Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a633030303a3a2f33342d3334203d3e20323733333735.roa
File:                     323830343a386462343a633030303a3a2f33342d3334203d3e20323733333735.roa (raw, json)
Hash identifier:          zI0EYDuiyDDQGMVGkSPDrwW/Emi4u44KNGOgtixIExw=
Subject key identifier:   72:6F:7F:35:7E:EF:83:C2:A6:AB:66:0C:B4:8E:AD:FD:B7:00:EF:A8
Certificate issuer:       /CN=2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417
Certificate serial:       2B8AEDEB42C4BE821F2F8E0D55E6C0FDF432CE0F
Authority key identifier: 2F:3D:7E:73:9C:4B:F0:33:CE:B8:C7:FE:7B:45:E4:FC:93:46:F4:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a633030303a3a2f33342d3334203d3e20323733333735.roa
Signing time:             Mon 20 Nov 2023 20:30:01 +0000
ROA not before:           Mon 20 Nov 2023 20:25:01 +0000
ROA not after:            Mon 18 Nov 2024 20:30:01 +0000
asID:                     273375
IP address blocks:        2804:8db4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8a:ed:eb:42:c4:be:82:1f:2f:8e:0d:55:e6:c0:fd:f4:32:ce:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417
        Validity
            Not Before: Nov 20 20:25:01 2023 GMT
            Not After : Nov 18 20:30:01 2024 GMT
        Subject: CN=726F7F357EEF83C2A6AB660CB48EADFDB700EFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:58:19:35:82:df:c9:ac:72:14:91:85:3e:fb:
                    98:3c:f5:dc:d7:9b:ff:f1:30:8a:56:af:4d:95:18:
                    a9:1f:d1:4c:16:33:58:82:2b:45:21:51:f8:e8:2b:
                    e1:8f:2d:f6:d0:87:c1:d9:96:11:f5:7e:74:10:6c:
                    6b:e2:ca:a7:13:53:a3:99:51:ef:5b:15:d1:a1:d4:
                    79:27:7e:ac:90:74:c9:6e:2e:a9:11:6e:ad:5a:c4:
                    38:d6:73:1a:b1:46:ff:a4:31:4b:a3:9e:26:16:80:
                    2a:02:d4:a2:ea:0d:fd:66:27:b6:1b:40:31:dd:3b:
                    70:c7:79:44:8b:fd:b3:81:18:e7:fd:9d:d4:a4:eb:
                    4c:da:d8:8f:04:aa:f2:d2:7f:e7:bd:b6:ed:af:5d:
                    98:03:af:b7:28:76:84:e0:2d:c4:ee:01:0f:29:c2:
                    8e:4e:51:09:fd:90:cc:2c:a4:0d:eb:7b:1a:39:01:
                    dc:d2:ce:bd:da:1a:00:0e:af:c2:82:f7:2d:56:2c:
                    02:b2:79:82:74:b4:27:99:0d:34:5c:ff:56:a0:1b:
                    77:d9:9e:a9:0d:e3:11:8f:6d:40:2f:79:ad:87:bd:
                    7b:0b:0b:b7:37:28:37:c7:98:38:78:28:15:72:32:
                    99:53:d3:81:b3:41:70:86:92:fa:0d:c1:23:61:cb:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:7F:35:7E:EF:83:C2:A6:AB:66:0C:B4:8E:AD:FD:B7:00:EF:A8
            X509v3 Authority Key Identifier:
                keyid:2F:3D:7E:73:9C:4B:F0:33:CE:B8:C7:FE:7B:45:E4:FC:93:46:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a633030303a3a2f33342d3334203d3e20323733333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8db4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:de:e2:68:0e:85:39:99:a0:5a:f1:18:82:51:a2:c1:36:
         0e:6a:d7:15:8c:4e:e6:ab:ea:77:fc:b2:c2:0b:bb:72:b8:22:
         f7:5e:0d:41:2d:7a:83:86:42:42:84:77:74:48:f1:d4:99:fc:
         de:2f:ef:93:19:56:f0:9c:29:20:2c:b6:14:a2:6d:01:a5:11:
         e0:5b:80:42:8e:fd:84:11:d1:07:40:57:f7:b7:3a:62:74:cd:
         bd:a4:35:a0:15:e0:da:66:bb:af:85:1d:8a:a8:e7:64:63:ce:
         9a:f0:cd:ef:be:7b:3e:c5:a1:8c:2f:34:d1:5f:50:46:32:57:
         9d:81:ef:98:08:1a:79:5e:5d:80:ba:23:e6:fd:03:de:ad:5d:
         6f:33:0d:e3:79:ef:b8:5b:7b:56:3f:8b:c8:fb:e3:01:cb:17:
         e6:3a:dc:12:72:bb:7a:d3:bc:f0:9e:18:29:d2:b5:44:1d:df:
         12:81:41:85:e7:b8:0e:02:2e:6c:85:f1:17:3f:00:a0:29:39:
         18:d5:6f:6f:5f:0b:64:15:8a:a3:78:c5:86:ff:ba:2e:a1:a4:
         d0:84:ff:6e:5d:d3:31:a5:56:e5:71:6c:84:96:35:a7:68:09:
         fc:fc:16:65:69:5d:00:d2:7b:22:9c:46:ab:1f:71:5a:b3:71:
         82:d6:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org