Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (raw, json)
Hash identifier:          oAAE8mOAgXNn/uEwRpJtemq4wiFhkeASXtvaLmGdXlY=
Subject key identifier:   51:9A:44:99:F8:F6:59:6B:E7:B6:B0:D7:9C:B6:66:69:9F:38:7A:BD
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       684CE80EE5536E13D8A20BF5293D13910E25F675
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:24 +0000
ROA not before:           Tue 23 Apr 2024 13:23:24 +0000
ROA not after:            Tue 22 Apr 2025 13:28:24 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4c:e8:0e:e5:53:6e:13:d8:a2:0b:f5:29:3d:13:91:0e:25:f6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:24 2024 GMT
            Not After : Apr 22 13:28:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:e5:58:c8:dd:9f:d9:3a:c7:4f:bf:e2:e4:
                    4a:11:4c:88:bd:bf:77:29:25:c9:82:24:8f:ff:8f:
                    f6:91:ac:5c:4b:53:26:37:44:8a:ea:10:37:46:25:
                    f6:92:40:43:7d:20:87:1a:82:58:4d:57:55:3d:db:
                    67:e1:e8:63:ea:9e:32:b6:5b:69:5d:f9:ab:53:ff:
                    71:b8:c7:e7:aa:3d:0a:f4:22:0f:79:83:75:66:89:
                    60:08:12:12:48:61:98:31:d3:0d:e5:1d:31:19:64:
                    94:ec:a9:e7:d2:12:21:1b:99:ad:39:ce:2a:5d:79:
                    b9:92:c4:8c:0e:4f:38:b0:11:95:a7:83:5a:aa:03:
                    ca:07:bc:e1:83:11:db:e5:eb:2e:60:ec:4b:2b:b6:
                    47:69:78:10:32:85:19:3b:6a:ef:f0:cf:8d:53:ee:
                    97:dd:c7:08:81:b5:24:e4:37:b9:08:0f:25:9a:14:
                    c5:fe:ed:49:9e:e8:79:18:23:d4:29:55:6f:3a:bd:
                    d6:38:5a:a7:d2:38:44:da:5c:02:8f:81:5d:f8:32:
                    2f:40:c4:fb:28:29:82:c7:31:85:d1:32:cd:6d:6e:
                    65:6d:8f:5c:55:93:3d:8d:dd:a1:5c:33:f2:27:bf:
                    64:01:31:a9:e4:e2:1d:61:b0:23:d2:4e:0d:ac:a9:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9A:44:99:F8:F6:59:6B:E7:B6:B0:D7:9C:B6:66:69:9F:38:7A:BD
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         20:38:01:79:be:9c:63:f7:1c:95:f6:21:f8:0b:81:33:f7:0d:
         b7:15:df:4b:cb:57:52:ac:6f:41:29:66:4f:c2:b8:04:f1:26:
         48:63:1d:f7:e0:28:86:56:0a:f9:f5:34:07:b3:c9:fa:52:ea:
         f8:96:fd:63:49:23:93:a1:1a:90:f7:c5:42:28:17:be:4d:42:
         4a:28:80:33:99:45:6d:79:3a:7c:4d:48:f0:89:c0:e9:a4:9b:
         0b:a3:fa:90:7c:f3:62:3d:4a:8b:1c:8c:13:4b:5c:b2:0e:aa:
         84:2d:ec:7d:90:ff:d7:06:21:d9:ff:fd:db:11:5f:6f:b2:b9:
         50:e8:7c:88:1c:2e:e2:bd:dd:d3:e9:0f:b4:17:ce:95:3f:77:
         b7:30:37:eb:a0:48:86:2e:48:10:ef:77:10:0e:e4:e1:46:69:
         e1:e1:d6:0b:6e:fa:e3:9e:d6:b4:ef:30:3d:08:e0:d0:17:39:
         71:cf:2d:e3:dd:27:6f:5c:fd:71:fa:60:73:63:70:ae:56:4d:
         b3:5a:35:2d:83:63:b0:97:0a:bb:f1:e3:72:aa:bb:fb:27:4e:
         c9:61:9e:f0:96:ec:d7:6d:54:b3:88:5d:1a:bc:e3:c5:6d:d6:
         24:ec:84:e6:30:f9:22:63:45:a5:cb:c7:37:92:f2:4a:1a:01:
         ec:56:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org