Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/323830343a326137303a3a2f33322d3438203d3e20323634303733.roa
File:                     323830343a326137303a3a2f33322d3438203d3e20323634303733.roa (raw, json)
Hash identifier:          cAQLJlR98fFm+sdyFynB5zVBzdVVLK3eQL4bxUUxwCs=
Subject key identifier:   61:7C:95:1B:B8:C3:C2:C7:FC:F3:58:58:90:41:38:3F:B7:09:69:08
Certificate issuer:       /CN=2020E4386470854F498B76284D60EBE5CCB3BE98
Certificate serial:       5495FC1FB12DD3288456C5DA141FFC2DE457CE68
Authority key identifier: 20:20:E4:38:64:70:85:4F:49:8B:76:28:4D:60:EB:E5:CC:B3:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2020E4386470854F498B76284D60EBE5CCB3BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/323830343a326137303a3a2f33322d3438203d3e20323634303733.roa
Signing time:             Sun 14 Nov 2021 15:00:01 +0000
ROA not before:           Sun 14 Nov 2021 14:55:01 +0000
ROA not after:            Mon 14 Nov 2022 15:00:01 +0000
asID:                     264073
IP address blocks:        2804:2a70::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:95:fc:1f:b1:2d:d3:28:84:56:c5:da:14:1f:fc:2d:e4:57:ce:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2020E4386470854F498B76284D60EBE5CCB3BE98
        Validity
            Not Before: Nov 14 14:55:01 2021 GMT
            Not After : Nov 14 15:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:fb:f6:ab:e5:68:44:c6:e7:fe:df:62:49:
                    84:ff:4b:f8:6a:1e:c9:2b:3a:80:89:e5:81:96:f1:
                    67:e0:72:c5:d1:cb:dd:19:3c:7f:dc:e8:bc:62:87:
                    2c:92:fa:d0:ea:a2:63:cd:cf:93:19:8e:ee:82:e8:
                    0e:a8:1a:a9:0a:89:60:69:9f:1a:53:cf:95:8e:10:
                    62:5c:7c:13:73:09:89:a8:46:1c:76:8c:73:d9:ac:
                    ff:da:93:b2:ac:52:b4:f7:dc:04:a8:9c:d6:5d:c3:
                    86:f1:84:11:e8:f5:2e:2f:60:84:c5:c4:bc:0c:a5:
                    5d:e6:4b:22:37:ef:5e:c6:9e:d0:cf:e4:65:27:ad:
                    b3:60:99:c8:56:35:15:c1:a1:77:c8:52:7a:e4:02:
                    c3:ba:55:42:1e:e5:85:10:17:6f:df:83:c2:77:f8:
                    d8:db:6f:ad:d0:e3:fb:a0:14:89:4d:e9:44:5a:69:
                    d3:fc:0e:b2:d1:a5:54:23:07:d6:0c:1d:9f:43:05:
                    e7:57:bd:d8:a3:8a:96:4a:c7:41:7c:68:de:fc:c4:
                    f2:96:55:e5:4f:ff:1f:ef:a3:4c:d6:d2:33:d9:a3:
                    cc:ce:87:37:70:23:87:41:e0:dc:23:93:a4:e6:3d:
                    0e:28:1f:e2:bd:e3:6c:a8:86:82:9a:8b:be:d4:a7:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:95:1B:B8:C3:C2:C7:FC:F3:58:58:90:41:38:3F:B7:09:69:08
            X509v3 Authority Key Identifier:
                keyid:20:20:E4:38:64:70:85:4F:49:8B:76:28:4D:60:EB:E5:CC:B3:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/2020E4386470854F498B76284D60EBE5CCB3BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2020E4386470854F498B76284D60EBE5CCB3BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/323830343a326137303a3a2f33322d3438203d3e20323634303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a70::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:89:d4:5f:9c:e6:1f:a2:7e:70:80:0c:a1:07:a5:2f:cf:c3:
         71:23:2a:bf:ee:92:92:a2:d9:8e:29:3e:9b:33:0b:f5:8b:ba:
         ad:3d:43:90:76:e5:c9:03:12:77:f2:64:74:1d:61:d2:43:02:
         7e:e4:29:06:9e:13:5d:22:a6:82:89:f1:87:ea:1c:4e:e6:6c:
         fa:fb:28:52:ff:8e:cb:a1:39:c5:c0:f4:7f:6b:45:3f:5f:4d:
         01:57:39:34:cf:85:57:22:41:46:d9:9b:c1:b6:5c:c7:05:2c:
         bc:69:a9:55:08:a8:6a:21:41:89:63:69:e3:22:7b:a0:0a:5e:
         0b:c2:99:be:b3:50:bc:1b:cc:35:53:a7:8f:06:49:c9:6b:c4:
         30:28:9a:08:83:ff:e5:9d:e1:47:e4:fd:44:13:22:4f:1e:f9:
         9e:55:81:ff:4e:1c:04:ee:91:00:8c:18:0a:15:a1:2c:15:85:
         75:70:55:01:b6:14:e3:81:f0:34:c6:4e:0f:f6:96:31:bd:a3:
         5d:95:8b:26:b2:ae:a0:45:da:45:40:c7:4c:e8:df:0e:59:28:
         b2:35:b4:9d:4e:7d:91:95:ba:96:48:6f:d5:67:fa:0a:f8:73:
         ca:71:81:0a:6a:e4:f7:6b:2d:ac:ce:bd:e5:7b:31:55:23:bf:
         92:05:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org