Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa
File:                     323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (raw, json)
Hash identifier:          fvRUOdL4ly7Oc6nCuFMYaO750uJQqlZfZjEWlwQgA6w=
Subject key identifier:   D3:01:DD:61:68:C3:78:85:0D:1B:E5:4B:22:B2:EF:2B:A9:AC:17:11
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       2CF50F6BC32A00CDD954BD46767F197165B4E6ED
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        2804:735c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f5:0f:6b:c3:2a:00:cd:d9:54:bd:46:76:7f:19:71:65:b4:e6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=D301DD6168C378850D1BE54B22B2EF2BA9AC1711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:cc:ea:71:30:81:c1:a9:b2:8f:24:4a:cf:
                    ec:6d:15:b7:dd:7f:4a:98:3f:44:da:99:e0:6e:1e:
                    30:54:94:b8:73:10:69:5e:31:02:3d:6b:2f:b7:22:
                    00:ee:73:5b:8b:f3:06:ff:22:14:9e:67:5d:97:53:
                    db:a4:83:85:29:1f:21:f8:e6:70:2d:5b:67:45:ea:
                    08:19:be:d8:94:53:ba:39:0e:21:48:1a:9f:9b:c0:
                    b1:07:5d:3d:9b:bb:cc:15:0c:4d:3c:07:a7:68:b4:
                    06:08:96:19:d7:63:b5:c5:df:47:cd:d1:20:e3:fa:
                    5d:d1:ff:b2:55:1f:01:b6:ff:92:68:5a:08:82:e5:
                    b7:95:70:7a:63:4c:4d:9d:98:94:33:cb:79:2d:48:
                    39:fe:67:73:44:9b:2c:b4:41:72:43:84:db:0f:cc:
                    a5:f1:7e:3c:9f:45:b6:02:83:f4:08:7d:a3:eb:e4:
                    08:6c:28:92:c9:c4:87:8d:d6:06:2b:1e:0f:49:f0:
                    3f:c9:30:cf:ce:05:3d:52:b0:3a:d4:13:2b:71:1b:
                    a1:fe:29:0a:41:bf:0e:f6:4c:37:34:c8:01:15:11:
                    95:12:32:85:39:e8:02:ad:b9:9f:9f:de:bd:eb:b9:
                    dc:6c:25:d7:33:b6:d2:ba:4b:a0:3b:a0:1f:66:99:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:DD:61:68:C3:78:85:0D:1B:E5:4B:22:B2:EF:2B:A9:AC:17:11
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:08:9f:5e:93:6f:b4:1c:a6:a4:b4:f8:27:52:b5:cc:34:f6:
         d0:b2:13:8e:a4:9b:6a:1b:00:02:86:35:27:c0:e9:60:a7:54:
         57:62:1f:74:07:50:fb:89:d4:b8:df:e9:c2:c1:28:d1:74:c9:
         40:27:67:98:71:d4:c6:9c:9a:3b:f5:c6:5d:4c:bb:3f:58:4d:
         02:22:f4:27:09:3b:1e:27:6e:bd:83:65:40:64:11:68:76:90:
         ba:5c:66:53:82:f5:e3:25:46:a3:61:f5:97:a2:87:7f:7f:25:
         9e:8f:ab:96:66:a3:af:3a:0d:01:4b:a9:80:82:ef:ba:9c:0f:
         48:e4:a1:88:6e:b7:3a:3b:9c:09:08:f3:79:83:4d:8a:10:b5:
         06:e2:85:12:c9:0f:46:92:3f:0a:55:7d:ae:16:4d:ba:eb:32:
         dd:f3:43:e2:9e:04:9a:6a:04:f2:08:b5:e7:c1:13:8e:ed:4c:
         c0:d5:53:ee:21:95:97:c7:54:8b:30:00:c5:4b:86:c5:5a:9a:
         0c:88:bd:7a:c9:47:53:42:4c:07:8b:fc:54:f3:d1:11:86:1a:
         43:7b:91:a6:a7:11:22:0f:0a:06:12:df:3c:d3:97:12:0a:51:
         91:59:0e:aa:6e:04:ea:54:52:16:c3:87:8e:44:d4:f3:75:a7:
         1e:9e:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org