Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a323a3a2f34382d3438203d3e20323636343837.roa
File:                     323830343a333839343a323a3a2f34382d3438203d3e20323636343837.roa (raw, json)
Hash identifier:          YZ243Rw06CRC1KPSysgjwbs5SQL/l1PA1xOVOmhT/j8=
Subject key identifier:   D8:13:0A:C4:41:CA:51:36:FD:42:98:FA:AE:0D:79:C5:F3:DC:CF:D7
Certificate issuer:       /CN=CDCCA6CF47779DC345EBD61C034E72D95E0C644C
Certificate serial:       6B5394299C2FB96755D4082D3DF6F7455D50C1DE
Authority key identifier: CD:CC:A6:CF:47:77:9D:C3:45:EB:D6:1C:03:4E:72:D9:5E:0C:64:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDCCA6CF47779DC345EBD61C034E72D95E0C644C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a323a3a2f34382d3438203d3e20323636343837.roa
Signing time:             Wed 26 Apr 2023 01:13:20 +0000
ROA not before:           Wed 26 Apr 2023 01:08:20 +0000
ROA not after:            Wed 24 Apr 2024 01:13:20 +0000
asID:                     266487
IP address blocks:        2804:3894:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:53:94:29:9c:2f:b9:67:55:d4:08:2d:3d:f6:f7:45:5d:50:c1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCCA6CF47779DC345EBD61C034E72D95E0C644C
        Validity
            Not Before: Apr 26 01:08:20 2023 GMT
            Not After : Apr 24 01:13:20 2024 GMT
        Subject: CN=D8130AC441CA5136FD4298FAAE0D79C5F3DCCFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:77:d9:be:fc:85:d4:51:9e:e7:a0:dc:27:
                    55:fb:61:0a:2a:e0:af:b2:a5:f6:96:bd:2a:83:0e:
                    2d:a7:ea:4b:e4:50:a6:6a:2b:1c:4a:7f:7d:92:53:
                    11:fb:b2:24:13:e0:05:3d:c7:59:54:74:c0:8a:fa:
                    87:18:e7:18:41:45:e8:e8:0b:2c:ee:17:69:c0:48:
                    64:18:96:9d:4b:79:f8:b5:af:9b:99:e1:b8:32:82:
                    26:98:dc:2e:86:60:10:28:30:f6:d1:1f:1b:70:f3:
                    6c:45:d3:cb:26:19:17:b6:b9:b8:29:ee:f0:fe:ee:
                    19:04:36:83:e4:a7:f1:16:d6:82:a0:0f:0e:99:29:
                    1b:96:09:7e:31:3d:62:56:e0:cb:58:02:16:32:9f:
                    92:61:98:87:85:af:15:9d:c4:9b:46:db:69:52:cf:
                    b6:c7:af:09:69:54:c8:91:26:9b:a6:84:5e:06:c6:
                    aa:a1:2f:ca:c6:99:30:a0:8c:67:3f:8d:e3:a6:ae:
                    36:bd:e8:e5:a9:d0:7a:74:b0:72:6e:7c:6a:c8:94:
                    36:21:34:b5:c0:85:8e:0a:10:c6:c9:f2:ee:2b:27:
                    67:3f:4e:e9:a6:b4:5c:d0:2e:41:86:fc:b9:84:07:
                    4a:e5:be:1e:83:3a:86:d9:db:d4:c7:86:c6:63:15:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:13:0A:C4:41:CA:51:36:FD:42:98:FA:AE:0D:79:C5:F3:DC:CF:D7
            X509v3 Authority Key Identifier:
                keyid:CD:CC:A6:CF:47:77:9D:C3:45:EB:D6:1C:03:4E:72:D9:5E:0C:64:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/CDCCA6CF47779DC345EBD61C034E72D95E0C644C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDCCA6CF47779DC345EBD61C034E72D95E0C644C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a323a3a2f34382d3438203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3894:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:86:99:6d:45:1f:27:ed:e3:01:4b:09:e8:ee:4e:a5:1c:9b:
         56:92:30:cd:bf:6e:75:13:f5:f8:8e:b8:81:f4:5c:8e:bb:88:
         f2:6b:3b:a3:f2:22:10:73:0a:eb:37:f0:a4:1f:0c:70:50:19:
         a6:a3:28:55:4e:cc:9a:7d:b0:66:8b:74:91:f9:db:c2:3c:7b:
         16:93:01:4c:d6:62:be:1a:c3:45:76:ef:01:33:51:6c:61:2f:
         4c:0d:2a:3b:00:58:a2:48:f3:73:16:26:6a:dc:44:2e:19:6c:
         ab:53:80:57:00:c5:a8:e1:5b:87:67:e3:af:ef:97:a1:10:ca:
         2f:10:6d:2e:30:89:c2:b1:90:26:59:a5:c5:08:31:50:d8:fb:
         5f:f5:0b:86:60:e2:44:a9:3e:f2:7f:c8:79:2e:12:96:d9:85:
         59:ff:4b:d6:23:6a:d8:0f:c5:89:da:0a:70:fc:fe:26:e0:3d:
         ec:41:da:d3:86:92:b3:9f:92:bd:38:47:80:22:18:16:29:cd:
         fc:2f:e1:8c:5a:61:1b:a9:34:98:d9:72:ec:df:88:27:7e:96:
         81:3f:b1:1c:1d:94:ae:e5:51:ae:3d:fc:d7:e0:46:eb:a1:0f:
         3d:1c:ff:c7:31:b1:4e:fa:2e:9e:c9:49:c7:a7:c3:02:5c:93:
         a9:52:75:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org