0:33:09:0e:f9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=00DFE025729273444F02AB1F73B07DB4494929D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:b9:73:d1:dd:4d:20:e6:05:74:f4:eb:18:
                    43:74:05:31:3f:ba:e1:86:a4:4c:d7:db:7c:14:d4:
                    d6:56:28:ca:19:c9:34:2c:f4:bb:05:b1:dd:f0:3b:
                    4c:d1:8c:40:65:33:67:ae:de:5c:f4:03:fd:62:00:
                    d9:3a:16:28:2b:80:c9:4a:c7:04:ed:da:a6:61:5a:
                    bc:55:4f:cb:f8:8c:f2:da:0d:55:b7:fc:0a:45:1f:
                    ed:0e:12:4b:5a:f7:27:9a:ae:2b:5f:12:7f:2a:b0:
                    e1:d4:4d:f1:e3:7c:be:93:ff:d5:b7:63:87:7e:ff:
                    99:6d:6c:0c:9c:8a:cb:0a:1e:b7:90:47:6f:04:fa:
                    99:4c:f1:df:b6:68:e9:10:b3:fa:bb:f2:af:ec:ce:
                    dd:23:28:32:2a:09:8f:37:45:ac:ea:7b:2e:35:92:
                    6b:68:68:27:cc:c6:5b:09:ac:e7:fe:9b:4f:57:32:
                    99:7e:06:c8:18:7d:14:47:bd:5c:64:57:2b:10:c0:
                    ca:3a:f9:df:65:4a:42:e0:9a:9b:82:44:4a:06:10:
                    89:ea:29:14:4c:4d:30:19:b0:68:8f:79:ac:8c:64:
                    16:50:a8:fd:67:da:a1:a7:87:ab:fd:92:6c:88:44:
                    3e:39:0d:cb:5b:df:62:b3:ce:24:44:22:19:2a:cf:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DF:E0:25:72:92:73:44:4F:02:AB:1F:73:B0:7D:B4:49:49:29:D9
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33342d3334203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/34

    Signature Algorithm: sha256WithRSAEncryption
         2f:73:36:8b:d4:b2:cb:66:08:1f:f7:73:d3:03:00:74:78:b9:
         9a:a3:e3:a8:b0:82:3e:d2:a6:c4:88:21:fd:95:7d:e4:9b:3b:
         ba:9e:dd:b2:84:4f:b8:3c:87:bd:9b:f9:48:82:2f:32:a3:49:
         72:3a:c7:b5:e7:3f:d8:08:fb:69:2b:52:03:75:90:63:6c:f4:
         f0:59:93:b4:b5:48:22:09:61:3b:2e:24:52:31:9a:23:da:3b:
         08:26:e2:41:26:6b:5f:e4:90:5a:ad:f4:a5:12:45:84:ab:80:
         5f:2c:1e:fb:01:22:c9:02:99:a2:00:7a:03:07:52:64:36:94:
         fa:ab:90:95:c5:38:52:6a:dc:87:a6:97:5a:22:04:b7:af:02:
         af:04:68:02:50:c3:88:a3:a0:e8:c8:aa:2c:39:9a:2b:0a:c4:
         3a:11:d4:9a:16:15:81:66:11:42:98:77:8c:3e:1e:13:7b:27:
         fd:46:b1:44:93:62:f0:46:ee:09:d8:d5:06:fa:c9:43:b9:18:
         84:b4:e5:4e:7f:64:42:5c:f4:89:f7:8e:35:f9:ca:e4:ed:d2:
         bc:cc:dd:67:64:07:aa:4a:e3:7f:dc:7f:1b:78:b5:b2:12:15:
         c8:ff:7e:83:42:d7:35:03:60:9c:b2:e4:20:40:95:5b:0c:f2:
         28:7a:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org