Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323161303a3a2f34332d3433203d3e203238323130.roa
File:                     323830343a3536633a323161303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier:          u+UMbJs0oNNt+OAae3Hk/qnesrkKlitSfUUx2/ja2ho=
Subject key identifier:   50:5F:9B:E1:3C:9A:F9:88:CD:F8:1C:D4:7B:F0:F3:EA:7C:FB:D8:36
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       2ED4BCFD1D05C59801738D8BC761C2B9BCD4C287
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323161303a3a2f34332d3433203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:24 +0000
ROA not before:           Wed 28 Feb 2024 13:58:24 +0000
ROA not after:            Wed 26 Feb 2025 14:03:24 +0000
asID:                     28210
IP address blocks:        2804:56c:21a0::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d4:bc:fd:1d:05:c5:98:01:73:8d:8b:c7:61:c2:b9:bc:d4:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:24 2024 GMT
            Not After : Feb 26 14:03:24 2025 GMT
        Subject: CN=505F9BE13C9AF988CDF81CD47BF0F3EA7CFBD836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:af:7a:7e:36:02:23:06:72:d1:75:90:34:
                    7c:9b:64:78:d9:35:6b:7a:75:c8:79:bc:61:f9:4a:
                    59:f4:68:4f:8b:12:a9:86:5a:73:10:04:d9:92:1e:
                    20:3b:eb:f0:46:d1:a6:57:2e:00:d4:1f:91:9c:1a:
                    2e:a6:f4:a3:c6:e5:59:20:6c:19:0c:d2:d9:b4:76:
                    23:b6:1a:c9:82:71:2c:22:14:e9:c5:df:8d:14:d7:
                    1a:8e:1f:03:f5:75:3e:42:84:8a:ce:3b:34:24:b2:
                    01:66:ea:37:e8:b6:2c:1c:75:b5:47:3a:1e:40:2e:
                    33:97:f5:27:01:c5:7a:55:e6:de:6f:4d:70:98:c5:
                    dc:88:8a:57:80:2c:6b:11:f3:f1:d0:18:5f:73:f0:
                    71:a6:38:cc:f9:27:19:a7:5d:c2:12:a7:57:5a:08:
                    cd:10:33:6d:82:31:19:a9:f2:f8:09:7c:42:a9:45:
                    fb:a2:f6:71:5f:f0:7d:c6:71:64:86:e5:99:5c:f6:
                    39:9e:27:be:fb:a1:49:75:22:f0:af:a2:1c:06:83:
                    c9:0d:3f:50:dd:5c:80:7b:02:3d:31:f1:d5:44:e3:
                    e6:d0:04:ee:58:da:f6:ab:43:a3:0a:aa:54:ef:a9:
                    b5:08:5a:69:fb:e0:13:a3:0e:4e:70:65:75:55:e6:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5F:9B:E1:3C:9A:F9:88:CD:F8:1C:D4:7B:F0:F3:EA:7C:FB:D8:36
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323161303a3a2f34332d3433203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:21a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         a9:2b:c6:02:47:3b:66:76:52:dc:4a:b8:01:6a:f5:5c:c7:5f:
         88:ba:87:4b:ef:e9:7f:e3:f1:a7:d1:2a:2a:32:3e:f3:28:46:
         be:48:66:f6:76:39:fa:24:2d:dd:87:94:22:22:b4:49:26:dd:
         ae:86:46:2e:cf:07:21:cd:90:1d:f7:9a:c8:e0:1f:b0:a2:e0:
         6b:38:38:97:34:ba:54:9f:03:70:1c:03:77:e9:d3:a5:8a:4c:
         23:38:ad:52:6f:5a:d6:94:26:17:29:46:62:dd:e0:18:b1:01:
         1d:50:16:b9:9e:8a:1e:0d:18:0c:7e:da:6f:4e:f6:62:46:cd:
         ce:a0:3d:60:34:6f:87:6e:4d:27:8f:4f:4b:d0:91:17:80:16:
         9b:08:e5:19:62:31:d0:62:6e:b2:26:eb:50:c4:66:01:cb:38:
         7f:f5:62:fc:a1:a2:eb:b8:c4:6f:ab:19:56:14:17:a5:df:a0:
         50:d6:8f:11:3b:f8:b5:18:22:e6:9f:e0:c4:39:d7:ef:b0:99:
         66:fa:eb:66:06:fc:1a:90:73:ea:53:a2:0f:45:ad:4b:3f:dd:
         58:2f:0a:87:eb:b6:78:fd:13:ac:37:eb:0b:d5:b6:d8:72:2f:
         5d:fa:1a:72:9e:fc:a1:c4:24:17:30:30:02:46:bc:cd:a0:f4:
         91:4e:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org