Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          POqeORnnCHEUInB3j59SElWLKlzLfjCk85ZeoKDfmSE=
Subject key identifier:   42:67:55:79:96:6C:F7:2B:25:3E:D9:1F:E9:1A:E8:FF:37:A5:24:27
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       785CC5726282E990A15C62F087728EC3684E4596
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:23 +0000
ROA not before:           Tue 23 Apr 2024 13:23:23 +0000
ROA not after:            Tue 22 Apr 2025 13:28:23 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5c:c5:72:62:82:e9:90:a1:5c:62:f0:87:72:8e:c3:68:4e:45:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:23 2024 GMT
            Not After : Apr 22 13:28:23 2025 GMT
        Subject: CN=3082010A0282010100B822A4F444EC65ACB5BFB20AE946E7D544ABD779DDDEF0ACA0D582AA670683A8E3BD28326806773DB62A256DCAA4C6EFDD939F1565EA0C47A48EDAFF16A2729AC18BF000A8EF52A2500961FB4050EA94F2983B60184D91FCCC2A941784E42FE564BC080B7D7DE98E5380F47B5D403C52160630A6644E1CE2DD006234F3E3E15F1DB1CBBB304950E643C7E3D765D1C08905D616B2A97A01F3D47568017AAD00405C86C7A16AE6FDF2CC6B3CA25400AFE784A976A3B5024BE2FB0FED5B9A18715BCD023197BE16D9D81E2E9316B8AF73C5C195D122174CEBE5A5F2A3A5C09E89F8852C26FCA3F6CFF264DA3FA0B2B5582A6ADACC2D65EC607E965D9F6FC9C2E6050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:a4:f4:44:ec:65:ac:b5:bf:b2:0a:e9:46:
                    e7:d5:44:ab:d7:79:dd:de:f0:ac:a0:d5:82:aa:67:
                    06:83:a8:e3:bd:28:32:68:06:77:3d:b6:2a:25:6d:
                    ca:a4:c6:ef:dd:93:9f:15:65:ea:0c:47:a4:8e:da:
                    ff:16:a2:72:9a:c1:8b:f0:00:a8:ef:52:a2:50:09:
                    61:fb:40:50:ea:94:f2:98:3b:60:18:4d:91:fc:cc:
                    2a:94:17:84:e4:2f:e5:64:bc:08:0b:7d:7d:e9:8e:
                    53:80:f4:7b:5d:40:3c:52:16:06:30:a6:64:4e:1c:
                    e2:dd:00:62:34:f3:e3:e1:5f:1d:b1:cb:bb:30:49:
                    50:e6:43:c7:e3:d7:65:d1:c0:89:05:d6:16:b2:a9:
                    7a:01:f3:d4:75:68:01:7a:ad:00:40:5c:86:c7:a1:
                    6a:e6:fd:f2:cc:6b:3c:a2:54:00:af:e7:84:a9:76:
                    a3:b5:02:4b:e2:fb:0f:ed:5b:9a:18:71:5b:cd:02:
                    31:97:be:16:d9:d8:1e:2e:93:16:b8:af:73:c5:c1:
                    95:d1:22:17:4c:eb:e5:a5:f2:a3:a5:c0:9e:89:f8:
                    85:2c:26:fc:a3:f6:cf:f2:64:da:3f:a0:b2:b5:58:
                    2a:6a:da:cc:2d:65:ec:60:7e:96:5d:9f:6f:c9:c2:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:55:79:96:6C:F7:2B:25:3E:D9:1F:E9:1A:E8:FF:37:A5:24:27
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         3e:78:d0:a0:ee:cf:e4:4b:0e:73:e0:24:2a:90:ce:a0:ac:c8:
         b6:db:00:d5:63:55:47:ab:71:9b:e5:b2:16:30:44:bd:76:a2:
         17:bc:43:61:24:1d:1c:a8:7c:cf:1b:7a:89:25:c7:43:3d:f1:
         d0:de:07:a1:2c:ec:20:db:58:70:49:f2:c9:a0:ac:7b:ac:73:
         f7:02:c3:54:89:0e:51:fb:43:0a:d3:39:ea:ee:e5:4e:c6:be:
         f2:73:66:27:9e:81:e4:3e:c0:ba:c1:25:e4:2d:7d:d1:a9:bd:
         b2:ba:cf:91:4c:7e:a1:81:55:fe:8c:12:1f:bb:6e:a9:72:34:
         25:59:f1:4f:61:e8:93:9f:3a:b1:4e:22:40:1c:67:41:d4:05:
         41:5d:3d:31:1d:e2:16:09:90:ed:d6:27:32:f7:e8:ac:2a:98:
         3a:7a:87:e2:99:e6:3b:b9:96:b9:95:0f:41:77:e6:6a:51:be:
         f9:c8:35:bf:d1:af:bd:f2:70:f4:b5:ff:f6:ac:89:32:5b:3d:
         f5:6a:af:55:1c:20:16:c6:93:ab:b8:a3:56:6d:f3:d6:25:d3:
         b8:33:68:51:e3:88:33:22:bd:d2:75:eb:92:e8:d6:1b:52:5e:
         75:bc:f2:f9:03:61:6d:71:53:64:49:4b:44:4e:a7:d7:55:84:
         43:ce:ec:59
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUeFzFcmKC6ZChXGLwh3KOw2hORZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkE5RjQ2Q0Y1NzlCRDlGNUE1RUFFQUUyOUNENEQ4
NjZFMjdDNDAeFw0yNDA0MjMxMzIzMjNaFw0yNTA0MjIxMzI4MjNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgyMkE0RjQ0NEVDNjVBQ0I1
QkZCMjBBRTk0NkU3RDU0NEFCRDc3OUREREVGMEFDQTBENTgyQUE2NzA2ODNBOEUz
QkQyODMyNjgwNjc3M0RCNjJBMjU2RENBQTRDNkVGREQ5MzlGMTU2NUVBMEM0N0E0
OEVEQUZGMTZBMjcyOUFDMThCRjAwMEE4RUY1MkEyNTAwOTYxRkI0MDUwRUE5NEYy
OTgzQjYwMTg0RDkxRkNDQzJBOTQxNzg0RTQyRkU1NjRCQzA4MEI3RDdERTk4RTUz
ODBGNDdCNUQ0MDNDNTIxNjA2MzBBNjY0NEUxQ0UyREQwMDYyMzRGM0UzRTE1RjFE
QjFDQkJCMzA0OTUwRTY0M0M3RTNENzY1RDFDMDg5MDVENjE2QjJBOTdBMDFGM0Q0
NzU2ODAxN0FBRDAwNDA1Qzg2QzdBMTZBRTZGREYyQ0M2QjNDQTI1NDAwQUZFNzg0
QTk3NkEzQjUwMjRCRTJGQjBGRUQ1QjlBMTg3MTVCQ0QwMjMxOTdCRTE2RDlEODFF
MkU5MzE2QjhBRjczQzVDMTk1RDEyMjE3NENFQkU1QTVGMkEzQTVDMDlFODlGODg1
MkMyNkZDQTNGNkNGRjI2NERBM0ZBMEIyQjU1ODJBNkFEQUNDMkQ2NUVDNjA3RTk2
NUQ5RjZGQzlDMkU2MDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuCKk9ETsZay1v7IK6Ubn1USr13nd3vCsoNWCqmcGg6jjvSgyaAZ3
PbYqJW3KpMbv3ZOfFWXqDEekjtr/FqJymsGL8ACo71KiUAlh+0BQ6pTymDtgGE2R
/MwqlBeE5C/lZLwIC3196Y5TgPR7XUA8UhYGMKZkThzi3QBiNPPj4V8dscu7MElQ
5kPH49dl0cCJBdYWsql6AfPUdWgBeq0AQFyGx6Fq5v3yzGs8olQAr+eEqXajtQJL
4vsP7VuaGHFbzQIxl74W2dgeLpMWuK9zxcGV0SIXTOvlpfKjpcCeifiFLCb8o/bP
8mTaP6CytVgqatrMLWXsYH6WXZ9vycLmBQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FEJnVXmWbPcrJT7ZH+ka6P83pSQnMB8GA1UdIwQYMBaAFK1yqfRs9Xm9n1perq4p
zU2GbifEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWlt
Y0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzEvQUQ3MkE5RjQ2Q0Y1NzlC
RDlGNUE1RUFFQUUyOUNENEQ4NjZFMjdDNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRDcyQTlGNDZDRjU3OUJEOUY1QTVFQUVBRTI5Q0Q0RDg2NkUy
N0M0LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0U0Zldvak5CWGFpbWNMV1ZM
UnF2NGo1OWh2Z2M5ODY2UHRvVFB0R2tKMi8xLzMyMzgzMDM0M2EzNjYzMzAzNDNh
NjMzMDMwMzAzYTNhMmYzMzM3MmQzMzM3MjAzZDNlMjAzMjM3MzAzNDM0MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgMoBGwEwDANBgkqhkiG9w0BAQsFAAOCAQEAPnjQoO7P5EsOc+AkKpDO
oKzIttsA1WNVR6txm+WyFjBEvXaiF7xDYSQdHKh8zxt6iSXHQz3x0N4HoSzsINtY
cEnyyaCse6xz9wLDVIkOUftDCtM56u7lTsa+8nNmJ56B5D7AusEl5C190am9srrP
kUx+oYFV/owSH7tuqXI0JVnxT2Hok586sU4iQBxnQdQFQV09MR3iFgmQ7dYnMvfo
rCqYOnqH4pnmO7mWuZUPQXfmalG++cg1v9GvvfJw9LX/9qyJMls99WqvVRwgFsaT
q7ijVm3z1iXTuDNoUeOIMyK90nXrkujWG1Jedbzy+QNhbXFTZElLRE6n11WEQ87s
WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org