Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a3a2f33342d3334203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33342d3334203d3e20323730343430.roa (raw, json)
Hash identifier:          CbgovC4TkeruAWYyDKyV/0Z1uPqfk4s7g66A1gNP5zM=
Subject key identifier:   51:86:29:12:52:00:E1:20:F3:82:46:40:06:C1:EF:62:5F:39:8B:E4
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       6D905931298084837F45490097EEC54D920FF0
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a3a2f33342d3334203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:24 +0000
ROA not before:           Tue 23 Apr 2024 13:23:24 +0000
ROA not after:            Tue 22 Apr 2025 13:28:24 +0000
asID:                     270440
IP address blocks:        2804:6c04::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:90:59:31:29:80:84:83:7f:45:49:00:97:ee:c5:4d:92:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:24 2024 GMT
            Not After : Apr 22 13:28:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:87:5d:45:68:88:a9:a6:53:f6:49:74:2d:
                    7a:c7:0c:a7:f2:56:c9:bb:39:58:a6:7f:eb:8c:b9:
                    07:a1:ea:0a:85:6f:3f:19:d6:c6:2d:f1:46:12:40:
                    69:ae:d8:69:4b:2a:6d:37:a2:ef:7e:39:7e:fe:5e:
                    82:90:5f:00:a3:3e:3f:74:6f:2d:07:9e:2f:16:cb:
                    26:f3:1e:75:8d:d9:23:d7:66:ca:67:b2:4a:3a:17:
                    e8:11:24:4d:70:34:63:fe:c7:a2:93:4f:27:84:97:
                    0a:5d:60:9e:07:3b:1d:2d:74:c8:dc:a9:67:59:55:
                    21:13:0e:df:ec:d8:b1:33:a2:6c:43:89:41:27:4c:
                    43:41:52:f2:82:99:6c:00:b8:41:ca:34:c8:36:92:
                    da:e1:20:51:52:0b:34:62:65:3a:61:1b:5e:38:83:
                    8c:be:d7:e5:0e:72:8f:da:23:61:48:22:b2:34:61:
                    a0:22:9c:24:67:b2:7b:89:8b:54:b4:60:c2:39:02:
                    aa:30:45:5a:49:10:84:23:7d:92:4d:65:bc:bf:7c:
                    fd:3f:d2:f9:e9:dc:1f:18:09:45:1d:33:49:5b:a6:
                    12:03:e5:6e:4a:6a:de:43:5c:0f:f6:35:53:29:5c:
                    88:13:5d:54:8f:c2:5d:a8:9d:f2:80:5a:8b:f5:78:
                    b7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:29:12:52:00:E1:20:F3:82:46:40:06:C1:EF:62:5F:39:8B:E4
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a3a2f33342d3334203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:2e:34:82:14:7f:b4:4c:0b:1e:0e:c7:7b:0c:52:0c:a1:
         34:9d:52:4d:ab:a8:fa:83:44:bf:94:c8:85:3e:59:2f:9c:97:
         69:8a:ff:80:83:bd:e6:65:22:ee:1d:6a:66:bf:35:4e:e9:43:
         2a:e2:38:e8:90:fb:3b:8e:6f:45:08:9b:b3:7d:a8:3d:0e:f9:
         29:4c:f8:88:85:f4:09:47:40:c1:84:4d:c8:1e:79:e3:9a:fc:
         07:03:d6:01:fb:2e:26:01:97:e6:39:99:3c:d5:4b:65:af:84:
         1e:36:18:82:57:58:26:92:9b:15:f1:07:99:46:dc:63:03:3d:
         86:4f:d7:96:d0:60:d1:38:60:1e:9c:80:7b:7e:ff:aa:8d:09:
         0a:bf:ef:1f:d2:54:8a:af:bc:44:e7:82:e3:93:49:7f:d5:41:
         b6:0b:c4:41:d7:9d:52:d1:87:25:e2:0b:ec:7a:66:d7:d0:cd:
         92:44:c0:06:5f:aa:14:4c:bc:6f:d1:22:56:d8:4d:02:5a:4e:
         b0:12:45:0e:71:27:54:81:77:44:a3:0c:05:74:f1:03:e9:33:
         d5:67:fe:bd:12:26:09:a6:68:bf:6f:b8:2b:75:cf:82:ca:4a:
         4a:a8:6d:58:67:0b:9c:ab:e9:c1:2d:a1:9b:9f:b3:75:13:4e:
         33:4a:92:47
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgITbZBZMSmAhIN/RUkAl+7FTZIP8DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhBRDcyQTlGNDZDRjU3OUJEOUY1QTVFQUVBRTI5Q0Q0RDg2
NkUyN0M0MB4XDTI0MDQyMzEzMjMyNFoXDTI1MDQyMjEzMjgyNFowggItMYICKTCC
AiUGA1UEAxOCAhwzMDgyMDEwQTAyODIwMTAxMDBCMTE5ODc1RDQ1Njg4OEE5QTY1
M0Y2NDk3NDJEN0FDNzBDQTdGMjU2QzlCQjM5NThBNjdGRUI4Q0I5MDdBMUVBMEE4
NTZGM0YxOUQ2QzYyREYxNDYxMjQwNjlBRUQ4Njk0QjJBNkQzN0EyRUY3RTM5N0VG
RTVFODI5MDVGMDBBMzNFM0Y3NDZGMkQwNzlFMkYxNkNCMjZGMzFFNzU4REQ5MjNE
NzY2Q0E2N0IyNEEzQTE3RTgxMTI0NEQ3MDM0NjNGRUM3QTI5MzRGMjc4NDk3MEE1
RDYwOUUwNzNCMUQyRDc0QzhEQ0E5Njc1OTU1MjExMzBFREZFQ0Q4QjEzM0EyNkM0
Mzg5NDEyNzRDNDM0MTUyRjI4Mjk5NkMwMEI4NDFDQTM0QzgzNjkyREFFMTIwNTE1
MjBCMzQ2MjY1M0E2MTFCNUUzODgzOENCRUQ3RTUwRTcyOEZEQTIzNjE0ODIyQjIz
NDYxQTAyMjlDMjQ2N0IyN0I4OThCNTRCNDYwQzIzOTAyQUEzMDQ1NUE0OTEwODQy
MzdEOTI0RDY1QkNCRjdDRkQzRkQyRjlFOURDMUYxODA5NDUxRDMzNDk1QkE2MTIw
M0U1NkU0QTZBREU0MzVDMEZGNjM1NTMyOTVDODgxMzVENTQ4RkMyNURBODlERjI4
MDVBOEJGNTc4Qjc2RjAyMDMwMTAwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCxGYddRWiIqaZT9kl0LXrHDKfyVsm7OVimf+uMuQeh6gqFbz8Z1sYt
8UYSQGmu2GlLKm03ou9+OX7+XoKQXwCjPj90by0Hni8WyybzHnWN2SPXZspnsko6
F+gRJE1wNGP+x6KTTyeElwpdYJ4HOx0tdMjcqWdZVSETDt/s2LEzomxDiUEnTENB
UvKCmWwAuEHKNMg2ktrhIFFSCzRiZTphG144g4y+1+UOco/aI2FIIrI0YaAinCRn
snuJi1S0YMI5AqowRVpJEIQjfZJNZby/fP0/0vnp3B8YCUUdM0lbphID5W5Kat5D
XA/2NVMpXIgTXVSPwl2onfKAWov1eLdvAgMBAAGjggJRMIICTTAdBgNVHQ4EFgQU
UYYpElIA4SDzgkZABsHvYl85i+QwHwYDVR0jBBgwFoAUrXKp9Gz1eb2fWl6urinN
TYZuJ8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNVHR8EgYwwgYkwgYaggYOggYCGfnJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2dFNGZXb2pOQlhhaW1j
TFdWTFJxdjRqNTlodmdjOTg2NlB0b1RQdEdrSjIvMS9BRDcyQTlGNDZDRjU3OUJE
OUY1QTVFQUVBRTI5Q0Q0RDg2NkUyN0M0LmNybDB4BggrBgEFBQcBAQRsMGowaAYI
KwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmlj
YnJfcmVwby8xL0FENzJBOUY0NkNGNTc5QkQ5RjVBNUVBRUFFMjlDRDREODY2RTI3
QzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWltY0xXVkxS
cXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzEvMzIzODMwMzQzYTM2NjMzMDM0M2Ez
YTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMwMzQzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKARs
BAAwDQYJKoZIhvcNAQELBQADggEBAAoILjSCFH+0TAseDsd7DFIMoTSdUk2rqPqD
RL+UyIU+WS+cl2mK/4CDveZlIu4dama/NU7pQyriOOiQ+zuOb0UIm7N9qD0O+SlM
+IiF9AlHQMGETcgeeeOa/AcD1gH7LiYBl+Y5mTzVS2WvhB42GIJXWCaSmxXxB5lG
3GMDPYZP15bQYNE4YB6cgHt+/6qNCQq/7x/SVIqvvETnguOTSX/VQbYLxEHXnVLR
hyXiC+x6ZtfQzZJEwAZfqhRMvG/RIlbYTQJaTrASRQ5xJ1SBd0SjDAV08QPpM9Vn
/r0SJgmmaL9vuCt1z4LKSkqobVhnC5yr6cEtoZufs3UTTjNKkkc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org