Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3438203d3e203532353537.roa
File:                     323830343a6364303a3a2f33322d3438203d3e203532353537.roa (raw, json)
Hash identifier:          dSuuHMLUZmJgjhISBMBifBmOjVUbI5b8HgMzZywfkdI=
Subject key identifier:   0B:13:F0:1E:2F:C2:39:BD:25:EE:53:21:29:42:90:1D:92:2F:F4:B2
Certificate issuer:       /CN=DB230BDFE01F82C051C74A2139FA5FD231C8D9D7
Certificate serial:       09EEEC52CFA50F9F8E3DC81F89E3E29027A57617
Authority key identifier: DB:23:0B:DF:E0:1F:82:C0:51:C7:4A:21:39:FA:5F:D2:31:C8:D9:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3438203d3e203532353537.roa
Signing time:             Sun 19 Jun 2022 00:00:00 +0000
ROA not before:           Sat 18 Jun 2022 23:55:00 +0000
ROA not after:            Mon 19 Jun 2023 00:00:00 +0000
asID:                     52557
IP address blocks:        2804:cd0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ee:ec:52:cf:a5:0f:9f:8e:3d:c8:1f:89:e3:e2:90:27:a5:76:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB230BDFE01F82C051C74A2139FA5FD231C8D9D7
        Validity
            Not Before: Jun 18 23:55:00 2022 GMT
            Not After : Jun 19 00:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:8e:c2:6e:cc:7a:33:8d:2c:fb:33:72:ca:
                    36:c0:47:d2:d2:3b:51:3b:9a:f3:fa:bc:dc:82:cf:
                    5d:5f:a5:01:5f:99:21:0b:d7:31:f4:bf:b4:83:91:
                    0c:f2:8d:1c:55:6a:01:bf:6c:5e:f8:4f:d0:48:36:
                    2a:71:d2:fa:d9:ba:9c:60:96:c1:67:27:2c:12:60:
                    fb:0a:c2:77:b0:a1:c2:c0:69:da:40:60:05:e9:63:
                    7e:06:39:ba:b4:81:d1:93:05:1f:a8:11:4a:23:96:
                    84:27:7f:5a:17:44:8d:9e:e4:48:d8:f6:ef:df:33:
                    48:61:51:61:6d:cb:41:e3:f8:e0:53:06:f1:ec:8e:
                    c7:57:6b:7a:bc:93:a3:21:15:59:f9:95:6c:37:1b:
                    1a:d4:33:79:cd:69:7c:89:0b:ce:59:8e:0c:d3:48:
                    70:90:63:5c:f9:7d:70:fc:ac:6d:08:2f:59:28:46:
                    9d:be:c9:7e:65:a6:80:27:81:60:01:7f:ad:72:4e:
                    c3:eb:6e:06:14:84:f7:98:21:33:41:7c:79:e8:3e:
                    02:ee:22:51:1c:9d:91:62:dc:1d:5b:c1:0f:43:5e:
                    c6:42:6b:6f:59:9d:60:1d:37:10:34:fe:a8:52:6f:
                    13:7c:96:b6:87:5f:31:c0:0d:9a:83:76:06:ab:c8:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:13:F0:1E:2F:C2:39:BD:25:EE:53:21:29:42:90:1D:92:2F:F4:B2
            X509v3 Authority Key Identifier:
                keyid:DB:23:0B:DF:E0:1F:82:C0:51:C7:4A:21:39:FA:5F:D2:31:C8:D9:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3438203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:6a:10:d0:c8:0d:55:6e:9e:d0:69:6d:bd:a1:3f:84:12:
         87:94:b2:a6:87:e0:65:67:43:31:97:f8:1b:cf:ca:9b:04:d3:
         33:b0:7b:f7:1e:82:ae:c8:91:ff:8f:b4:e1:7a:4b:54:05:a5:
         21:13:de:79:d7:7c:60:37:3e:28:4f:37:e8:3d:81:8d:16:4f:
         bf:08:6f:48:84:d7:e7:b1:44:fd:95:d1:ac:71:8b:9d:91:f1:
         68:b6:d0:8b:dc:cb:3c:a9:de:65:46:dc:76:4f:02:0b:94:46:
         98:d9:d0:b0:b5:ca:79:ab:83:1d:4a:7a:31:3a:ca:0d:ec:d2:
         e7:57:c3:be:1f:e2:b8:68:4b:8e:b1:bc:35:93:df:1f:c9:4d:
         17:78:38:bf:32:8e:7c:7d:ad:b6:b5:ce:ba:c6:19:b5:6d:cc:
         ea:d1:97:b9:3a:bf:66:3e:99:8f:53:36:3f:ab:9a:76:36:b1:
         68:63:46:7d:61:99:77:d1:9e:48:c1:23:3a:3c:1d:32:73:d9:
         ff:1e:0b:8d:95:7a:67:15:cf:cd:03:e6:02:81:03:83:6a:4d:
         b0:de:de:c8:94:80:96:23:73:e2:b1:f6:a8:4f:05:91:60:f7:
         ef:f4:06:f0:cd:1e:c8:90:51:0c:ff:91:47:19:10:15:c3:15:
         4d:01:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org