Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33322d3335203d3e20323639353734.roa
File:                     323830343a363661383a3a2f33322d3335203d3e20323639353734.roa (raw, json)
Hash identifier:          pxKjs//wqRu4UOSL4i8B6lYboriz+KPdxnucYR+TToo=
Subject key identifier:   35:9E:80:60:F9:A9:2B:7C:33:2B:FA:7D:98:26:5E:92:7B:4F:81:53
Certificate issuer:       /CN=D5404D3C46CA2684173E7ADB871E79F544D8EBBC
Certificate serial:       47AD6D1ACECE8179A1C793B2D88D77C16877BDD3
Authority key identifier: D5:40:4D:3C:46:CA:26:84:17:3E:7A:DB:87:1E:79:F5:44:D8:EB:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33322d3335203d3e20323639353734.roa
Signing time:             Thu 26 Oct 2023 12:26:35 +0000
ROA not before:           Thu 26 Oct 2023 12:21:35 +0000
ROA not after:            Thu 24 Oct 2024 12:26:35 +0000
asID:                     269574
IP address blocks:        2804:66a8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ad:6d:1a:ce:ce:81:79:a1:c7:93:b2:d8:8d:77:c1:68:77:bd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5404D3C46CA2684173E7ADB871E79F544D8EBBC
        Validity
            Not Before: Oct 26 12:21:35 2023 GMT
            Not After : Oct 24 12:26:35 2024 GMT
        Subject: CN=359E8060F9A92B7C332BFA7D98265E927B4F8153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:ba:6c:f3:9c:b5:2e:91:c0:f4:b8:70:70:
                    4b:48:50:a9:27:f2:ed:1a:93:f3:14:43:9b:65:58:
                    bc:49:08:2f:30:dc:af:b1:7f:29:9b:6a:71:55:1e:
                    b8:f7:a0:a5:cd:9f:93:4e:98:62:c2:ad:c9:73:8d:
                    dd:78:f3:76:65:a7:45:2c:87:d5:1e:65:f0:82:96:
                    cb:48:14:b1:7b:6b:d7:43:99:a7:2d:bc:a1:21:56:
                    c2:a6:f0:f9:c4:5f:72:d8:57:cc:3c:85:d7:fe:b7:
                    de:a9:e5:d7:7e:69:69:b1:cf:af:df:c3:6d:a8:73:
                    fe:ee:64:f6:0f:76:33:00:a4:7e:74:be:e4:d5:1e:
                    c4:ae:f6:21:b2:da:a7:ab:38:23:a2:c8:17:34:92:
                    dc:6e:fb:b1:20:fb:c9:63:b1:3d:76:7c:7a:cd:cb:
                    4f:03:b5:8b:60:b0:b2:02:6b:67:33:34:97:9a:4a:
                    f1:8e:af:78:13:3a:4e:25:a6:47:a8:6f:c3:03:65:
                    ca:74:56:0e:30:1f:b5:c9:40:79:46:b4:22:85:c2:
                    bc:5a:1c:38:74:4a:0b:de:28:ba:e1:87:a2:a7:c2:
                    bc:74:f2:c3:cf:6a:94:1e:10:9d:0e:70:70:d3:31:
                    e7:ee:bb:8d:6b:64:f2:07:f0:05:91:8b:9b:23:a5:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:80:60:F9:A9:2B:7C:33:2B:FA:7D:98:26:5E:92:7B:4F:81:53
            X509v3 Authority Key Identifier:
                keyid:D5:40:4D:3C:46:CA:26:84:17:3E:7A:DB:87:1E:79:F5:44:D8:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33322d3335203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:91:67:27:e3:ed:4b:75:6b:7e:a1:a8:7e:5e:96:2f:3a:8f:
         43:27:34:bb:55:66:9b:35:41:ac:e7:27:4a:b8:7b:57:60:c6:
         1e:7b:1b:dd:76:f2:cc:0b:42:de:fc:23:e8:fa:c7:15:bc:d6:
         69:a2:dc:c7:b0:79:9c:16:09:64:49:ee:00:8e:93:4c:74:91:
         c7:30:f4:6e:dc:dc:e8:a3:2b:c5:91:7a:9d:27:56:67:8f:39:
         dd:21:2d:dd:c1:74:29:d0:d0:86:a5:9a:0d:e4:fd:40:7e:ef:
         35:56:e1:82:8b:b8:29:e7:af:e4:8d:9c:93:f2:4e:36:fe:82:
         00:17:3a:43:51:9a:28:1e:18:c2:4e:cb:bc:68:7c:9c:32:de:
         50:d7:a2:d8:fa:65:13:bd:84:7e:39:0e:14:2d:0e:15:77:05:
         32:f7:e9:7a:43:36:f0:c6:2c:2c:d8:e8:0e:98:b5:1d:51:5f:
         06:09:ed:c3:78:9f:88:0f:e4:77:3e:2b:7d:9d:3f:40:a8:1d:
         e9:cc:d0:57:2a:0e:db:e3:46:9a:26:21:e2:8f:51:e7:ff:4f:
         a3:8e:ae:0c:bf:89:3d:44:eb:96:cb:89:34:c0:12:bc:de:d5:
         6b:1b:d4:19:9e:ac:60:16:6c:56:81:06:77:23:72:10:32:60:
         96:98:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org