Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a3a2f33342d3334203d3e20323730393736.roa
File:                     323830343a373435633a3a2f33342d3334203d3e20323730393736.roa (raw, json)
Hash identifier:          /J3b7HDrPxpggRDvcfpJtmVOblJJQ1dTA0cO7e1OsYU=
Subject key identifier:   A7:93:A5:FA:2D:43:70:87:57:8D:3C:88:94:AB:89:3A:2B:EE:D9:79
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       0B3E7D1E8C811E19DFBCCD4C541DDB1CC7BEFB08
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a3a2f33342d3334203d3e20323730393736.roa
Signing time:             Mon 14 Aug 2023 21:05:01 +0000
ROA not before:           Mon 14 Aug 2023 21:00:01 +0000
ROA not after:            Mon 12 Aug 2024 21:05:01 +0000
asID:                     270976
IP address blocks:        2804:745c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3e:7d:1e:8c:81:1e:19:df:bc:cd:4c:54:1d:db:1c:c7:be:fb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Aug 14 21:00:01 2023 GMT
            Not After : Aug 12 21:05:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b7:e8:4a:d5:fe:4b:aa:dd:db:1b:2b:08:e3:
                    b2:05:c2:93:f4:95:53:bc:fe:18:ba:77:54:8d:94:
                    38:21:61:86:62:20:51:54:db:a7:45:39:1b:0d:92:
                    d2:13:09:da:0a:c1:2c:75:87:1c:f3:fe:c4:ad:15:
                    39:04:1d:65:7f:f8:5c:a2:92:72:4d:5d:79:34:02:
                    d7:54:47:7b:2d:e0:22:fc:7b:d0:a8:bb:e0:dc:ae:
                    29:50:7a:7e:8e:57:96:9f:e9:b3:14:5d:57:78:7e:
                    69:ef:60:9f:e9:a6:39:a0:38:a1:73:2b:e9:10:e7:
                    1d:3b:eb:ea:6a:67:c6:bc:cc:87:44:6f:4f:b8:52:
                    21:85:72:d6:6e:7d:57:0d:ce:44:3b:b4:51:5c:2f:
                    c6:f3:da:da:85:81:23:6d:df:66:82:9d:2c:dd:e1:
                    98:a9:1d:e1:e7:45:e4:06:d0:0a:44:dd:d6:8d:6a:
                    0f:14:aa:1b:ec:48:6c:52:0d:4f:cd:7c:ac:09:b6:
                    25:df:27:da:27:95:95:85:28:18:5d:53:11:a9:fa:
                    21:46:5c:28:97:97:0f:6d:ad:2b:ca:be:76:42:aa:
                    07:3f:c2:68:c0:6c:1b:64:25:47:2c:2f:45:40:d3:
                    c3:ac:bf:7c:fc:0d:f5:ee:34:d2:0b:11:26:8e:01:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:93:A5:FA:2D:43:70:87:57:8D:3C:88:94:AB:89:3A:2B:EE:D9:79
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a3a2f33342d3334203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:745c::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:13:67:2e:f1:87:b3:ae:32:ce:e9:12:32:7e:99:3f:da:
         3e:df:de:47:f1:d1:0f:d1:98:3e:ab:25:09:cf:ce:64:27:d0:
         0c:9e:60:da:6c:87:8e:6f:f3:ce:e6:49:be:39:a8:cb:80:17:
         94:56:9b:2d:af:53:e6:a6:15:9c:7a:7a:a8:2b:74:a9:bd:f8:
         63:a3:13:c8:b7:91:7f:da:b9:09:aa:02:fe:53:5f:df:6a:38:
         36:30:7e:39:40:d5:96:bf:ee:98:f7:49:b1:ea:c0:aa:1b:2d:
         cb:e5:17:6c:1a:ef:f9:76:76:e4:db:4c:43:91:c1:7a:d3:86:
         70:c6:95:8f:bf:e1:0f:34:2e:ea:45:d2:fa:5e:56:60:a0:d1:
         fa:2f:2a:e9:42:7f:af:0b:f3:4d:9a:e2:05:4e:9b:40:06:da:
         32:55:59:71:e9:e9:bc:ff:96:27:e7:27:ed:02:17:8a:dc:b7:
         9c:f2:65:4d:34:50:74:a0:83:be:98:2c:d8:38:cc:80:66:d7:
         be:a5:07:6c:ec:12:5e:47:ff:e4:70:7e:52:b0:46:17:f5:27:
         8e:f6:b6:57:9c:b9:c4:57:6f:36:b7:3e:b7:b0:47:b1:10:16:
         e1:f4:ea:f1:4d:e9:7e:fa:c9:25:95:a7:17:19:7e:9a:a7:1f:
         23:79:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org