Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/323830343a326463303a3a2f33322d3332203d3e20323635333031.roa
File:                     323830343a326463303a3a2f33322d3332203d3e20323635333031.roa (raw, json)
Hash identifier:          aDBrnkHQXtlWFOELjxkgTqAOo0JnkVRh0BBuPIVzzQY=
Subject key identifier:   FD:17:46:1E:15:72:D9:85:D4:60:0D:2D:40:9F:7A:28:23:1F:29:86
Certificate issuer:       /CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
Certificate serial:       4F8FB4DA96479424AAE613D523BE707A638C656C
Authority key identifier: AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/323830343a326463303a3a2f33322d3332203d3e20323635333031.roa
Signing time:             Thu 20 Apr 2023 14:28:23 +0000
ROA not before:           Thu 20 Apr 2023 14:23:23 +0000
ROA not after:            Thu 18 Apr 2024 14:28:23 +0000
asID:                     265301
IP address blocks:        2804:2dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8f:b4:da:96:47:94:24:aa:e6:13:d5:23:be:70:7a:63:8c:65:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
        Validity
            Not Before: Apr 20 14:23:23 2023 GMT
            Not After : Apr 18 14:28:23 2024 GMT
        Subject: CN=FD17461E1572D985D4600D2D409F7A28231F2986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:07:0f:b3:c5:55:50:c0:40:9e:63:cd:0a:
                    c8:0b:1f:b3:b3:10:fe:f1:72:ce:4e:61:3d:eb:fb:
                    d5:b8:8a:49:af:7e:5f:bc:87:2d:9f:a8:4b:9e:2e:
                    80:dd:fa:19:67:c0:cd:88:85:b7:c5:b3:ee:11:44:
                    46:3c:b6:84:21:9b:af:05:ea:fa:31:5c:6a:b0:67:
                    6b:3d:a5:e6:bb:91:51:a1:b4:81:1b:59:8e:69:71:
                    eb:2c:87:a7:ba:a5:3a:46:c8:21:73:c2:25:a3:f5:
                    3a:51:ee:3f:69:ec:3c:41:7e:2e:46:bc:e9:2a:f7:
                    a4:46:1d:8f:dd:ed:41:18:83:7d:d2:4d:ca:93:c6:
                    95:6b:c2:5e:72:41:93:16:4b:ad:26:b6:e1:c4:f3:
                    bd:ee:ec:9c:62:f7:af:79:4c:8a:0b:02:cc:7c:4f:
                    54:66:d8:bb:96:7c:6a:4d:bb:71:10:c0:52:53:49:
                    f2:88:0a:d5:63:a2:80:0f:32:86:00:6e:c5:7d:b2:
                    28:df:de:8f:1e:52:37:46:eb:af:9b:21:0d:8f:46:
                    c3:3d:f2:61:4a:95:1d:f2:83:ed:44:7b:14:ab:bd:
                    2e:b3:a6:b6:43:75:60:03:1a:b3:6b:6a:41:2d:ab:
                    45:fa:44:eb:06:5b:0b:c2:ef:9a:59:08:09:68:41:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:46:1E:15:72:D9:85:D4:60:0D:2D:40:9F:7A:28:23:1F:29:86
            X509v3 Authority Key Identifier:
                keyid:AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/323830343a326463303a3a2f33322d3332203d3e20323635333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:ee:3a:28:7f:fe:84:d9:cc:74:e3:2d:ae:b6:f8:e9:0c:
         82:d2:c8:cb:9d:4a:d0:db:25:3a:a0:fd:9a:84:f4:50:bf:7b:
         bf:3a:49:aa:88:13:2b:0a:bb:0c:8f:1c:6e:52:c2:4a:76:2d:
         b5:75:07:30:96:62:3b:ac:31:3a:1f:03:d5:bf:84:3d:73:5c:
         18:54:83:4a:f0:d7:41:ec:92:df:a1:97:5c:09:04:f7:fe:ea:
         08:20:88:5f:b4:82:d3:70:10:74:ff:c5:69:7f:c8:a0:c4:d1:
         38:c4:6b:7a:f8:dd:15:b7:39:9b:a0:37:63:1f:ca:51:2e:ef:
         2f:1d:b4:e1:71:ea:12:79:2f:e3:c9:49:4e:eb:82:3a:0d:25:
         8d:b1:05:18:9c:f3:5d:d9:8f:e5:16:2e:9f:73:52:eb:44:bf:
         4e:b6:59:60:6e:cd:81:d9:79:10:c7:f0:1d:39:d8:10:8b:4a:
         fb:59:38:46:65:2f:7b:60:4f:4f:d1:96:a6:20:82:78:94:44:
         82:98:eb:e0:92:a9:6e:e1:40:09:6f:d0:7c:fa:6a:8f:d2:1e:
         af:20:48:d1:f5:02:52:99:91:99:e6:24:65:96:ff:d4:67:12:
         d8:a0:6e:fa:d6:5f:19:b7:88:6b:33:55:e1:62:17:37:b4:b3:
         22:f7:4f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org