Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33342d3334203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33342d3334203d3e20323733363036.roa (raw, json)
Hash identifier:          3rw2pRQ82hpspSuakN7vblduGZorkwOqQOHvcmOrrcc=
Subject key identifier:   DC:E4:EA:B1:59:EF:51:0F:8D:26:07:8E:48:F6:5F:C7:CB:DB:F7:62
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       7F9C356088AC9A38C846A4C313CEB8CE1D7BF592
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33342d3334203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:54 +0000
ROA not before:           Sat 24 Feb 2024 03:36:54 +0000
ROA not after:            Sat 22 Feb 2025 03:41:54 +0000
asID:                     273606
IP address blocks:        2804:8978::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9c:35:60:88:ac:9a:38:c8:46:a4:c3:13:ce:b8:ce:1d:7b:f5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:54 2024 GMT
            Not After : Feb 22 03:41:54 2025 GMT
        Subject: CN=DCE4EAB159EF510F8D26078E48F65FC7CBDBF762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:2c:34:c7:3c:79:0d:cb:d7:29:a9:ac:dd:
                    c1:61:84:d9:dd:ca:09:db:89:3a:24:2d:c0:3d:c4:
                    f6:c4:c4:a1:1c:48:46:f9:d7:dd:7b:25:86:b2:a5:
                    95:d1:29:16:ae:96:28:25:49:da:7a:fb:29:c5:cc:
                    d1:77:45:b8:47:2b:1f:17:c2:b2:88:d6:08:e4:8d:
                    d7:9b:bc:03:d0:cc:19:db:36:cc:3d:f5:5f:65:bb:
                    3d:03:b3:af:1b:1c:ff:8a:a7:e9:aa:83:c1:e0:bd:
                    1b:17:54:0d:49:73:3d:75:66:30:99:d4:24:1c:c6:
                    99:d4:41:81:8b:ec:4b:88:6c:23:e1:7a:1b:05:54:
                    7c:87:fc:d7:a8:11:6b:4f:02:35:17:94:35:38:08:
                    3f:0a:29:f1:b9:4a:87:65:fc:ef:32:e2:0e:54:9c:
                    5f:ce:d0:20:3b:9d:09:0c:42:fd:fc:8c:7f:52:8c:
                    ea:ed:c0:41:45:94:81:bd:15:ad:10:e2:99:32:d8:
                    da:07:b4:d6:da:11:0e:ee:93:b5:cb:4a:3d:41:a6:
                    ba:07:da:41:7f:38:c7:df:ce:c3:6a:fd:6e:62:9e:
                    ed:92:a0:55:d6:71:cc:12:33:a9:10:6e:9f:bd:c3:
                    44:69:3e:c7:56:b5:c1:f7:5b:e9:4a:cf:ea:a0:28:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:EA:B1:59:EF:51:0F:8D:26:07:8E:48:F6:5F:C7:CB:DB:F7:62
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33342d3334203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:0b:c8:73:e7:96:c4:46:16:eb:08:c8:5c:8d:12:27:8e:94:
         29:01:12:22:5a:8b:dc:05:a4:e5:91:4e:a2:62:35:94:3a:cd:
         5b:a4:13:29:81:54:0e:d6:d1:30:16:55:66:c2:72:1f:17:f0:
         97:83:d2:9e:8c:1c:40:12:de:68:05:46:17:3d:3a:d5:ce:f5:
         05:5c:23:7a:3b:8e:79:6a:ef:de:54:56:0f:11:ad:c6:79:1d:
         c1:a6:11:33:57:95:91:99:06:a1:2c:cd:c2:a8:e0:91:2b:88:
         51:01:00:18:b0:ac:17:5c:87:9e:a9:75:22:0a:62:99:7f:56:
         37:9d:42:56:2d:d3:80:1c:9c:5a:df:3f:77:e6:ad:bb:a5:d6:
         00:4b:be:d5:5b:97:77:84:ea:a6:c1:7b:75:7a:14:24:4a:d0:
         7d:47:90:7a:eb:dd:ff:91:a6:5a:6e:34:bd:42:f1:b1:e7:86:
         d2:a5:e4:74:a9:7e:8a:f8:74:8b:7c:ac:0d:31:25:b1:39:b0:
         40:84:82:44:5e:22:65:7c:0f:8b:db:af:cb:42:3f:5e:91:e9:
         3f:5c:c3:0d:c6:73:93:55:37:eb:b0:fc:c8:26:bb:13:7a:b9:
         e8:3e:aa:53:80:88:40:e2:ec:91:fd:17:e9:a3:f0:19:a1:e1:
         75:27:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org