Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a343030303a3a2f33352d3335203d3e20323731333735.roa
File:                     323830343a376138303a343030303a3a2f33352d3335203d3e20323731333735.roa (raw, json)
Hash identifier:          P4Nt/Ll/Z8HgNxxfKlPJz9LKq8J5p2QlvaxPZp0fWUA=
Subject key identifier:   41:D3:FB:4D:38:5F:55:78:80:1A:CD:8C:36:F9:55:68:FC:B8:20:FF
Certificate issuer:       /CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
Certificate serial:       788A2466582F265A01679CE98F7DB026EFA159F9
Authority key identifier: D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a343030303a3a2f33352d3335203d3e20323731333735.roa
Signing time:             Tue 29 Mar 2022 19:38:22 +0000
ROA not before:           Tue 29 Mar 2022 19:33:22 +0000
ROA not after:            Tue 28 Mar 2023 19:38:22 +0000
asID:                     271375
IP address blocks:        2804:7a80:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8a:24:66:58:2f:26:5a:01:67:9c:e9:8f:7d:b0:26:ef:a1:59:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
        Validity
            Not Before: Mar 29 19:33:22 2022 GMT
            Not After : Mar 28 19:38:22 2023 GMT
        Subject: CN=41D3FB4D385F5578801ACD8C36F95568FCB820FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:78:8a:59:40:43:9f:3f:25:12:83:b0:a9:
                    19:ce:4b:51:96:c4:25:aa:7a:a5:93:17:7b:ef:9e:
                    d9:85:6a:d8:c0:d2:cc:77:66:72:1c:46:6a:e6:2e:
                    7e:bb:54:e2:0c:08:04:89:9f:0e:3c:d5:30:c3:15:
                    ef:bf:16:ef:a0:52:34:26:ab:d4:d0:46:00:dd:d7:
                    f3:86:2b:e4:16:fb:78:0e:aa:17:cc:48:cb:f7:3f:
                    88:4e:b5:1e:0b:48:94:e2:8e:56:c3:d9:41:d5:c0:
                    83:d0:65:bd:a3:90:04:f5:53:3e:7b:ff:99:2a:1e:
                    f6:11:eb:83:55:c0:29:7c:84:d6:14:ab:95:7a:c5:
                    75:42:b2:bf:51:4d:29:85:52:5f:22:26:b3:71:e0:
                    90:65:f8:7c:83:49:1b:70:f7:45:7f:96:6b:69:7c:
                    04:39:0f:95:6f:b0:85:05:73:fd:67:a2:eb:c3:5d:
                    18:49:7b:10:09:ba:21:e7:77:3f:eb:b6:16:c6:01:
                    26:a5:77:16:20:47:8f:53:17:69:ba:9a:b8:bf:39:
                    65:21:09:0f:ee:f5:21:ff:f8:59:0a:23:c2:3e:7b:
                    b2:68:ac:e7:1f:b9:00:7a:b2:47:cb:1b:bb:34:ac:
                    58:28:c4:6a:e7:3c:d6:5a:87:51:3d:3a:e2:e8:c5:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D3:FB:4D:38:5F:55:78:80:1A:CD:8C:36:F9:55:68:FC:B8:20:FF
            X509v3 Authority Key Identifier:
                keyid:D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a343030303a3a2f33352d3335203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a80:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:52:b0:4b:f9:e8:18:0f:28:6d:79:ec:e5:a0:61:4f:f0:
         6b:9c:49:2a:fc:b4:cd:aa:ff:a4:c6:b7:a4:31:3b:90:43:3a:
         33:64:a9:bc:f6:10:85:f7:07:6e:77:6e:57:17:a9:cf:5d:91:
         15:cf:87:fa:28:99:59:6a:21:4d:42:5f:75:9a:69:d1:f7:9c:
         57:0c:bb:5a:c6:b1:e1:e1:e0:b8:3b:fa:e7:74:b2:cd:a1:37:
         65:6b:90:e5:79:88:bf:37:38:f0:a9:af:6c:f5:66:f6:a6:fa:
         7a:3c:be:75:c4:32:93:bd:7c:c7:77:4e:8f:4d:5d:56:dc:2b:
         7f:cf:29:38:ad:0f:b2:d9:0a:9e:68:7f:f4:35:8a:d6:5b:f7:
         9c:bf:4c:f3:cf:57:17:b4:9a:e5:c2:d4:1d:2e:c1:27:04:fe:
         82:f6:19:66:40:05:b3:a7:15:bb:82:89:65:ba:a3:f6:db:5c:
         20:3d:90:f6:7a:d3:ad:f8:ad:ab:58:92:22:6e:aa:6a:da:bf:
         1c:6b:17:0e:69:ea:3e:4a:b7:ca:2c:25:4d:6d:15:8a:79:07:
         77:07:f6:6f:83:a2:2e:d1:fc:e6:6d:21:3b:c9:90:b6:25:20:
         b7:96:06:1d:c4:ab:66:24:7a:b6:2c:a2:8c:50:c0:2b:0c:5f:
         b8:91:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org