Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3438203d3e20323733373133.roa
File:                     323830343a386232303a3a2f33322d3438203d3e20323733373133.roa (raw, json)
Hash identifier:          cCvNCiLRghHygQMKwu7f86vaa+AGlzd1Z1KIkrx4riE=
Subject key identifier:   8D:F3:C7:18:92:C7:17:2F:E4:F0:AA:CF:33:D5:FD:F4:4F:08:B1:A5
Certificate issuer:       /CN=20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286
Certificate serial:       0F141AD363C732C2660E70DC2914492A8CBE5739
Authority key identifier: 20:AD:4C:D5:EF:5C:75:5C:8B:0F:92:F4:F9:C8:90:72:AD:B6:52:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3438203d3e20323733373133.roa
Signing time:             Fri 07 Apr 2023 20:33:09 +0000
ROA not before:           Fri 07 Apr 2023 20:28:09 +0000
ROA not after:            Fri 05 Apr 2024 20:33:09 +0000
asID:                     273713
IP address blocks:        2804:8b20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:14:1a:d3:63:c7:32:c2:66:0e:70:dc:29:14:49:2a:8c:be:57:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286
        Validity
            Not Before: Apr  7 20:28:09 2023 GMT
            Not After : Apr  5 20:33:09 2024 GMT
        Subject: CN=8DF3C71892C7172FE4F0AACF33D5FDF44F08B1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:c5:1e:7e:69:75:03:16:9d:d1:e7:76:73:
                    65:d8:4c:44:38:bf:45:5d:e0:27:84:e3:e7:71:05:
                    5d:47:9a:b5:99:47:e6:c9:8e:94:09:e9:50:ee:dd:
                    d6:83:5d:a5:f2:cb:39:c0:0c:d6:df:6a:d5:f2:fc:
                    31:7c:62:e2:88:be:e0:8f:4e:9e:b6:fa:5d:33:56:
                    0b:4d:e9:53:ae:33:18:f3:49:f9:7a:96:2b:0a:7f:
                    a4:c7:e6:6a:f0:ab:a2:0d:68:34:62:ba:dc:22:28:
                    50:3a:35:59:f4:c8:c7:5e:b5:5f:b4:3e:3a:ee:48:
                    ae:f9:e0:c4:7d:7f:a0:5a:ef:8d:02:c0:b8:81:07:
                    00:95:57:1c:eb:57:be:b2:e7:df:f3:9c:dc:2f:6e:
                    ef:7f:e4:21:a4:f8:99:d2:97:5a:b4:65:07:04:7c:
                    ce:58:50:69:99:cf:4b:6c:7e:e7:64:07:f3:c1:97:
                    90:37:8b:0c:06:83:c0:b7:38:bd:5b:61:cc:3d:49:
                    ed:f3:d5:ad:66:1f:f4:71:74:fd:5f:22:d1:c4:cd:
                    5e:84:4d:af:da:b1:cb:4e:88:2f:f7:94:da:fa:14:
                    47:ab:85:93:70:86:bd:8b:b2:22:bd:b0:07:2e:79:
                    95:a0:69:3c:de:70:1f:59:19:b9:06:40:92:64:fb:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F3:C7:18:92:C7:17:2F:E4:F0:AA:CF:33:D5:FD:F4:4F:08:B1:A5
            X509v3 Authority Key Identifier:
                keyid:20:AD:4C:D5:EF:5C:75:5C:8B:0F:92:F4:F9:C8:90:72:AD:B6:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3438203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:23:95:f1:d2:c5:75:42:e4:db:55:58:31:8d:dc:90:f0:
         8d:aa:87:55:31:40:29:0b:e1:40:99:b5:52:60:8a:ca:a5:22:
         8d:e9:7c:5e:d1:c8:dd:f7:ba:83:1b:b3:71:1d:e7:9d:fa:98:
         73:43:a8:e3:b3:54:ed:29:62:a9:c5:ee:50:87:59:85:f7:68:
         b6:56:87:76:fb:af:df:3e:3d:87:5e:2a:26:6c:f0:88:13:9d:
         74:f5:76:cb:64:70:dd:ab:98:28:ab:1e:05:34:b9:7f:47:0b:
         5e:43:b8:5e:8a:39:1d:26:81:53:ec:c1:93:cb:91:22:65:c3:
         64:e4:37:73:be:ea:79:cd:4a:1d:73:af:9e:62:71:b6:e0:f3:
         bd:ab:77:87:44:74:a1:da:82:0e:3f:54:12:fe:72:1c:bf:0e:
         d1:1d:26:8d:50:ec:5c:d9:85:26:54:7f:c8:ac:01:bc:55:95:
         b9:15:5e:03:9c:03:80:2c:65:22:51:76:cc:b0:96:d1:ba:40:
         e8:0f:7b:d3:25:af:a3:bc:d2:a8:53:5f:5a:5f:c9:13:d5:10:
         09:80:3c:ff:48:08:f2:21:1c:28:5e:9a:b3:97:fb:ac:55:31:
         32:8e:26:d5:b9:a8:38:c5:82:67:78:d4:2d:40:c1:24:45:e9:
         e3:1f:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org