Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/323830343a363635303a3a2f33322d3438203d3e20323639353438.roa
File:                     323830343a363635303a3a2f33322d3438203d3e20323639353438.roa (raw, json)
Hash identifier:          dr5rV57NMu72UIw3jerJUPEKST3T3vKEaj2rWfazQ0Y=
Subject key identifier:   1A:8D:76:00:9A:1A:AB:CD:4B:2C:82:9D:A6:4C:A6:B1:61:6E:19:6A
Certificate issuer:       /CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
Certificate serial:       1A1C807A81DFF7C0999B78C77B2B227BCFBC8527
Authority key identifier: 04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/323830343a363635303a3a2f33322d3438203d3e20323639353438.roa
Signing time:             Thu 04 Apr 2024 13:32:07 +0000
ROA not before:           Thu 04 Apr 2024 13:27:07 +0000
ROA not after:            Thu 03 Apr 2025 13:32:07 +0000
asID:                     269548
IP address blocks:        2804:6650::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:80:7a:81:df:f7:c0:99:9b:78:c7:7b:2b:22:7b:cf:bc:85:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
        Validity
            Not Before: Apr  4 13:27:07 2024 GMT
            Not After : Apr  3 13:32:07 2025 GMT
        Subject: CN=1A8D76009A1AABCD4B2C829DA64CA6B1616E196A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:91:1c:92:87:f9:55:5b:b8:d3:92:94:4c:
                    c8:1a:0e:6f:ac:94:35:14:9b:af:0a:a5:11:0e:b4:
                    ec:cd:36:40:d0:45:5c:db:21:80:cb:24:97:3d:bd:
                    69:6c:c5:91:a3:77:65:5d:b9:07:20:24:56:4f:36:
                    6c:be:3f:0b:34:4e:8a:1f:21:7b:2c:68:d5:5e:10:
                    37:b8:a4:37:70:42:12:bc:a2:00:d9:48:11:6f:49:
                    79:ff:d7:6c:e5:0c:10:5f:df:68:a4:30:ba:a7:15:
                    15:51:f9:f9:34:05:40:f2:e1:7f:5e:ae:6a:88:c7:
                    85:52:1f:d7:56:43:87:3c:08:1a:fc:c0:38:a1:fb:
                    79:78:ab:2a:c5:b7:d6:f4:b0:5d:54:ff:d1:04:2f:
                    6e:17:6c:6a:f4:d3:8e:0f:f3:db:ef:8b:c8:66:e3:
                    5e:da:fc:f5:93:c4:9a:30:c8:cc:d3:ee:a7:7c:9b:
                    d8:81:2f:d3:b5:bd:e5:4c:10:77:c6:46:6c:f2:0e:
                    66:3d:dd:7b:c4:86:80:92:2c:63:5a:be:82:eb:c4:
                    fc:e9:72:49:4a:ff:db:96:10:bc:0e:11:ee:1f:8e:
                    9f:c1:4a:71:53:e2:ec:a1:0c:d8:e7:11:d5:c9:fc:
                    39:1f:2a:4f:1a:af:fe:66:78:67:46:b7:7b:87:f9:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8D:76:00:9A:1A:AB:CD:4B:2C:82:9D:A6:4C:A6:B1:61:6E:19:6A
            X509v3 Authority Key Identifier:
                keyid:04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/323830343a363635303a3a2f33322d3438203d3e20323639353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6650::/32

    Signature Algorithm: sha256WithRSAEncryption
         e7:7c:12:d1:54:ea:52:77:91:13:be:2f:b9:04:23:32:63:9d:
         b0:a6:a5:3f:35:49:76:6c:a2:65:f9:b7:49:1b:b2:af:f1:a7:
         09:56:ed:dc:9c:d0:0c:30:71:4b:73:73:5d:d4:0e:95:0e:8d:
         d3:93:58:81:c0:d6:19:5b:79:fb:e7:1f:15:39:56:ad:38:a6:
         07:66:02:c4:e7:e4:6e:f3:ed:7a:55:6b:9b:b6:2e:22:db:ea:
         7b:0f:2b:30:d2:39:84:5b:a4:a0:82:12:fb:40:97:6b:22:3e:
         94:fa:1a:32:a2:37:9a:70:4b:2f:b0:2e:b7:a7:a6:f6:e4:c8:
         ee:b0:3b:75:6e:73:81:3e:ab:14:c6:8d:a1:6b:c9:17:85:e7:
         c9:0d:e6:e7:97:04:9a:31:35:96:16:8e:43:50:ce:19:86:43:
         a3:be:64:a7:7b:d6:79:82:c3:9c:fe:cd:b1:17:6e:32:12:56:
         a4:6e:6b:ed:10:ec:fa:bc:7c:ad:02:0b:4e:ff:c6:aa:77:ec:
         42:90:99:c9:1b:5e:40:ad:b4:5c:2f:f1:4b:dd:19:28:e3:15:
         7c:67:be:29:25:0c:2f:92:23:c7:a7:da:13:98:b4:80:8e:c3:
         9b:12:ae:4d:98:fc:8b:c1:35:81:4d:0e:33:85:fd:78:ed:e9:
         db:97:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org