Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a3630303a3a2f34302d3430203d3e203631373236.roa
File:                     323830343a316236383a3630303a3a2f34302d3430203d3e203631373236.roa (raw, json)
Hash identifier:          aYUG7gpMP/69+SlQLQerd4lP2bKauCX8Wi+5YfmLMP8=
Subject key identifier:   8E:39:AE:E2:EC:A8:8C:BC:69:0E:83:78:60:4B:8B:F4:86:9A:DD:C4
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       14C8ADF23B37013E0F6084647749A5DE461C64A8
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a3630303a3a2f34302d3430203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:42 +0000
ROA not before:           Tue 06 Feb 2024 18:17:42 +0000
ROA not after:            Tue 04 Feb 2025 18:22:42 +0000
asID:                     61726
IP address blocks:        2804:1b68:600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c8:ad:f2:3b:37:01:3e:0f:60:84:64:77:49:a5:de:46:1c:64:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:42 2024 GMT
            Not After : Feb  4 18:22:42 2025 GMT
        Subject: CN=8E39AEE2ECA88CBC690E8378604B8BF4869ADDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:47:db:93:5f:06:55:60:e8:e2:3f:93:ea:
                    55:1b:36:6e:81:e9:08:27:3e:7e:8a:7c:1a:56:e5:
                    a8:56:4a:04:8c:6e:58:5e:74:b0:56:da:e4:73:16:
                    aa:e9:31:bb:49:0b:08:31:3c:ab:d6:2a:f9:16:b9:
                    5a:e1:12:e6:50:e8:8b:7c:6d:cd:7f:a4:d1:25:97:
                    0a:8c:35:9b:f1:63:94:a3:cd:b5:8c:83:ee:c8:4b:
                    be:b8:a2:ed:f0:0e:8b:65:2b:0e:71:c8:92:e5:42:
                    8a:14:8f:25:31:b9:3b:6d:82:87:04:50:61:be:45:
                    66:ed:a6:bc:eb:ee:63:de:00:08:2c:0b:03:87:af:
                    90:48:ad:03:d6:69:08:08:00:57:14:ee:9a:a0:ea:
                    81:95:a4:c3:3a:61:d2:6c:71:42:ca:e6:d1:71:a8:
                    8a:6d:ab:f6:05:81:21:1b:6d:74:fc:e1:2a:9f:18:
                    22:1d:3f:d1:33:f1:68:6f:9c:cc:45:37:6d:94:57:
                    b8:ac:7b:ae:e0:6e:ee:c7:74:15:3e:30:0f:b6:3c:
                    c6:e5:b2:f4:b7:5f:7d:11:0f:4d:d9:69:2d:4f:85:
                    4e:30:61:5c:10:67:8a:38:74:60:bd:36:01:a3:0c:
                    c8:1d:1f:b8:89:e2:bb:6c:65:a4:40:6e:b1:49:6a:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:AE:E2:EC:A8:8C:BC:69:0E:83:78:60:4B:8B:F4:86:9A:DD:C4
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a3630303a3a2f34302d3430203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:87:3b:be:67:5b:67:e1:78:ab:60:ba:26:c8:d2:01:2f:
         50:f8:2e:f1:43:e5:4e:c1:d6:52:9a:53:cf:77:47:41:27:a8:
         00:43:6c:07:26:57:a0:73:f3:e0:5a:29:a9:35:e7:7c:ed:21:
         1c:e6:bd:c9:f7:b6:91:3a:0f:ee:9f:06:a6:78:07:0c:70:08:
         47:9b:88:e5:69:94:2f:0b:b7:c0:21:09:f5:3e:8f:a7:8f:2f:
         21:2a:15:ab:c8:56:41:d6:5a:5e:bd:d8:13:45:f5:68:c5:3a:
         6a:e4:dc:1d:a6:63:4e:aa:b8:ae:ed:e3:ae:40:3e:25:bb:fd:
         de:e8:d8:ea:a4:dd:3b:14:b0:7c:07:42:00:5c:ba:f7:22:20:
         8c:19:75:2c:35:d8:1c:aa:70:b5:f6:bc:ee:d4:9b:93:78:52:
         8e:d3:e3:d9:56:59:f1:e9:10:80:86:01:84:18:6a:dd:12:3a:
         fe:6d:97:1a:2d:09:e7:5c:09:23:a5:40:47:d9:9a:f5:0e:e8:
         5a:fa:22:81:92:3f:b7:cc:13:43:6b:1b:00:10:8f:41:e8:49:
         e6:15:e1:67:03:4a:22:0e:78:cf:93:c3:f4:1f:e8:6a:1c:61:
         7a:f1:19:1a:29:7f:7b:3b:f5:92:b3:97:93:c6:df:4f:33:85:
         0d:a0:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org