Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33322d3332203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (raw, json)
Hash identifier:          R2llQ5jfjUEgMP45Xt7qjY+qPz2DS691yIpI9SkDHmE=
Subject key identifier:   6D:5A:F4:73:04:27:05:27:27:2E:26:27:EA:2A:28:CA:AA:86:BB:86
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       05E2CE5B5EAA439D942E976A69857208FBAAA3A4
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33322d3332203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        2804:735c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e2:ce:5b:5e:aa:43:9d:94:2e:97:6a:69:85:72:08:fb:aa:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=6D5AF47304270527272E2627EA2A28CAAA86BB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:16:cd:71:18:75:db:84:72:fa:fd:07:77:
                    72:83:e7:7b:85:46:48:76:ec:d2:46:d6:9c:71:81:
                    46:57:e1:d3:3e:81:2a:b3:9d:16:44:fc:95:32:99:
                    6f:87:0d:60:66:a3:0a:33:aa:d5:93:b0:ce:30:5c:
                    9c:db:33:c7:24:2e:a3:2f:1d:ba:18:dd:7e:57:63:
                    2d:79:77:ee:28:73:80:60:03:e2:80:35:2c:b7:dc:
                    e0:b9:0f:65:f2:d8:56:a9:06:38:c6:11:6b:3e:c0:
                    68:1c:f3:df:30:be:74:be:f7:a9:40:21:82:97:d9:
                    08:b6:4e:bb:fe:8f:35:15:71:3b:79:30:1a:44:f1:
                    29:d4:b5:7f:db:9a:b6:c6:09:6d:3b:80:2e:e6:9f:
                    4f:d7:21:f0:a7:23:c8:7f:dc:22:be:3d:de:2e:11:
                    98:71:43:12:ec:ad:36:c8:1c:5a:a3:0f:52:99:e2:
                    24:3f:55:3d:f2:6d:c6:3b:91:c2:6a:cc:14:6b:18:
                    08:2c:60:3f:e5:03:83:f8:f2:6c:f6:1d:cd:9f:3f:
                    cd:67:09:41:e2:ab:ac:98:b0:da:68:19:6a:b8:29:
                    27:b0:00:47:54:f8:dd:3b:1c:9d:d0:56:0b:c1:dd:
                    be:d3:55:33:a6:5a:3e:73:a5:55:ba:f8:01:65:26:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5A:F4:73:04:27:05:27:27:2E:26:27:EA:2A:28:CA:AA:86:BB:86
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33322d3332203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:84:36:64:5c:59:5d:ef:86:b1:18:70:f7:03:6b:ed:2b:42:
         b0:eb:71:ae:e6:82:b4:c9:af:08:3f:13:70:dc:25:8a:d3:16:
         82:ae:45:76:87:3f:20:d0:00:81:07:3a:6b:d5:13:41:5a:03:
         61:7e:23:1e:7e:79:90:fc:e2:9f:5e:3e:bd:e7:52:d0:c4:45:
         96:31:5c:a7:85:82:83:9e:7c:a3:01:12:56:09:68:32:d5:e2:
         fb:ef:a1:72:63:36:18:f9:a4:ba:63:10:5d:26:16:f7:81:07:
         09:ef:2f:a2:6f:a5:20:51:df:ae:b5:40:77:97:12:41:98:40:
         54:6f:20:32:b6:82:50:c7:53:6c:bf:01:47:a2:92:c0:ee:ce:
         17:3a:68:32:4d:f0:b6:88:f3:cb:bb:35:0e:8e:fb:84:39:eb:
         5e:98:ea:5a:b3:55:db:dc:f1:44:84:c2:b7:69:0c:f2:ff:0e:
         99:bc:1f:0b:f8:4f:c6:4a:94:36:28:3b:53:b0:2e:46:5e:42:
         e4:2e:be:c2:8a:df:1f:fe:3d:6c:68:47:30:b0:be:1a:46:ba:
         c1:ec:27:3c:73:bf:b7:a1:9d:c6:52:c1:38:b6:cf:df:a7:a1:
         ee:eb:15:0b:0e:a4:2c:38:23:4c:c7:f8:37:87:37:86:16:51:
         3f:04:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org