Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa
File:                     323830343a356434303a3a2f33322d3334203d3e20323638393630.roa (raw, json)
Hash identifier:          lHr013jiVdzOLWTKSAg+dV9X4MmBpbuv5giujsdWdBg=
Subject key identifier:   30:58:DE:A3:B4:EF:BD:D8:35:98:07:CC:A1:D9:EA:31:65:47:E2:CE
Certificate issuer:       /CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
Certificate serial:       1EA94E90D4741CBF00E7C725C22610FAE9CA2E1B
Authority key identifier: E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa
Signing time:             Wed 24 Jan 2024 18:02:00 +0000
ROA not before:           Wed 24 Jan 2024 17:57:00 +0000
ROA not after:            Wed 22 Jan 2025 18:02:00 +0000
asID:                     268960
IP address blocks:        2804:5d40::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a9:4e:90:d4:74:1c:bf:00:e7:c7:25:c2:26:10:fa:e9:ca:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
        Validity
            Not Before: Jan 24 17:57:00 2024 GMT
            Not After : Jan 22 18:02:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:58:72:58:6e:10:86:a6:e7:0c:e2:60:e9:
                    93:fe:cf:fd:44:64:21:10:8c:49:57:a8:8b:e2:f0:
                    ac:75:54:2d:14:42:61:e5:26:ae:70:37:31:91:43:
                    7c:c0:97:dc:40:32:07:5f:bb:42:17:48:25:41:74:
                    24:4f:db:83:20:52:e4:5d:d0:5f:67:bf:5b:2e:70:
                    21:ee:ee:4d:2d:ed:f0:45:89:a4:f6:61:61:55:51:
                    82:48:b6:cf:90:c0:0a:fa:89:da:a4:23:9a:11:6f:
                    b6:d2:55:a6:6c:00:54:0b:dc:84:a7:a2:43:36:ee:
                    b0:2f:70:14:11:de:66:44:39:68:16:7b:74:9d:22:
                    91:51:e4:36:27:be:62:c8:c2:6c:3f:b8:ec:15:e5:
                    00:23:a8:3b:a5:12:01:ce:fc:88:62:96:28:90:95:
                    a3:a1:6c:00:37:57:b6:9a:3d:5b:aa:12:52:da:76:
                    2d:76:a9:d6:b4:a6:98:2b:92:cf:39:9e:b3:34:70:
                    71:0c:b0:e6:ae:c1:fe:74:39:ef:cf:f5:a4:b4:80:
                    92:ee:4a:3d:ed:ff:a7:cb:4f:04:1a:88:c2:d7:7e:
                    41:7f:c6:81:80:05:f6:28:48:b8:05:11:6c:97:8d:
                    99:61:fc:ba:a1:7a:9f:f9:78:be:ef:3e:6c:a0:f7:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:58:DE:A3:B4:EF:BD:D8:35:98:07:CC:A1:D9:EA:31:65:47:E2:CE
            X509v3 Authority Key Identifier:
                keyid:E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:ac:ac:c0:dc:a3:5c:73:3d:1f:bc:94:3b:c8:02:24:13:d5:
         02:62:d5:7e:f1:de:6d:7e:c2:0b:37:a4:da:92:6d:d2:f0:65:
         86:8c:f4:fe:d2:9a:ab:96:ad:44:07:d1:cc:68:bc:0f:bb:45:
         22:8a:4a:a0:cf:44:7d:af:63:07:60:1e:b8:45:96:66:a7:7d:
         26:3d:48:fe:f1:c0:3c:13:45:b9:4b:21:20:ce:33:a8:af:87:
         fc:b3:23:d5:4b:ed:fe:e7:5e:94:f1:f0:25:3a:ec:15:e0:20:
         c9:ac:c7:1c:eb:9e:c5:94:37:ba:b3:70:33:02:b7:0e:24:37:
         63:b7:f3:f3:de:81:54:69:83:da:f1:22:59:61:7d:ab:48:96:
         3c:8c:f5:00:6f:e9:d2:bf:2d:db:8e:10:db:ea:f2:cf:34:83:
         5f:cd:48:2d:9a:f6:2a:1e:55:c1:f3:e6:95:4f:66:cc:0d:dd:
         a0:2a:1b:ad:f9:82:39:f7:f1:f6:34:75:18:2d:da:83:ad:4c:
         05:05:39:06:ab:04:7b:75:3a:7a:01:c0:ea:d2:5e:22:23:46:
         47:9a:f5:6c:cc:e6:2a:85:ff:21:b6:c7:30:25:88:13:f9:04:
         88:00:32:3e:5f:6a:a4:a2:78:47:8e:d7:1b:b6:71:dc:26:82:
         e7:a6:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org