Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a633030303a3a2f33342d3334203d3e20323633303533.roa
File:                     323830343a3932303a633030303a3a2f33342d3334203d3e20323633303533.roa (raw, json)
Hash identifier:          BEklzXWWWAebS0GmqnG9vCSLO23fxlZ7Ct5MnoGox68=
Subject key identifier:   78:BC:2D:00:9F:A0:88:BC:D7:46:40:84:A2:43:F7:29:05:87:9A:08
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       690AC0A09305E1FA6A863B5061D56D496CF0C919
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a633030303a3a2f33342d3334203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     263053
IP address blocks:        2804:920:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0a:c0:a0:93:05:e1:fa:6a:86:3b:50:61:d5:6d:49:6c:f0:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject: CN=78BC2D009FA088BCD7464084A243F72905879A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:7b:11:f4:4b:79:46:a5:e8:21:35:ec:95:
                    76:a4:58:45:86:cf:06:c9:0d:1a:2a:36:2a:b4:08:
                    ae:63:b5:e3:75:e9:11:af:a5:af:5b:92:c1:15:0c:
                    6e:fc:e7:67:cd:23:75:a3:5b:17:97:e2:c5:80:bc:
                    1f:97:c3:fa:cb:00:49:1a:7a:b4:c0:30:b9:d4:80:
                    30:e0:ec:ca:a3:c8:78:b1:d1:36:0c:a1:98:3e:75:
                    f6:f1:44:a8:f3:51:d3:fc:53:97:e6:3e:db:28:f4:
                    ac:11:29:39:34:a6:95:e7:15:83:a8:2e:73:37:5a:
                    7b:a7:71:59:5c:5e:fb:8b:65:ef:e7:2c:e9:c6:bc:
                    df:10:e3:4f:b9:d7:cc:3b:30:9a:53:f8:72:ab:8f:
                    97:17:08:52:8f:71:2d:a8:25:53:0a:6a:32:d5:bd:
                    1f:7a:e7:8e:a2:b5:f7:fe:7b:df:cd:b9:6f:bf:dc:
                    e3:81:29:a5:f1:a4:68:ce:d1:d4:a6:63:3a:33:b8:
                    8e:8f:31:a8:18:3c:57:1d:1f:c6:37:ca:60:c7:57:
                    e1:8c:95:ba:c6:76:0c:1e:e2:ba:74:8a:90:c1:83:
                    78:08:bb:6d:7b:12:e1:15:ff:c3:ac:5b:ea:df:4f:
                    e6:c2:76:9c:c2:a3:5b:5d:54:bd:73:8b:c4:4c:f0:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BC:2D:00:9F:A0:88:BC:D7:46:40:84:A2:43:F7:29:05:87:9A:08
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a633030303a3a2f33342d3334203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:5f:33:02:63:f4:85:aa:69:a1:af:83:3a:b7:ed:1f:3c:
         76:68:3b:63:31:d4:97:ea:01:f8:15:d2:51:c1:11:c9:e5:e3:
         e3:30:11:ec:73:4f:ae:a2:55:cb:be:c2:8a:c6:b6:f1:08:ce:
         83:a5:8f:42:46:82:d6:df:db:8c:37:1f:b1:e1:fc:db:94:f1:
         e9:f6:24:c8:04:0c:3b:35:d5:29:cc:90:c0:cb:07:8e:23:fa:
         6d:7e:26:96:18:16:26:1c:4c:aa:03:3d:5a:a8:b4:6e:44:31:
         a3:56:c9:3e:5a:d2:1c:34:2f:e2:56:65:21:ba:f5:d4:b5:fc:
         dc:33:37:56:4c:ea:eb:0f:cd:9b:3e:eb:c6:fb:68:22:e1:f3:
         2c:fe:2e:ba:5e:62:c7:bd:3f:ca:c6:33:f6:98:91:33:65:3b:
         6d:64:31:36:f2:8b:a6:a5:60:ed:a6:6a:34:fd:8e:77:5a:b8:
         bb:d9:2c:98:ee:cb:8a:3f:12:ed:48:37:e1:5c:37:80:8b:7f:
         19:3e:ed:bc:58:3f:ef:eb:b5:7f:cc:8c:82:0a:61:d8:3e:ac:
         dc:bc:32:0d:d6:32:92:90:3f:19:89:01:18:e9:43:30:bb:ba:
         83:82:07:67:2b:b9:15:39:10:b4:b0:7f:f2:60:15:c8:2a:eb:
         af:82:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org