Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33332d3333203d3e20323730343430.roa (raw, json)
Hash identifier:          E1ANj/cCYdw8sNAFqg/46cK+4lx63ymFEWF+Syh744k=
Subject key identifier:   E8:F1:00:14:E8:6E:7F:14:0A:90:70:B3:81:F8:85:57:1A:92:A7:54
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       34BF67A430936997BE8889575B45CA015921E062
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:23 +0000
ROA not before:           Tue 23 Apr 2024 13:23:23 +0000
ROA not after:            Tue 22 Apr 2025 13:28:23 +0000
asID:                     270440
IP address blocks:        2804:6c04::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:67:a4:30:93:69:97:be:88:89:57:5b:45:ca:01:59:21:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:23 2024 GMT
            Not After : Apr 22 13:28:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:82:ea:dc:60:a1:d9:78:0e:d1:24:05:4a:
                    6b:ac:aa:90:58:49:0a:a0:ec:b0:8b:c0:52:6f:8f:
                    51:a1:5e:89:47:a8:af:00:b6:36:0c:56:f0:46:9d:
                    36:4a:bf:bf:fd:5f:37:4e:13:ab:98:82:a2:a1:9f:
                    24:18:a7:f5:92:a1:46:c2:e2:0d:83:4d:2c:a3:7e:
                    de:b0:4c:b7:8e:58:ab:e9:30:ed:d2:49:03:cc:df:
                    b1:a3:16:1a:81:38:36:53:70:7c:0b:ef:ff:cc:da:
                    34:58:54:3e:f8:70:1f:5f:1f:b9:66:44:a5:7f:4e:
                    99:1e:fb:51:9c:ad:2e:50:ac:9a:0f:5a:58:f1:ee:
                    b1:58:75:8c:6c:d7:68:7c:7d:10:5b:44:fa:b5:99:
                    6b:89:cb:92:47:ec:88:38:55:c7:e8:89:ba:8e:e6:
                    1f:7e:d1:fc:77:51:dc:23:9d:ad:a6:c2:94:58:71:
                    c6:4e:dd:b8:0a:3a:85:e8:fd:ec:38:24:34:dd:76:
                    cd:50:e9:ce:77:d4:4e:f9:ae:80:73:84:a8:79:33:
                    1f:68:0a:4f:e3:f0:de:d1:d7:70:05:ff:62:b2:ad:
                    53:21:02:c0:fc:19:d3:3f:30:7d:49:12:87:3d:63:
                    2d:05:8b:1e:41:17:c9:0d:bc:23:ec:0e:4d:43:36:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:00:14:E8:6E:7F:14:0A:90:70:B3:81:F8:85:57:1A:92:A7:54
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:c3:81:c0:1c:ed:9b:c3:e0:5c:ce:e3:86:06:51:de:65:94:
         40:53:fe:50:30:d0:be:b9:e2:89:33:86:fd:ec:a0:bc:d3:d5:
         61:10:61:3a:d0:c5:c7:3f:18:e2:7b:0b:7e:8d:88:2a:55:f7:
         0e:94:f9:81:b0:52:b9:ca:35:c8:9e:3c:29:d9:8b:e0:c4:e7:
         7b:74:46:7f:ce:0f:c4:63:79:c9:bd:39:0a:73:74:60:4b:27:
         a9:a3:b0:73:7c:12:10:d5:02:4d:d9:dc:de:8f:b8:d2:1b:a3:
         6a:3a:51:a1:fa:ce:95:f6:c0:ee:3b:13:45:a3:67:b3:0a:31:
         21:8d:b6:f7:1d:0c:82:3c:6e:87:7e:b9:33:c6:55:b1:48:51:
         54:f6:a4:7d:f3:ae:4d:e8:d2:8f:7d:65:6a:01:36:32:1c:9e:
         e7:4f:40:77:ce:e2:e7:84:c9:c1:7b:1d:fe:90:02:ad:4a:b5:
         19:91:d4:d9:b4:7d:f2:6c:78:ac:a5:bc:43:56:e3:dc:4d:1b:
         99:ae:41:c2:af:62:2e:93:13:67:ec:5a:3c:04:e9:80:e6:dd:
         2d:30:16:85:ea:62:67:ff:bd:96:9c:e3:cc:ff:c1:e3:a5:c2:
         0e:dd:f9:ff:88:52:bb:54:46:a1:ef:39:46:97:dc:58:24:8a:
         ee:7e:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org