Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (raw, json)
Hash identifier:          CQsi1sKNK28Fke5NvR9f4YV1xUIOsbT8B/CQRXKZJh4=
Subject key identifier:   58:81:0B:D8:22:9B:DF:DA:89:F5:1A:60:E5:DE:81:50:E5:53:1C:DF
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       3638628F4BAB72BA6713C834C076B3AED2175DD4
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:21 +0000
ROA not before:           Wed 20 Mar 2024 07:05:21 +0000
ROA not after:            Wed 19 Mar 2025 07:10:21 +0000
asID:                     270910
IP address blocks:        2804:735c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:62:8f:4b:ab:72:ba:67:13:c8:34:c0:76:b3:ae:d2:17:5d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:21 2024 GMT
            Not After : Mar 19 07:10:21 2025 GMT
        Subject: CN=58810BD8229BDFDA89F51A60E5DE8150E5531CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:43:8c:2a:69:42:9a:15:ea:b3:1e:f8:4f:
                    eb:f1:e5:20:67:8c:db:06:30:86:12:16:bc:17:a8:
                    8d:cc:34:51:1b:eb:b3:3a:12:31:54:02:f5:6d:46:
                    59:fe:e1:65:14:be:f7:8c:78:52:46:7d:c4:5d:66:
                    9b:3b:29:85:1d:12:99:76:be:75:48:40:18:cf:de:
                    0f:d3:f6:c0:e2:35:5b:ca:ac:14:2d:8a:28:b3:8c:
                    9c:e0:c0:9d:45:89:01:9b:66:1d:d4:41:72:2c:76:
                    82:89:35:bb:26:76:56:3c:19:80:5f:79:2a:62:fe:
                    66:41:fa:c1:10:f8:c4:6e:67:a7:1e:02:d2:7b:06:
                    ff:3f:b5:df:f0:e0:11:c9:ea:b8:2f:ad:9d:38:69:
                    69:91:94:b4:33:60:cb:14:bb:27:e0:74:5e:92:51:
                    d9:a0:5d:d1:de:9a:bc:f1:30:86:c2:4a:a8:9b:26:
                    2f:39:bf:d5:c0:a5:de:87:d5:56:e3:11:f1:67:d4:
                    a1:c2:4b:76:67:9c:ac:ab:6b:b8:47:c3:59:4e:31:
                    a0:f5:dd:d3:3e:39:e8:6a:30:91:98:28:fb:1c:7a:
                    3c:63:46:6c:76:8f:bb:22:3c:11:82:18:a0:e2:ea:
                    42:6c:98:37:10:c0:a0:4a:ab:82:ed:ee:a2:be:88:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:81:0B:D8:22:9B:DF:DA:89:F5:1A:60:E5:DE:81:50:E5:53:1C:DF
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:52:47:6f:5a:6a:4e:9e:f4:c3:25:b1:a4:9b:86:c3:fe:
         70:7d:e8:df:ce:1e:db:f4:0a:28:b3:c4:c8:31:6e:2b:7e:47:
         e6:97:5a:4a:16:41:43:59:73:82:42:7e:60:74:c4:22:52:0e:
         17:6f:9e:af:30:13:08:94:9c:e6:f0:42:c6:5b:35:b8:47:a4:
         ee:a6:db:65:68:3d:4b:86:5c:a5:3b:d2:31:f3:31:12:1a:d3:
         1e:f0:ef:15:c3:88:7d:20:8b:08:f5:19:d6:94:7e:ff:65:14:
         10:e9:92:8f:c7:47:02:aa:39:8c:ce:c8:dd:8d:48:1e:27:46:
         a3:b4:22:36:9f:e6:e6:21:43:df:bb:64:d7:3d:9e:32:d1:ed:
         7c:71:87:fe:75:59:bd:03:e0:59:cb:54:f7:d9:d4:e9:2b:6d:
         d3:eb:23:0b:52:5f:a6:31:b6:34:b2:bc:87:05:05:ae:17:2c:
         ac:29:ef:72:55:78:16:d4:d8:73:d7:f1:6a:13:f4:4c:90:3d:
         42:4d:da:30:4d:0c:bb:d6:2b:a6:72:45:c3:92:a4:44:d4:0c:
         ba:f3:cc:7d:7a:14:df:b0:4d:2c:a2:6a:61:d5:71:da:ea:72:
         28:74:2d:39:8e:3f:72:30:ca:24:1f:86:fb:1b:65:97:80:33:
         a0:2d:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org