Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33342d3334203d3e20323637333330.roa
File:                     323830343a346263633a3a2f33342d3334203d3e20323637333330.roa (raw, json)
Hash identifier:          HhfFCMnyXLeP7PqEdD0ccZEw5RNQn7JYhxJ63nUr3yw=
Subject key identifier:   9E:0E:83:1A:E3:B7:28:B9:74:BC:96:09:3F:98:CF:E3:5D:3C:FA:CD
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       42595E30EAD1674AFCBE2B335F3A9B6FF4C5BA4F
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33342d3334203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:20 +0000
ROA not before:           Thu 14 Sep 2023 14:40:20 +0000
ROA not after:            Thu 12 Sep 2024 14:45:20 +0000
asID:                     267330
IP address blocks:        2804:4bcc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:59:5e:30:ea:d1:67:4a:fc:be:2b:33:5f:3a:9b:6f:f4:c5:ba:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:20 2023 GMT
            Not After : Sep 12 14:45:20 2024 GMT
        Subject: CN=9E0E831AE3B728B974BC96093F98CFE35D3CFACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:78:51:1c:d5:8b:af:ad:57:9a:1d:df:ae:
                    5b:ce:4e:38:47:5c:8d:c7:92:16:a2:77:a2:e8:a5:
                    64:26:5d:70:e3:28:ad:79:ef:62:d3:d7:59:65:56:
                    ce:93:02:34:2a:e5:28:6d:71:7a:00:2e:59:5d:4d:
                    67:a8:19:04:29:e0:a3:25:4e:7b:46:92:30:74:7d:
                    85:54:35:27:a8:aa:b3:47:05:75:48:cf:9b:75:ae:
                    d2:47:78:e6:87:32:16:00:47:60:a7:cf:e6:8d:8a:
                    06:31:fe:a6:ef:89:1c:14:d2:ff:06:b2:d8:d8:20:
                    8b:e5:16:73:7c:45:1b:77:23:07:0b:90:b6:9d:97:
                    e6:b1:e3:b2:2a:25:d7:a7:c4:0c:d7:f2:6f:e0:7c:
                    c3:42:43:b5:2a:21:6e:74:4d:5d:bc:1e:aa:6e:17:
                    4f:62:61:1b:55:c1:34:4e:32:da:22:61:95:58:e2:
                    fd:4e:20:e4:44:71:6d:3b:9d:e8:0c:86:60:2c:c2:
                    5a:b6:c3:ab:e2:bf:0c:8e:fc:30:90:a7:90:50:03:
                    19:b7:3f:27:99:cb:7e:5e:26:b2:c5:6c:3b:38:db:
                    20:c3:5d:ea:23:95:77:49:2e:8e:21:6e:93:13:63:
                    ec:31:43:a5:89:22:53:63:37:f2:19:22:c3:94:c0:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:83:1A:E3:B7:28:B9:74:BC:96:09:3F:98:CF:E3:5D:3C:FA:CD
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33342d3334203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:a2:d9:03:e7:db:c3:42:0f:e1:e0:40:a9:b2:ad:d3:d0:
         23:4c:20:32:6d:cb:86:16:e9:8c:2d:06:fd:2d:01:ad:86:f6:
         48:00:69:af:5b:0d:74:3a:11:16:9a:43:a1:01:f2:1a:0f:fd:
         48:1c:25:a1:db:e9:8e:4a:a3:80:df:ea:b2:a0:2a:10:9c:e2:
         78:9a:23:af:de:54:6e:e7:fb:11:6d:7b:2f:1e:82:c4:3c:8f:
         52:3f:ea:4c:50:66:a3:d1:33:c3:ae:f2:cf:99:ff:5a:38:8a:
         61:8d:2e:56:f8:25:e5:09:74:2a:0c:87:d8:80:b8:05:02:50:
         78:cf:23:9c:4c:3a:71:30:e6:17:1f:d6:b8:6e:3d:a4:36:a1:
         86:b7:08:be:d5:b7:ee:bc:f3:36:0d:e6:e9:eb:3e:72:4d:56:
         95:68:32:93:b6:db:74:a4:20:45:21:65:05:94:7f:18:05:b5:
         df:25:9e:bc:49:b8:ef:f6:83:b9:6a:18:c0:2f:05:f0:b5:6e:
         ec:e8:6b:21:54:33:45:6b:10:de:a9:90:6b:7b:c5:c5:e0:af:
         6f:c8:e5:56:90:d6:c8:58:6f:ad:7b:f9:67:96:6c:eb:4a:80:
         25:bc:17:79:ad:4d:be:23:f6:3c:f4:d2:31:ff:94:d4:24:78:
         b1:55:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org