Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/323830343a343132303a3a2f33322d3335203d3e20323636303035.roa
File:                     323830343a343132303a3a2f33322d3335203d3e20323636303035.roa (raw, json)
Hash identifier:          HTZ+ZHDZCk6aL8Xz3jkupZsnuwyzLGsICh7IeFHQ7fs=
Subject key identifier:   AC:94:EA:AC:04:0E:C1:0D:94:29:3C:0E:2C:CC:A9:92:BE:C3:C6:71
Certificate issuer:       /CN=4268E7D68AD434C800D3E63BB48AD3784366EDEA
Certificate serial:       4337C453D2900E84FCFE4973EC9C62659E0D7325
Authority key identifier: 42:68:E7:D6:8A:D4:34:C8:00:D3:E6:3B:B4:8A:D3:78:43:66:ED:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/323830343a343132303a3a2f33322d3335203d3e20323636303035.roa
Signing time:             Wed 24 Jan 2024 11:35:11 +0000
ROA not before:           Wed 24 Jan 2024 11:30:11 +0000
ROA not after:            Wed 22 Jan 2025 11:35:11 +0000
asID:                     266005
IP address blocks:        2804:4120::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:37:c4:53:d2:90:0e:84:fc:fe:49:73:ec:9c:62:65:9e:0d:73:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268E7D68AD434C800D3E63BB48AD3784366EDEA
        Validity
            Not Before: Jan 24 11:30:11 2024 GMT
            Not After : Jan 22 11:35:11 2025 GMT
        Subject: CN=AC94EAAC040EC10D94293C0E2CCCA992BEC3C671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:83:ea:d5:fe:e4:71:2f:e2:8a:9b:17:b4:
                    00:0a:12:a5:3f:3d:42:8a:77:a7:9e:59:df:9c:d7:
                    63:bf:ba:47:16:52:e3:7c:e0:1d:83:c8:dc:f0:3b:
                    91:a9:ce:69:58:4b:df:b1:33:86:21:f8:2e:e9:16:
                    12:14:c3:df:6d:ab:64:3e:17:42:e9:63:5c:bd:36:
                    b4:d8:3a:34:08:5d:7f:f2:19:d6:3b:32:27:63:5d:
                    c3:cd:47:1a:43:93:fa:aa:05:d4:7b:5b:77:65:6d:
                    5d:38:9d:35:29:40:aa:45:6d:46:c1:8a:50:ad:b8:
                    6b:c0:3e:fb:2d:ae:da:6d:0d:39:68:63:b8:76:75:
                    e0:c7:13:4a:dd:10:90:97:98:7d:ee:a2:1e:a0:95:
                    38:3a:da:b1:3c:5e:7b:26:9f:66:8d:5a:5e:19:3c:
                    10:be:85:79:09:e7:21:2f:0f:8b:96:0b:37:11:9f:
                    41:8c:2e:af:24:d5:87:7a:c4:f7:f5:2c:50:91:62:
                    28:d9:2e:c0:b9:56:af:5a:3a:6c:ec:c7:e6:db:20:
                    99:13:a4:6d:d5:fd:b8:ca:b2:99:fb:b8:cd:1d:d8:
                    dc:18:c3:d6:ae:9e:cf:1a:a2:e4:97:84:2a:e1:b2:
                    97:64:b7:4c:05:5e:79:a4:e3:c6:e0:07:63:20:cb:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:EA:AC:04:0E:C1:0D:94:29:3C:0E:2C:CC:A9:92:BE:C3:C6:71
            X509v3 Authority Key Identifier:
                keyid:42:68:E7:D6:8A:D4:34:C8:00:D3:E6:3B:B4:8A:D3:78:43:66:ED:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/323830343a343132303a3a2f33322d3335203d3e20323636303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:da:54:d1:4d:c8:c8:3d:c3:2d:81:e4:9c:21:4f:26:52:bd:
         ed:26:65:aa:a3:02:49:d6:88:28:c9:84:da:fc:ed:4a:87:95:
         98:d9:81:7a:5c:62:3e:20:14:4b:ea:b0:d2:ab:06:45:c1:e7:
         66:92:05:da:c9:22:ba:b9:16:cd:45:aa:d3:e8:ee:a7:a9:69:
         4c:e3:81:e6:b8:90:9a:0e:cc:e4:e9:7a:6c:02:66:e2:e2:01:
         df:70:2c:9e:83:ba:f5:c5:c6:2f:35:ba:31:2c:4d:a1:33:80:
         0b:2d:93:95:13:f5:69:79:49:45:3f:63:dd:ff:9d:be:d4:67:
         8e:c3:45:2c:4b:11:37:84:9d:8b:bd:4a:db:79:e6:56:a1:fd:
         e4:48:dc:8e:e5:0e:b1:fe:3a:d7:83:10:bd:5e:e7:ef:08:22:
         25:94:3c:5a:11:02:99:10:b3:56:2a:04:23:78:a9:58:dd:89:
         15:ce:ca:6d:0b:a9:1d:b1:f2:9a:03:ac:89:d6:fc:b1:84:2c:
         88:86:20:e4:46:c7:d9:73:72:0d:01:a1:b3:98:10:7c:4e:e2:
         6a:b2:64:cb:d7:42:9a:fe:9e:c1:10:4d:75:77:04:7c:50:aa:
         5e:ca:8f:40:a4:61:dd:c3:c2:c3:53:7b:c4:bd:ab:24:13:1d:
         89:9d:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org