Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa
File:                     323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier:          PNqmOGyfJ2pFNmU4CtIebVeF5fXN3UodqFeCApslTRw=
Subject key identifier:   3D:6A:8F:B3:88:08:AE:A8:3A:07:78:66:E5:D2:79:9B:B1:EE:8D:DB
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       1D5162B211E76DF925A8AD34DDA6A4B483229C38
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:23 +0000
ROA not before:           Wed 28 Feb 2024 13:58:23 +0000
ROA not after:            Wed 26 Feb 2025 14:03:23 +0000
asID:                     28210
IP address blocks:        2804:56c:2100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:62:b2:11:e7:6d:f9:25:a8:ad:34:dd:a6:a4:b4:83:22:9c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:23 2024 GMT
            Not After : Feb 26 14:03:23 2025 GMT
        Subject: CN=3D6A8FB38808AEA83A077866E5D2799BB1EE8DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:c6:0d:b4:7c:7a:4d:fd:01:67:2d:be:0e:
                    c6:5d:e7:a8:ae:81:80:75:0e:c5:83:c0:b2:58:e4:
                    da:a3:04:79:2d:f3:1c:15:ff:04:02:27:ed:29:fc:
                    05:75:fb:87:eb:76:97:88:e4:2f:68:e9:55:11:7b:
                    eb:e6:3a:38:e4:42:11:4c:71:64:0d:1d:8e:ef:6e:
                    00:e7:58:c0:04:71:5d:f5:ab:1b:53:49:49:ff:c9:
                    e2:5f:48:72:0f:01:0e:cf:04:7f:f4:6d:5e:1b:76:
                    c6:4c:a0:b3:eb:8d:04:b4:ba:b1:c4:27:94:0e:0a:
                    32:a1:1c:46:34:9e:34:62:46:da:d5:f6:b7:6a:90:
                    59:57:b6:c4:7b:dc:d4:f3:54:72:f6:38:5a:df:3c:
                    1f:bb:94:9c:59:d5:95:dc:e8:5c:af:05:12:12:91:
                    82:ac:27:df:6c:44:82:0c:88:d2:24:fc:85:af:74:
                    9e:6b:e7:13:9b:7f:5e:55:12:06:ea:3e:7e:f9:d8:
                    ec:08:48:2e:a3:a5:d3:25:33:fa:2c:d6:a0:c5:2e:
                    a8:a4:5e:d7:4b:8f:35:57:5a:ba:03:76:ae:01:28:
                    b0:d7:ea:7a:42:f1:70:d6:49:58:ea:01:fb:6c:a1:
                    37:49:19:3d:48:7e:f8:16:83:a4:20:e2:cb:a1:5a:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6A:8F:B3:88:08:AE:A8:3A:07:78:66:E5:D2:79:9B:B1:EE:8D:DB
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:9f:27:6e:de:a7:92:00:7c:d0:50:ba:9d:21:5c:24:c4:
         c5:6e:2a:72:68:f9:a5:b8:99:62:21:6b:2b:13:48:16:0d:b1:
         4c:34:8e:03:81:21:3a:b7:00:ea:8c:a1:e2:82:eb:4b:c3:a9:
         ee:c0:e7:ff:08:aa:65:3e:46:d2:36:82:81:7b:c9:01:75:7e:
         a1:b9:d2:e3:8c:91:42:2e:86:be:58:e7:69:e1:c7:af:50:47:
         80:c0:8b:fc:3f:75:05:c0:32:b9:d7:ac:c8:fb:47:09:f6:5f:
         d0:64:85:bf:a7:f6:35:2c:35:e8:1c:b6:b2:7b:6c:b1:0b:df:
         0a:d8:d3:fa:ba:59:9d:63:91:b5:8f:98:7b:25:59:ba:13:35:
         b4:7d:e7:67:b4:a2:1f:12:bc:fa:1a:0f:a6:a4:e4:41:c9:37:
         99:f4:c7:48:4d:e2:37:e6:f6:4d:58:ad:5a:63:b8:64:c3:c2:
         0e:17:23:e7:38:06:d1:40:46:4c:e2:60:d6:4c:82:f6:3a:81:
         0f:a7:cf:19:34:79:c8:2c:7c:75:03:42:9a:ea:ea:36:67:9e:
         5d:35:d7:45:8a:dd:01:d8:a4:6e:93:71:07:47:50:e3:5e:fb:
         1f:7c:13:f4:a5:40:9c:00:e4:d6:58:e0:1a:d9:ed:7b:44:ab:
         44:36:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org