Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa
File:                     323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa (raw, json)
Hash identifier:          qki0lX96qIGb7hSYWnyuddZ6hiDybOV3nB76M4ZJoW4=
Subject key identifier:   33:42:A5:90:46:6F:81:E0:4E:96:6C:B5:78:D8:7F:40:9E:5A:C4:04
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       0882CA40D71CB2B643A4E78D4FD50B57885E64F4
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:20 +0000
ROA not before:           Wed 28 Feb 2024 13:58:20 +0000
ROA not after:            Wed 26 Feb 2025 14:03:20 +0000
asID:                     28210
IP address blocks:        2804:56c:b800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:82:ca:40:d7:1c:b2:b6:43:a4:e7:8d:4f:d5:0b:57:88:5e:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:20 2024 GMT
            Not After : Feb 26 14:03:20 2025 GMT
        Subject: CN=3342A590466F81E04E966CB578D87F409E5AC404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:b6:73:3a:74:2b:ac:96:9d:a3:27:3e:dc:
                    49:99:20:01:11:7a:fa:aa:58:6e:3b:89:96:15:5f:
                    7c:25:a9:09:2d:74:12:26:d5:29:a6:64:c6:52:3c:
                    1b:4f:52:8c:db:89:1b:01:70:75:bd:d6:9d:4d:87:
                    c6:9b:86:fe:07:98:05:5b:0c:64:77:d2:26:b3:58:
                    ce:f7:ca:98:cd:7e:0d:5b:aa:4f:d5:b1:78:c5:7e:
                    25:a1:49:93:e7:40:71:79:f1:94:13:81:9d:37:6f:
                    99:67:03:9c:6f:25:7a:46:f9:15:1c:cf:47:4c:65:
                    66:6e:8a:4c:72:de:32:ba:1e:d4:e2:e8:41:7f:a9:
                    b8:c1:b4:5d:10:69:e5:55:8d:f7:25:69:82:fc:98:
                    01:ee:4d:1e:97:8b:6c:b7:ad:3d:c0:27:05:5b:37:
                    2d:05:ca:79:74:01:f6:8b:f8:65:e6:fc:45:ce:d6:
                    00:08:58:fe:ae:07:97:8b:ac:07:d8:f5:76:ef:20:
                    1f:9b:99:3b:93:f4:6d:b4:e1:6b:9a:ee:5e:08:47:
                    2b:78:57:d8:53:0b:e0:3f:d7:6b:13:fd:b9:5a:33:
                    15:0f:df:ba:0d:0a:14:4f:62:fd:84:a0:e7:a8:26:
                    a3:76:6f:bb:61:39:e4:f5:11:36:e0:0d:70:f6:80:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:A5:90:46:6F:81:E0:4E:96:6C:B5:78:D8:7F:40:9E:5A:C4:04
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:b800::/37

    Signature Algorithm: sha256WithRSAEncryption
         06:01:df:73:68:eb:6e:20:55:7e:be:66:3b:7e:06:0f:a1:a1:
         e0:13:a9:1c:84:98:89:f4:57:a4:62:06:41:92:81:8a:99:86:
         4b:ea:e9:35:04:98:1e:12:3d:1c:9f:9c:1e:69:ad:db:b8:c5:
         bb:4c:29:13:bd:66:cc:0f:fe:ba:fa:e5:f0:ec:e5:df:12:44:
         3b:53:30:6e:a3:86:38:9e:31:1a:2b:28:96:be:b7:65:af:8e:
         d7:93:3d:f9:e9:96:5e:a5:93:1c:5c:8e:3e:3e:24:b9:53:43:
         c6:e7:6e:03:0d:be:4d:82:fb:09:0d:cb:4d:4b:30:5d:7e:3e:
         c1:46:cc:36:00:7e:11:bd:f2:21:23:58:b1:23:4a:3f:32:83:
         55:10:a5:ad:e6:54:7d:90:ec:97:32:d2:6b:b1:d9:d7:22:c1:
         41:e9:2b:73:54:96:c1:d5:20:39:70:8e:09:b0:6b:b4:e8:77:
         fe:f3:55:19:9a:9b:ea:73:0b:49:2f:16:d9:65:15:3c:24:bf:
         50:d6:fc:71:50:5f:33:b9:e6:e8:e8:72:aa:01:4b:99:d8:9b:
         fe:83:8a:64:9b:20:e9:96:bf:73:a8:db:f4:a6:76:3a:55:4a:
         0c:39:b9:e6:3a:32:90:08:07:ec:9e:7c:31:dd:48:e7:bd:82:
         1f:af:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org