Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          bArMe2KJGOSdAt0Es1PYEIZDyJ0+HA+Akk4LEp0/Ymc=
Subject key identifier:   2E:C4:86:08:0B:9A:D6:D1:A3:08:5F:14:C2:3E:86:BB:AA:7E:1B:24
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       7F6C0575847FA1643DF8FB812B489F2AA4B0C7DD
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        2804:735c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6c:05:75:84:7f:a1:64:3d:f8:fb:81:2b:48:9f:2a:a4:b0:c7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=2EC486080B9AD6D1A3085F14C23E86BBAA7E1B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:88:f2:06:e2:79:a1:50:d4:74:e7:0f:fa:
                    dc:17:48:94:25:18:22:20:14:47:42:85:2f:f5:46:
                    e6:2a:e9:5c:39:c1:de:5a:8e:72:25:c5:a8:3e:5d:
                    3d:53:8c:d8:c5:52:2f:18:65:e0:f7:80:f6:1f:1c:
                    da:b5:30:50:8d:a5:40:2b:7b:1d:ed:88:39:c0:e4:
                    8f:82:ad:1c:20:c4:62:78:ba:37:84:59:25:cd:cb:
                    69:8b:9f:bd:2f:c9:a0:54:d7:33:ce:40:b6:44:74:
                    5d:82:ef:d5:0b:66:f2:a2:de:c7:9c:29:fb:d3:4c:
                    f0:aa:ff:28:97:8b:87:10:3c:16:17:61:8c:04:d0:
                    6c:e5:63:c5:2c:91:ca:53:02:53:cd:fe:93:8f:22:
                    a3:56:aa:96:ed:1d:b9:1a:81:c2:b1:0a:0d:6c:43:
                    04:23:4b:c3:07:e2:58:0a:4a:dd:95:e1:11:5c:97:
                    e8:46:20:20:d2:98:6a:a0:29:b3:2a:ff:c7:2f:10:
                    2f:18:6c:97:37:37:97:c4:cb:b7:db:a5:12:b7:c0:
                    f4:82:8d:8c:74:34:0d:b0:20:1b:30:84:38:bb:5b:
                    37:5d:81:78:fe:53:d8:a3:d4:e9:03:fc:af:46:11:
                    be:4a:b6:88:5a:5f:c7:9e:2c:97:96:6a:8c:d9:6c:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C4:86:08:0B:9A:D6:D1:A3:08:5F:14:C2:3E:86:BB:AA:7E:1B:24
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:60:45:bb:c4:71:a3:e1:32:55:ef:0c:e1:b1:b5:5f:cc:b7:
         89:b8:de:95:8d:a2:9b:a1:55:bd:1e:3c:d3:7c:1f:b9:7d:53:
         95:f2:dd:ab:4c:5c:47:39:2e:d4:23:f7:e5:f7:3f:29:3c:61:
         38:de:ba:50:ab:6a:27:cc:bb:c4:14:cd:90:04:e8:c7:90:46:
         1a:5a:fa:09:b4:df:2f:83:0d:1f:c3:a3:2f:59:43:f8:9e:2d:
         d6:51:3b:ff:8e:a9:c9:66:22:0d:22:ed:01:15:4b:59:ae:5c:
         0a:83:0c:7a:ca:c9:46:22:56:9b:b9:b8:1d:67:ea:ee:5d:e5:
         45:9e:c1:75:75:d7:f5:d2:f0:58:3f:40:ed:55:bd:89:2f:97:
         3b:68:70:63:ab:aa:1b:5d:50:7b:02:9c:f1:e9:e3:41:1a:66:
         a8:9f:7c:5b:cb:b5:2b:d4:c2:13:a2:b1:fc:c9:08:d0:44:f3:
         44:b2:05:d5:9a:30:9b:cc:16:8a:9a:d3:50:a6:65:4a:25:48:
         62:2d:47:f6:90:e4:19:2b:79:8a:d5:45:ce:85:6d:bb:cb:70:
         b0:10:fe:5b:1e:c1:6c:3c:e5:36:a5:e9:43:fc:22:49:0f:23:
         fd:39:99:b2:a5:17:a1:21:45:20:7b:de:01:e8:e5:04:4f:47:
         2b:3e:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org