Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a343030303a3a2f33342d3334203d3e20323638353935.roa
File:                     323830343a353339633a343030303a3a2f33342d3334203d3e20323638353935.roa (raw, json)
Hash identifier:          W2fagd9BiyRcwD1K1IYDmZPj4iUmUSKLLGdB3QKQHQM=
Subject key identifier:   DB:64:23:31:F6:BA:2D:42:28:DF:A4:80:62:C3:B3:F6:48:80:88:A0
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       56AD057B22C625D722CE0F9EA099103DF4F33390
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a343030303a3a2f33342d3334203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:36:38 +0000
ROA not before:           Mon 22 Aug 2022 21:31:38 +0000
ROA not after:            Mon 21 Aug 2023 21:36:38 +0000
asID:                     268595
IP address blocks:        2804:539c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ad:05:7b:22:c6:25:d7:22:ce:0f:9e:a0:99:10:3d:f4:f3:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:31:38 2022 GMT
            Not After : Aug 21 21:36:38 2023 GMT
        Subject: CN=DB642331F6BA2D4228DFA48062C3B3F6488088A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:b6:41:f0:fa:9d:ae:21:0f:75:96:1c:9c:
                    f1:75:12:8b:44:56:91:68:d5:62:13:79:1e:6c:eb:
                    f2:53:4a:a6:6f:60:44:1e:5d:c5:db:6c:f7:d6:83:
                    c0:e1:3f:ab:44:77:a0:8a:7e:9e:49:08:ee:04:e9:
                    a6:ec:82:d8:13:1c:72:bc:1a:8f:ba:30:bb:88:09:
                    19:ca:4e:da:56:6b:80:be:b8:2c:cb:57:c5:19:5f:
                    4c:76:83:70:67:dd:cf:31:3e:73:5b:e2:5b:36:ba:
                    bd:3d:59:0d:77:31:91:e9:b7:f9:5a:71:fd:e6:b9:
                    c9:bd:62:96:e1:59:79:65:58:02:0b:b1:e9:61:44:
                    1a:73:17:9e:08:b7:32:5d:24:b7:1d:39:91:bc:94:
                    07:2c:6c:42:06:33:d9:44:01:d5:5d:5a:bb:ff:71:
                    3a:ef:1e:4b:c2:c7:7c:c5:e0:a9:05:7f:99:b2:25:
                    06:4a:90:bb:13:83:e4:dc:ff:b6:04:74:3f:59:2e:
                    d6:d5:ca:31:0e:4b:cc:a0:b2:fb:90:75:d4:5a:95:
                    b1:6a:55:37:9b:0b:fb:ea:74:5d:fe:00:12:b3:ca:
                    11:8f:24:f9:de:af:ad:4d:b3:83:1e:74:4d:1e:91:
                    8f:50:5d:98:72:26:86:67:ec:7b:92:e9:fe:20:85:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:23:31:F6:BA:2D:42:28:DF:A4:80:62:C3:B3:F6:48:80:88:A0
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a343030303a3a2f33342d3334203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:d2:b8:63:03:72:4d:29:7e:4e:85:b5:4f:cc:ef:b7:37:
         b1:b4:a7:1e:22:e4:17:c5:92:6a:b6:bd:d5:96:8d:49:0f:b3:
         d5:22:39:36:64:37:5a:2c:42:fa:fb:4e:b8:b4:b8:60:cd:db:
         a6:35:ae:2b:e3:25:b9:22:fa:15:b0:34:47:f0:9c:f1:f2:c6:
         8e:39:dd:52:2e:49:97:1c:b2:35:95:f7:d2:ec:5d:d4:90:03:
         d9:37:02:5f:d3:61:72:2e:59:47:56:eb:af:e8:fc:a7:4a:9b:
         04:0b:5d:cc:39:6a:96:20:55:46:ca:6f:30:b4:e7:10:80:62:
         49:9e:73:5f:53:41:4b:f8:66:85:13:5b:b6:06:a0:dd:57:5d:
         35:97:e4:74:94:26:78:2a:d0:49:c0:a0:71:f7:36:85:27:45:
         92:e1:13:c9:55:da:e0:88:b6:49:a6:8c:a5:48:f4:22:e9:9f:
         4e:17:ac:5d:e9:7f:3d:4e:d5:6a:53:48:c7:46:9f:8b:4a:3b:
         16:26:28:6c:89:c4:9f:a7:92:12:51:3d:09:53:ef:bb:5b:34:
         8e:ae:e2:dc:7a:4a:21:7c:cf:75:58:3f:5f:59:cd:3b:1a:4e:
         1c:ec:dd:43:62:01:e8:e5:ec:2d:f6:e9:9a:81:36:e7:f1:d9:
         47:be:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org