Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          VgCeVlypIc+o1AgOBjI0aoGVRRxuQ6LoEW/EZuEL4AY=
Subject key identifier:   28:B8:BD:A4:BE:2D:3E:9F:9F:30:EC:39:F1:E2:DB:F9:EC:36:8F:66
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       A1AFCA2F8BFE76E64EC9D0AEA0FA6C92F7C6ED
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:24 +0000
ROA not before:           Tue 23 Apr 2024 13:23:24 +0000
ROA not after:            Tue 22 Apr 2025 13:28:24 +0000
asID:                     270440
IP address blocks:        2804:6c04:c800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:af:ca:2f:8b:fe:76:e6:4e:c9:d0:ae:a0:fa:6c:92:f7:c6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:24 2024 GMT
            Not After : Apr 22 13:28:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:83:3c:b2:b4:21:59:7b:cd:79:12:d3:3d:
                    18:0f:77:0d:ae:be:08:da:0c:e5:8d:e9:71:58:cf:
                    f8:54:9b:54:a8:04:b2:ab:1f:80:36:eb:a1:9c:d5:
                    16:e0:a4:47:57:7e:f4:58:45:45:0d:5f:5a:32:b1:
                    26:de:f1:dc:06:8b:ee:3d:e6:5b:75:61:18:41:5b:
                    87:78:0d:46:bd:42:55:52:b2:3e:b9:7b:4d:01:1a:
                    45:1b:ca:c3:df:98:05:dc:70:f8:dc:a3:44:c6:cb:
                    b3:f0:1a:7c:ce:d8:9b:76:9d:75:ff:c7:19:3e:9f:
                    49:a4:fb:1a:7b:55:67:c4:91:8b:c5:cc:a4:1a:10:
                    28:f5:0e:64:2a:50:26:06:4d:db:f2:e5:08:36:28:
                    c0:d7:14:93:e6:c8:8b:ff:80:e7:28:46:9e:db:9c:
                    59:d8:7a:5f:ea:6a:97:48:04:cf:bb:20:0e:9b:30:
                    fc:db:f5:f0:09:d5:9b:fa:8c:34:45:67:36:8c:5d:
                    52:19:72:b1:a3:bb:11:bf:2a:24:a4:aa:2f:44:7b:
                    03:0d:99:5b:9b:ac:cb:93:8c:28:95:92:71:88:4f:
                    31:f3:f0:5b:a3:eb:a5:78:72:91:2c:31:f3:47:c9:
                    a9:94:70:49:a4:a8:d4:b9:dd:fc:4d:3a:63:06:16:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B8:BD:A4:BE:2D:3E:9F:9F:30:EC:39:F1:E2:DB:F9:EC:36:8F:66
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:ab:de:e7:cb:41:82:01:c8:d5:f3:f0:68:39:20:9c:5e:
         04:0f:f2:fd:dc:be:e2:6e:3c:13:f2:79:4d:2d:b9:4e:c1:14:
         de:ee:d9:5d:a8:09:12:09:d3:cb:2c:27:d7:e3:18:e7:d9:d5:
         b2:09:d1:fc:44:4c:d1:ae:24:b8:54:8e:52:e6:0e:cc:14:05:
         69:2c:97:84:54:43:e7:26:dd:f7:b3:3c:61:ea:5a:48:90:04:
         e0:99:dc:42:97:05:a9:e0:bd:b4:80:ee:7b:e3:73:41:33:72:
         68:fb:a7:98:29:71:fe:11:17:18:f4:31:8a:3f:ee:f8:60:af:
         3b:d4:62:43:8b:7e:76:51:99:b0:17:7d:c1:14:3e:c9:44:60:
         e3:8b:9c:17:55:60:7a:eb:47:52:59:96:f0:46:a9:71:25:e6:
         79:bd:a5:23:16:85:57:ea:d3:ad:18:25:fb:f7:1b:fc:21:37:
         bc:bb:a5:83:da:6e:03:df:70:9c:79:03:f4:ef:e1:1d:8f:ce:
         8f:31:d2:0b:bd:c5:1c:4f:21:22:b4:e0:21:b2:5e:7b:b7:14:
         4c:14:57:bd:e3:7b:95:ac:c5:2d:5d:dd:45:db:48:8b:df:11:
         24:30:a9:2a:5c:e9:ce:33:64:4f:63:be:7e:c1:34:50:58:c8:
         61:0d:02:41
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUAKGvyi+L/nbmTsnQrqD6bJL3xu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkE5RjQ2Q0Y1NzlCRDlGNUE1RUFFQUUyOUNENEQ4
NjZFMjdDNDAeFw0yNDA0MjMxMzIzMjRaFw0yNTA0MjIxMzI4MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQwNDgzM0NCMkI0MjE1OTdC
Q0Q3OTEyRDMzRDE4MEY3NzBEQUVCRTA4REEwQ0U1OERFOTcxNThDRkY4NTQ5QjU0
QTgwNEIyQUIxRjgwMzZFQkExOUNENTE2RTBBNDQ3NTc3RUY0NTg0NTQ1MEQ1RjVB
MzJCMTI2REVGMURDMDY4QkVFM0RFNjVCNzU2MTE4NDE1Qjg3NzgwRDQ2QkQ0MjU1
NTJCMjNFQjk3QjREMDExQTQ1MUJDQUMzREY5ODA1REM3MEY4RENBMzQ0QzZDQkIz
RjAxQTdDQ0VEODlCNzY5RDc1RkZDNzE5M0U5RjQ5QTRGQjFBN0I1NTY3QzQ5MThC
QzVDQ0E0MUExMDI4RjUwRTY0MkE1MDI2MDY0RERCRjJFNTA4MzYyOEMwRDcxNDkz
RTZDODhCRkY4MEU3Mjg0NjlFREI5QzU5RDg3QTVGRUE2QTk3NDgwNENGQkIyMDBF
OUIzMEZDREJGNUYwMDlENTlCRkE4QzM0NDU2NzM2OEM1RDUyMTk3MkIxQTNCQjEx
QkYyQTI0QTRBQTJGNDQ3QjAzMEQ5OTVCOUJBQ0NCOTM4QzI4OTU5MjcxODg0RjMx
RjNGMDVCQTNFQkE1Nzg3MjkxMkMzMUYzNDdDOUE5OTQ3MDQ5QTRBOEQ0QjlEREZD
NEQzQTYzMDYxNjg2NzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1ASDPLK0IVl7zXkS0z0YD3cNrr4I2gzljelxWM/4VJtUqASyqx+A
NuuhnNUW4KRHV370WEVFDV9aMrEm3vHcBovuPeZbdWEYQVuHeA1GvUJVUrI+uXtN
ARpFG8rD35gF3HD43KNExsuz8Bp8ztibdp11/8cZPp9JpPsae1VnxJGLxcykGhAo
9Q5kKlAmBk3b8uUINijA1xST5siL/4DnKEae25xZ2Hpf6mqXSATPuyAOmzD82/Xw
CdWb+ow0RWc2jF1SGXKxo7sRvyokpKovRHsDDZlbm6zLk4wolZJxiE8x8/Bbo+ul
eHKRLDHzR8mplHBJpKjUud38TTpjBhaGeQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCi4vaS+LT6fnzDsOfHi2/nsNo9mMB8GA1UdIwQYMBaAFK1yqfRs9Xm9n1perq4p
zU2GbifEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWlt
Y0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzEvQUQ3MkE5RjQ2Q0Y1NzlC
RDlGNUE1RUFFQUUyOUNENEQ4NjZFMjdDNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRDcyQTlGNDZDRjU3OUJEOUY1QTVFQUVBRTI5Q0Q0RDg2NkUy
N0M0LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0U0Zldvak5CWGFpbWNMV1ZM
UnF2NGo1OWh2Z2M5ODY2UHRvVFB0R2tKMi8xLzMyMzgzMDM0M2EzNjYzMzAzNDNh
NjMzODMwMzAzYTNhMmYzMzM3MmQzMzM3MjAzZDNlMjAzMjM3MzAzNDM0MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgMoBGwEyDANBgkqhkiG9w0BAQsFAAOCAQEAK6qr3ufLQYIByNXz8Gg5
IJxeBA/y/dy+4m48E/J5TS25TsEU3u7ZXagJEgnTyywn1+MY59nVsgnR/ERM0a4k
uFSOUuYOzBQFaSyXhFRD5ybd97M8YepaSJAE4JncQpcFqeC9tIDue+NzQTNyaPun
mClx/hEXGPQxij/u+GCvO9RiQ4t+dlGZsBd9wRQ+yURg44ucF1VgeutHUlmW8Eap
cSXmeb2lIxaFV+rTrRgl+/cb/CE3vLulg9puA99wnHkD9O/hHY/OjzHSC73FHE8h
IrTgIbJee7cUTBRXveN7lazFLV3dRdtIi98RJDCpKlzpzjNkT2O+fsE0UFjIYQ0C
QQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org