Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a653030303a3a2f33352d3335203d3e20323730343430.roa
File:                     323830343a366330343a653030303a3a2f33352d3335203d3e20323730343430.roa (raw, json)
Hash identifier:          ty5J0iDNdpbHzAmYZJx33LkTLAQDImtSJ6AJbKMSen4=
Subject key identifier:   24:10:26:8A:73:AB:BF:FC:D5:24:F0:17:0A:CA:43:1B:6D:7A:CB:39
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       570F35795C51AD221C326F84A95D4421E3B3A831
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a653030303a3a2f33352d3335203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:28:22 +0000
ROA not before:           Tue 23 Apr 2024 13:23:22 +0000
ROA not after:            Tue 22 Apr 2025 13:28:22 +0000
asID:                     270440
IP address blocks:        2804:6c04:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0f:35:79:5c:51:ad:22:1c:32:6f:84:a9:5d:44:21:e3:b3:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:23:22 2024 GMT
            Not After : Apr 22 13:28:22 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:47:1e:33:9f:b7:51:32:bb:bd:c5:01:f7:
                    40:3f:9c:41:d0:41:4f:77:34:a4:a4:df:fc:14:32:
                    53:77:60:58:db:24:ce:74:59:99:23:0d:85:b4:a7:
                    cb:30:e3:2d:81:70:05:ac:07:21:14:76:07:6b:c0:
                    7d:02:35:ee:ec:4e:03:e8:bf:e9:48:eb:5c:49:d1:
                    16:bc:ed:26:e0:75:61:19:7b:6d:b9:94:f2:dc:e6:
                    ff:95:a7:14:48:d0:f0:93:4c:0e:dd:c4:32:06:cc:
                    2b:dc:1c:13:35:26:a4:76:b1:13:2a:f9:18:ac:7c:
                    6c:fe:74:9c:69:d3:60:fe:fc:1e:10:64:ad:ca:b6:
                    5e:e3:ca:8f:27:7c:26:52:96:59:59:54:c8:36:3d:
                    0a:44:6c:9b:01:da:6f:16:85:c1:be:a2:6d:23:23:
                    c3:58:d1:b0:30:8e:df:bb:75:ed:d5:44:f4:4e:ad:
                    22:32:99:65:f3:bc:cf:f9:89:21:20:3c:03:7b:37:
                    a2:d3:0a:dc:45:1f:f7:8c:7d:10:d9:65:50:f9:26:
                    f6:82:32:3b:a6:e5:fa:9a:6e:e8:81:c7:9f:60:16:
                    81:35:da:b9:f5:3f:f9:a9:f0:e0:de:9d:5e:32:57:
                    4f:7e:c9:68:2c:f3:4a:1b:61:f1:12:a2:ce:da:df:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:26:8A:73:AB:BF:FC:D5:24:F0:17:0A:CA:43:1B:6D:7A:CB:39
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/323830343a366330343a653030303a3a2f33352d3335203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         56:85:50:21:fb:5f:d8:51:7b:4e:eb:26:95:5a:09:ce:6c:c7:
         bd:61:6c:60:ff:01:de:c8:b6:7e:9c:e3:69:89:15:06:2f:2e:
         3f:05:50:c2:e4:d2:64:8a:b0:e9:50:eb:57:ee:d6:bf:05:4b:
         0d:2e:a8:2d:68:df:30:0e:8c:dc:ac:3b:2c:4a:1b:bc:1f:84:
         16:6a:81:85:fb:d9:17:14:1d:f8:8d:74:0c:04:58:66:83:30:
         e1:e4:a0:ef:20:e4:c2:0c:73:3b:15:2b:88:48:ee:bf:64:f4:
         0f:91:ba:e7:50:61:a9:05:3d:e1:92:87:7f:0d:fd:0f:c8:98:
         b6:e7:07:53:61:59:00:c9:0d:81:58:5f:16:72:41:c8:ab:7f:
         2f:8d:7b:3b:36:8a:0d:1d:03:26:c9:0e:c8:e6:cd:ba:14:e6:
         89:cf:dc:cf:e2:55:12:fc:f7:80:10:97:f0:d5:61:ae:5b:4f:
         ab:df:d8:33:bc:4b:89:32:14:1d:df:c1:ab:fa:36:ec:2b:25:
         44:f4:35:10:6f:29:74:44:9b:ad:1c:67:e2:30:75:f7:14:fb:
         01:9d:c4:89:70:87:21:1c:dd:db:2f:84:25:6a:40:31:66:23:
         c1:2e:73:68:1d:1e:4f:6c:d2:86:47:f4:31:3a:d7:83:26:78:
         e3:f8:9b:7a
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUVw81eVxRrSIcMm+EqV1EIeOzqDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkE5RjQ2Q0Y1NzlCRDlGNUE1RUFFQUUyOUNENEQ4
NjZFMjdDNDAeFw0yNDA0MjMxMzIzMjJaFw0yNTA0MjIxMzI4MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNEODQ3MUUzMzlGQjc1MTMy
QkJCREM1MDFGNzQwM0Y5QzQxRDA0MTRGNzczNEE0QTRERkZDMTQzMjUzNzc2MDU4
REIyNENFNzQ1OTk5MjMwRDg1QjRBN0NCMzBFMzJEODE3MDA1QUMwNzIxMTQ3NjA3
NkJDMDdEMDIzNUVFRUM0RTAzRThCRkU5NDhFQjVDNDlEMTE2QkNFRDI2RTA3NTYx
MTk3QjZEQjk5NEYyRENFNkZGOTVBNzE0NDhEMEYwOTM0QzBFRERDNDMyMDZDQzJC
REMxQzEzMzUyNkE0NzZCMTEzMkFGOTE4QUM3QzZDRkU3NDlDNjlEMzYwRkVGQzFF
MTA2NEFEQ0FCNjVFRTNDQThGMjc3QzI2NTI5NjU5NTk1NEM4MzYzRDBBNDQ2QzlC
MDFEQTZGMTY4NUMxQkVBMjZEMjMyM0MzNThEMUIwMzA4RURGQkI3NUVERDU0NEY0
NEVBRDIyMzI5OTY1RjNCQ0NGRjk4OTIxMjAzQzAzN0IzN0EyRDMwQURDNDUxRkY3
OEM3RDEwRDk2NTUwRjkyNkY2ODIzMjNCQTZFNUZBOUE2RUU4ODFDNzlGNjAxNjgx
MzVEQUI5RjUzRkY5QTlGMEUwREU5RDVFMzI1NzRGN0VDOTY4MkNGMzRBMUI2MUYx
MTJBMkNFREFERkEzNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvNhHHjOft1Eyu73FAfdAP5xB0EFPdzSkpN/8FDJTd2BY2yTOdFmZ
Iw2FtKfLMOMtgXAFrAchFHYHa8B9AjXu7E4D6L/pSOtcSdEWvO0m4HVhGXttuZTy
3Ob/lacUSNDwk0wO3cQyBswr3BwTNSakdrETKvkYrHxs/nScadNg/vweEGStyrZe
48qPJ3wmUpZZWVTINj0KRGybAdpvFoXBvqJtIyPDWNGwMI7fu3Xt1UT0Tq0iMpll
87zP+YkhIDwDezei0wrcRR/3jH0Q2WVQ+Sb2gjI7puX6mm7ogcefYBaBNdq59T/5
qfDg3p1eMldPfsloLPNKG2HxEqLO2t+jcQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCQQJopzq7/81STwFwrKQxttess5MB8GA1UdIwQYMBaAFK1yqfRs9Xm9n1perq4p
zU2GbifEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWlt
Y0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzEvQUQ3MkE5RjQ2Q0Y1NzlC
RDlGNUE1RUFFQUUyOUNENEQ4NjZFMjdDNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRDcyQTlGNDZDRjU3OUJEOUY1QTVFQUVBRTI5Q0Q0RDg2NkUy
N0M0LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0U0Zldvak5CWGFpbWNMV1ZM
UnF2NGo1OWh2Z2M5ODY2UHRvVFB0R2tKMi8xLzMyMzgzMDM0M2EzNjYzMzAzNDNh
NjUzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM3MzAzNDM0MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBGwE4DANBgkqhkiG9w0BAQsFAAOCAQEAVoVQIftf2FF7TusmlVoJ
zmzHvWFsYP8B3si2fpzjaYkVBi8uPwVQwuTSZIqw6VDrV+7WvwVLDS6oLWjfMA6M
3Kw7LEobvB+EFmqBhfvZFxQd+I10DARYZoMw4eSg7yDkwgxzOxUriEjuv2T0D5G6
51BhqQU94ZKHfw39D8iYtucHU2FZAMkNgVhfFnJByKt/L417OzaKDR0DJskOyObN
uhTmic/cz+JVEvz3gBCX8NVhrltPq9/YM7xLiTIUHd/Bq/o27CslRPQ1EG8pdESb
rRxn4jB19xT7AZ3EiXCHIRzd2y+EJWpAMWYjwS5zaB0eT2zShkf0MTrXgyZ44/ib
eg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org