Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
File:                     323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa (raw, json)
Hash identifier:          Q2fHHDmSicht7PvEczdYCyjx8hkcuaefWqE4FuHk594=
Subject key identifier:   C5:03:3F:76:98:3B:D9:81:5E:0D:27:8D:92:7C:8F:5E:25:07:FE:CD
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       11E2D9C27C353D23A209C17A10CF719F7C7B0B58
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:21 +0000
ROA not before:           Wed 28 Feb 2024 13:58:21 +0000
ROA not after:            Wed 26 Feb 2025 14:03:21 +0000
asID:                     28210
IP address blocks:        2804:56c:b000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:d9:c2:7c:35:3d:23:a2:09:c1:7a:10:cf:71:9f:7c:7b:0b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:21 2024 GMT
            Not After : Feb 26 14:03:21 2025 GMT
        Subject: CN=C5033F76983BD9815E0D278D927C8F5E2507FECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:71:5d:fd:ca:5d:bb:60:86:5b:fe:fb:ea:
                    55:d6:23:f9:99:32:4d:b9:60:fe:a7:83:06:9b:0f:
                    17:3b:d5:d8:b8:ae:03:27:d0:44:cf:b7:cc:d2:17:
                    7b:f7:0b:32:1f:af:7f:2c:bf:c2:de:81:d4:6f:2e:
                    84:73:b2:56:d8:c2:71:9c:96:1d:b0:fc:40:bb:89:
                    26:9a:e9:0f:c1:8a:81:15:70:3e:94:62:09:1c:f0:
                    69:4a:72:a7:8e:3c:5e:94:2c:b7:c4:14:9e:1c:d0:
                    58:66:d3:45:34:eb:f1:f7:ac:b9:9b:f9:1c:2b:c3:
                    34:60:a3:c7:73:d8:ab:41:5f:4e:c2:a1:57:9e:b2:
                    64:17:02:ed:58:2e:7f:84:0d:96:dd:28:22:b4:7a:
                    d5:2b:be:c1:ca:ec:2d:9c:ec:30:dd:c4:8f:a3:f2:
                    ad:eb:77:b9:d1:87:f6:72:02:59:2d:79:e5:27:ac:
                    b8:87:37:d3:63:77:4a:1a:e1:be:78:65:3f:82:ff:
                    65:76:57:9d:40:f7:27:00:4f:6a:64:52:bf:4c:1f:
                    96:c5:72:ea:c9:1a:af:d1:2b:c8:58:21:63:6c:54:
                    b0:34:c1:8b:e7:d8:ad:a5:26:db:be:3f:8e:91:61:
                    77:c7:88:c4:c9:eb:0b:01:23:47:28:49:51:01:de:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:03:3F:76:98:3B:D9:81:5E:0D:27:8D:92:7C:8F:5E:25:07:FE:CD
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:b000::/37

    Signature Algorithm: sha256WithRSAEncryption
         d4:e8:be:d6:20:ec:8c:8b:5e:e4:72:08:78:56:47:7d:21:e5:
         9b:18:12:a0:0c:22:26:09:83:77:b8:23:89:da:12:2f:bb:53:
         b2:c4:7e:22:99:3f:bb:2b:36:75:3e:9c:5a:a9:23:56:86:3d:
         0a:4b:9e:19:64:cc:2b:13:a0:32:34:5f:9b:6a:69:09:56:18:
         e8:de:29:54:b2:32:7d:cd:64:b2:3a:8b:b2:79:54:b2:dd:71:
         05:0f:f0:70:be:ed:40:92:e3:bc:d0:c2:66:fb:a9:e3:1b:ad:
         65:3f:09:52:cf:b7:9c:1c:b0:52:4b:ac:43:98:69:f0:9e:d8:
         54:f3:7c:0f:0e:1b:0a:ee:eb:a1:39:ef:18:19:dc:e8:5f:fc:
         5e:47:8d:a8:d4:7b:e0:01:bd:ab:cd:e7:56:cc:3f:45:ef:87:
         ca:ff:4c:cd:ba:6b:99:be:c5:52:d9:cd:0a:d4:0b:2f:c5:d0:
         ab:45:05:63:10:ac:49:08:92:35:95:4e:fb:9f:1d:df:31:8e:
         25:ef:df:6f:da:21:fa:93:5c:21:c7:5c:d3:c8:22:12:31:89:
         5b:09:da:24:9e:4f:97:ad:03:92:02:52:68:23:53:90:65:07:
         3a:44:0c:28:8f:87:c2:a2:33:8d:35:d9:75:d6:6c:a3:62:93:
         a5:05:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org