Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa
File:                     323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa (raw, json)
Hash identifier:          STXrU0Hb1zfz+CYlLv918Dgb0aSiYDcmvxYbY/FwtXs=
Subject key identifier:   AC:C4:F5:6B:4A:AD:1F:8A:57:8C:80:D5:8E:D0:5E:88:CF:53:45:AC
Certificate issuer:       /CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
Certificate serial:       02933F47861FDBD9A9090BAA503D3C830DD4B8DB
Authority key identifier: A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa
Signing time:             Mon 14 Feb 2022 14:00:00 +0000
ROA not before:           Mon 14 Feb 2022 13:55:00 +0000
ROA not after:            Mon 13 Feb 2023 14:00:00 +0000
asID:                     267560
IP address blocks:        2804:4348:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:93:3f:47:86:1f:db:d9:a9:09:0b:aa:50:3d:3c:83:0d:d4:b8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
        Validity
            Not Before: Feb 14 13:55:00 2022 GMT
            Not After : Feb 13 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:d4:bf:b2:40:50:5e:50:e7:a8:2c:6d:12:
                    54:bb:5e:f4:0d:c0:b0:81:d4:11:c4:90:87:28:94:
                    eb:8d:58:cf:f9:0b:04:96:b0:8f:5e:e1:97:3f:27:
                    d8:d2:50:fb:93:18:9c:be:ee:64:cf:2a:af:07:3f:
                    e7:72:fd:21:13:48:57:75:35:dd:08:67:c6:22:33:
                    dd:41:2c:aa:4d:2f:c6:8b:4a:97:0a:48:d8:9d:da:
                    17:ac:28:32:c5:eb:d6:aa:54:96:c5:5c:97:fb:40:
                    11:2b:00:d6:5e:1b:18:de:e8:49:2a:0e:f7:ef:75:
                    c5:fb:ab:1e:d6:19:2e:e1:2a:63:88:a4:0c:84:68:
                    d6:25:71:36:a3:78:d0:0d:af:c6:3a:16:14:6d:2d:
                    28:47:22:cd:19:e9:0f:54:a9:17:71:9b:3a:44:30:
                    75:78:f2:df:53:bc:fd:88:1a:5b:ad:54:ad:05:e3:
                    c9:b3:bb:4d:11:09:20:4b:0d:fc:15:d0:c5:2b:ce:
                    0c:f4:75:29:3c:ee:42:21:64:8d:2b:4d:fd:b4:32:
                    45:f5:30:83:95:43:40:ae:de:fa:e1:d5:23:1c:cd:
                    5d:51:25:85:7d:8c:e6:9b:c4:27:57:4a:c1:48:97:
                    21:66:03:06:39:0b:da:94:b5:23:b1:0e:18:4a:d7:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:F5:6B:4A:AD:1F:8A:57:8C:80:D5:8E:D0:5E:88:CF:53:45:AC
            X509v3 Authority Key Identifier:
                keyid:A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:e3:40:5a:da:1b:7f:3d:b1:03:aa:32:45:74:44:9e:2c:
         d5:8e:6a:c6:0c:54:5e:a9:2e:67:b5:be:c7:c0:eb:b6:78:65:
         99:52:7b:ab:1f:64:e1:30:1d:b1:d7:32:ae:b4:76:f7:57:9b:
         16:30:24:40:c4:05:b9:7f:6f:49:18:76:2a:9b:b7:6d:14:06:
         63:71:f4:5f:19:0c:3a:72:07:96:85:f6:9e:2c:63:76:a5:1c:
         39:d9:89:37:61:6b:3d:f1:9c:c4:dd:d0:30:b4:91:38:37:98:
         83:95:48:f9:47:31:c3:07:bf:f8:ab:95:f8:f5:83:27:50:7e:
         4c:6c:22:82:37:eb:4f:20:87:40:f6:63:5b:af:74:1b:6f:cf:
         64:58:31:9a:16:49:0f:24:f1:27:01:a1:28:34:b3:62:f5:8f:
         61:af:05:5a:53:e1:c0:d9:73:89:69:29:fd:cc:a5:34:41:f7:
         35:b2:30:7d:26:5d:08:8c:fb:0a:1d:4e:22:1a:16:78:f6:87:
         e5:10:6f:8e:05:0b:a2:02:7f:f0:c3:1e:51:99:90:75:aa:8a:
         41:fe:83:2d:0d:93:1d:f8:64:7a:72:94:d2:df:6d:00:db:28:
         7f:05:dc:b7:5e:41:49:ef:b6:03:bf:35:a2:23:83:4e:8d:b3:
         ee:a0:cb:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org