Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          mulGzSrr76eRrVXBJ1R7Xf6M5TDiZukPITe+v3PJj+s=
Subject key identifier:   57:ED:84:1F:F9:35:94:95:B1:E7:7B:1E:AC:1D:4F:2E:C0:6D:99:AE
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       37130E42BCF82E2C43E6F2E651EE44844A94DD78
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:25 +0000
ROA not before:           Tue 23 Apr 2024 13:23:25 +0000
ROA not after:            Tue 22 Apr 2025 13:28:25 +0000
asID:                     270440
IP address blocks:        2804:6c04:d000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:13:0e:42:bc:f8:2e:2c:43:e6:f2:e6:51:ee:44:84:4a:94:dd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:25 2024 GMT
            Not After : Apr 22 13:28:25 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:90:e3:26:0e:8c:03:ad:eb:68:65:b8:ae:
                    cb:ef:29:dd:eb:fc:8f:4f:f3:22:f1:92:1d:bc:c2:
                    0f:ea:0d:5e:37:98:d4:b0:a2:4a:d3:53:c5:a6:93:
                    62:74:11:78:60:9f:10:fb:20:85:72:fc:42:5a:69:
                    3c:6b:88:d8:3a:eb:72:e2:2c:cd:f6:93:7e:a4:f6:
                    41:f6:cd:47:fb:a2:c8:07:4f:93:8f:31:d5:01:22:
                    3c:1a:c4:e9:54:5d:d1:40:5b:ed:33:c4:f5:b4:e9:
                    fc:b5:59:b9:2a:21:46:1f:1f:2e:69:7f:10:5c:c6:
                    9d:56:e0:7f:de:2d:53:95:b0:f4:d0:24:e8:93:f9:
                    d0:e5:e5:b6:f0:67:1c:68:ac:15:90:ea:9a:84:c6:
                    81:43:98:e5:b4:03:7a:0a:f2:36:f2:45:6c:dc:2e:
                    39:9f:9e:de:74:12:f6:ed:a5:48:d3:77:1d:44:3a:
                    6d:34:52:a5:0d:56:5a:1e:68:97:2a:c3:a9:d4:2f:
                    62:c1:29:45:75:56:58:3b:63:55:5d:42:2c:68:93:
                    5b:58:5e:2a:f1:16:79:f1:f5:31:b6:a7:b6:ea:5b:
                    7d:1b:18:ed:8b:20:59:f2:da:e0:4d:54:52:75:3a:
                    30:41:ad:52:82:fb:d3:b7:c2:66:07:73:70:90:6b:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:ED:84:1F:F9:35:94:95:B1:E7:7B:1E:AC:1D:4F:2E:C0:6D:99:AE
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:cc:e5:f9:99:63:c6:8d:c5:e6:b0:76:3f:00:e4:26:9c:
         39:cd:e4:9d:3f:db:eb:ff:d3:31:0d:5e:39:03:0e:f6:a4:d8:
         38:c0:55:07:9d:cc:c1:d3:f0:be:f4:70:73:4c:01:40:7d:e9:
         b7:77:43:c3:bc:e5:e0:37:97:62:9d:b2:94:ff:32:0b:6a:e9:
         40:9b:e8:43:31:aa:2d:c4:1c:bb:8a:25:ee:99:3b:b5:43:ab:
         df:21:1f:5e:b0:8f:46:8a:4b:da:c9:7d:1e:db:2d:49:e1:41:
         2b:66:14:5e:0f:7e:11:71:75:52:58:35:3d:91:ca:f7:a2:fa:
         7f:16:77:9f:10:83:2a:41:90:c3:37:05:f3:f9:5c:3e:2a:61:
         d5:d0:89:66:e3:53:5a:dd:5e:3c:61:93:7d:ff:37:5b:eb:2c:
         4b:d8:60:c9:c7:a4:d8:db:e4:03:69:99:84:78:bb:d0:96:62:
         32:6a:e3:a3:c1:8d:ab:ca:5a:fa:c7:55:2c:c7:b4:84:ab:f5:
         ae:83:65:44:4c:79:20:60:0a:63:19:75:a4:8d:18:60:3e:d7:
         c3:66:1e:8e:76:85:dc:4c:2d:c8:97:45:fe:5c:f4:cc:57:41:
         13:6d:7d:7d:b7:07:e9:a1:fa:b8:08:11:db:07:8f:59:14:22:
         70:57:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org