Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          hG/TThKPQQ/O9IKO3EXlprTU9aPpVLTGmF8V5H78nfM=
Subject key identifier:   DB:33:59:1F:E5:95:2E:2D:08:DD:85:22:B9:FF:33:E1:1D:44:2E:75
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       2BE990B023D8BA0B3E6FE62A536344DA550BABD4
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:21 +0000
ROA not before:           Wed 20 Mar 2024 07:05:21 +0000
ROA not after:            Wed 19 Mar 2025 07:10:21 +0000
asID:                     270910
IP address blocks:        2804:735c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e9:90:b0:23:d8:ba:0b:3e:6f:e6:2a:53:63:44:da:55:0b:ab:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:21 2024 GMT
            Not After : Mar 19 07:10:21 2025 GMT
        Subject: CN=DB33591FE5952E2D08DD8522B9FF33E11D442E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0a:1d:42:bf:25:dc:99:bc:e1:62:30:af:ab:
                    af:f5:55:54:f9:63:fe:a9:3f:dc:d1:88:50:57:b9:
                    2a:fd:40:e1:c6:5e:15:23:dd:7e:bb:b1:7e:e6:92:
                    a6:a1:09:42:01:8e:0b:7a:f0:6c:34:a3:4f:b8:e9:
                    7a:76:d8:81:08:c3:c9:7e:3e:c8:52:6b:95:19:36:
                    66:c7:3c:75:2b:ec:45:da:5e:95:11:ae:be:67:49:
                    e2:7a:1d:84:78:49:8c:83:b1:00:b3:61:d4:9f:c2:
                    8e:95:2b:0e:61:4b:65:ca:45:82:12:90:87:5c:e5:
                    68:de:c5:aa:ab:74:d8:48:a7:d7:fd:29:03:39:94:
                    29:15:d8:f7:c9:b6:e4:bc:ea:b0:48:ea:04:b7:20:
                    cc:51:4f:b9:eb:f0:bc:51:48:13:03:8c:db:99:1e:
                    a1:f7:6e:9d:dc:e2:88:b8:26:e0:43:99:7c:9e:3b:
                    7e:0d:84:1a:94:6a:78:f7:7c:eb:c8:35:e8:c8:71:
                    f7:08:68:a1:f4:f2:cc:aa:c9:ca:23:40:07:e8:35:
                    80:f4:fb:0b:95:64:6a:2a:d3:0c:79:38:8e:21:17:
                    59:35:3d:e5:be:93:35:a7:f5:4d:61:e0:0a:4f:f0:
                    cb:0b:68:b9:21:7f:5a:a0:28:ac:4b:80:b9:b8:7e:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:59:1F:E5:95:2E:2D:08:DD:85:22:B9:FF:33:E1:1D:44:2E:75
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:be:0e:21:aa:45:d5:63:db:2b:48:bb:0b:07:86:c3:4f:
         0c:13:4d:ba:06:1c:1f:5b:04:c6:16:3c:3f:70:32:3a:32:4b:
         22:39:a0:fa:d7:a0:25:45:49:f9:dd:1d:80:ff:79:e3:6e:01:
         67:8c:10:3a:3b:6a:ba:56:a1:13:20:4b:ba:0a:5f:2b:91:e6:
         a3:41:f7:cf:f5:53:d6:1d:bd:5c:27:b5:73:5c:6f:7b:dc:2a:
         72:30:f1:42:18:e2:2d:73:83:84:5c:ed:10:71:c2:d5:2f:c2:
         63:fc:71:a8:a6:9a:ae:71:08:ef:e0:0c:a1:2d:9c:63:83:44:
         5e:18:96:be:12:4c:2d:6a:9f:1b:a4:bd:55:43:79:82:8b:35:
         60:a9:0c:c6:fc:f5:4d:d4:92:e4:19:18:b4:90:f3:45:dd:4d:
         cb:e3:e6:7d:60:a2:23:83:f5:da:78:89:62:43:39:f3:bf:07:
         09:18:32:94:05:32:73:fd:28:c5:d4:ee:1c:a1:cd:73:1f:c4:
         f9:73:61:8f:27:dd:0b:20:9a:95:bc:53:da:71:58:75:a3:28:
         ca:a4:65:53:cd:a2:58:81:28:0e:d9:7c:b9:69:da:54:11:2a:
         6f:7a:c7:74:00:6f:4c:7b:b6:eb:b8:9a:22:03:2c:72:e4:d1:
         c3:af:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org