Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a383030303a3a2f33342d3334203d3e20323638353935.roa
File:                     323830343a353339633a383030303a3a2f33342d3334203d3e20323638353935.roa (raw, json)
Hash identifier:          1Dv071zK+UmVJCutJOD6NL1Mv+ZuFiIA56qObD8v+ic=
Subject key identifier:   AC:DB:E1:3C:C5:97:15:57:ED:36:31:30:E0:1A:94:55:66:0F:43:8E
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       73B8A2E3AE34BEB23554A1D19F14C104B54A94E4
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a383030303a3a2f33342d3334203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:37:00 +0000
ROA not before:           Mon 22 Aug 2022 21:32:00 +0000
ROA not after:            Mon 21 Aug 2023 21:37:00 +0000
asID:                     268595
IP address blocks:        2804:539c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b8:a2:e3:ae:34:be:b2:35:54:a1:d1:9f:14:c1:04:b5:4a:94:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:32:00 2022 GMT
            Not After : Aug 21 21:37:00 2023 GMT
        Subject: CN=ACDBE13CC5971557ED363130E01A9455660F438E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:29:75:fe:26:4a:6d:e9:78:1c:79:6c:b0:
                    a9:b5:c4:79:52:93:c6:11:2c:4b:af:9e:b7:a5:88:
                    6c:8e:bb:df:51:54:fd:a4:35:b6:db:65:73:2b:ad:
                    c1:11:1f:03:65:71:96:63:55:a6:9d:58:19:ce:9e:
                    11:41:42:25:eb:d3:41:c8:f6:7f:47:2e:74:8a:9f:
                    f4:8c:e0:14:e0:a9:83:04:75:85:f1:5a:6b:62:78:
                    f5:38:3e:87:26:48:ee:6b:1d:ca:a2:86:83:5e:6d:
                    dc:ce:09:70:4e:85:16:42:b2:78:6d:ec:0f:1b:f3:
                    a6:e2:1c:3d:40:67:5d:c4:53:61:d5:29:79:8a:63:
                    b2:3c:13:96:ed:00:d6:1a:54:8e:02:8c:04:1b:c4:
                    e9:f3:1e:67:e0:88:21:dc:df:8d:49:a1:23:a4:90:
                    67:8a:1e:4a:76:38:21:41:7d:e1:65:86:c1:31:dc:
                    5c:b2:80:9e:75:9b:9f:93:10:49:16:50:f9:54:d1:
                    d7:f6:6d:74:0e:00:68:19:cd:fd:36:72:0c:7b:3e:
                    f7:b6:ed:d1:45:5b:0a:ff:2d:d3:47:fc:bf:f7:4e:
                    5a:36:89:dd:21:59:60:1f:2a:80:24:23:28:d7:44:
                    d3:20:19:22:7a:ea:09:86:72:80:6c:27:92:e8:ca:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DB:E1:3C:C5:97:15:57:ED:36:31:30:E0:1A:94:55:66:0F:43:8E
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a383030303a3a2f33342d3334203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:06:63:91:61:63:f1:12:50:0d:27:f2:2d:fe:bd:fe:a7:
         05:7e:8d:68:1c:53:77:e7:33:52:76:74:b5:f8:e1:46:be:d4:
         6d:c1:dd:91:9f:9f:1e:5c:8e:b6:06:7f:58:5b:bc:e4:21:c7:
         ed:bc:b9:41:78:22:57:a2:0e:b2:e9:74:81:91:a9:b8:57:dc:
         8c:a2:ee:fe:9f:3a:3f:0a:c2:f3:0b:1e:96:7c:29:bf:ec:b4:
         48:02:1f:fb:1b:3c:a3:13:13:94:77:09:70:05:b0:26:3c:ba:
         06:a7:19:f0:b8:3f:9d:fd:e7:59:78:55:5f:b7:19:1d:a9:af:
         c8:1e:6d:77:5b:03:17:9c:84:e8:de:60:44:2d:61:d0:8b:81:
         ed:3b:61:5f:a2:0e:ec:74:9d:f6:ff:a7:91:0a:e4:f8:dd:89:
         2f:9a:2f:d3:50:16:f0:ca:20:26:d9:4b:b9:63:7b:78:66:8d:
         97:80:3f:e4:60:15:84:08:c0:76:92:95:a5:5f:b5:6b:98:76:
         eb:3a:55:0e:3e:40:ea:6f:90:cc:78:44:61:b6:e5:8c:90:91:
         c2:d0:27:c4:93:e3:7b:99:7a:55:c8:f5:c1:c6:55:ec:fc:18:
         4f:46:f2:26:5c:04:49:df:b1:01:db:f2:c6:f0:22:b3:9c:26:
         a4:86:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org