Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3334203d3e20323636333432.roa
File:                     323830343a333635343a3a2f33322d3334203d3e20323636333432.roa (raw, json)
Hash identifier:          Axpc/9KOjovmVQCfSOLF5R5Rg2nToNxq2dm5iLm8I8M=
Subject key identifier:   0B:4B:71:F4:7D:15:7A:1C:B6:88:C1:03:BF:DB:01:1E:82:B3:43:BE
Certificate issuer:       /CN=A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF
Certificate serial:       21CA39D71D7327E84A81F25489D1513B37712B50
Authority key identifier: A0:D3:1D:DE:3C:BC:05:FB:A3:00:9F:1C:10:5A:FD:6A:8C:61:E9:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3334203d3e20323636333432.roa
Signing time:             Tue 11 Jan 2022 01:02:12 +0000
ROA not before:           Tue 11 Jan 2022 00:57:12 +0000
ROA not after:            Tue 10 Jan 2023 01:02:12 +0000
asID:                     266342
IP address blocks:        2804:3654::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:39:d7:1d:73:27:e8:4a:81:f2:54:89:d1:51:3b:37:71:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF
        Validity
            Not Before: Jan 11 00:57:12 2022 GMT
            Not After : Jan 10 01:02:12 2023 GMT
        Subject: CN=0B4B71F47D157A1CB688C103BFDB011E82B343BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:d9:bb:f3:f3:21:bf:3b:8f:d4:4e:b5:bd:
                    20:f2:34:c4:76:8d:fd:51:91:44:09:3a:c8:09:fa:
                    2c:87:10:ce:9a:3f:c7:18:20:86:91:67:5a:c4:f0:
                    34:cd:cd:06:c5:88:4d:12:8d:cb:e4:f5:15:76:68:
                    4a:69:91:77:37:db:51:f3:24:b4:c2:4b:3d:1b:1e:
                    73:7f:02:37:53:dd:d5:8d:aa:9f:12:be:7c:cb:7f:
                    08:cf:f9:17:86:4b:87:96:78:c9:07:ab:59:0f:e4:
                    00:a0:1e:d0:83:a9:83:8d:c2:a3:93:b3:9d:8c:0f:
                    8e:f9:56:20:53:c4:e8:c8:b5:4c:ca:7b:a2:ba:f1:
                    dc:fe:03:b8:af:df:fe:ad:a0:32:b4:d9:52:f6:10:
                    e3:7f:39:b7:0c:36:39:8d:95:2a:1a:f7:96:d3:7c:
                    90:83:f5:38:1f:b1:d1:dc:1a:e0:f2:7e:89:ca:27:
                    af:79:00:3e:39:c9:a7:5a:81:a8:48:86:12:a2:76:
                    e0:4b:81:d1:88:48:3d:09:d1:1f:28:5c:8d:50:3f:
                    8b:bb:f3:48:92:51:2f:bf:75:ab:97:af:cc:83:23:
                    29:6c:4f:ce:2f:0e:96:78:4c:ff:73:90:9b:dd:52:
                    42:b6:38:bc:cc:70:f6:46:ba:3b:76:a4:b9:75:16:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:71:F4:7D:15:7A:1C:B6:88:C1:03:BF:DB:01:1E:82:B3:43:BE
            X509v3 Authority Key Identifier:
                keyid:A0:D3:1D:DE:3C:BC:05:FB:A3:00:9F:1C:10:5A:FD:6A:8C:61:E9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3334203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3654::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:67:2a:f9:d7:c6:90:65:ab:5d:2e:c9:23:1c:68:af:43:
         be:c8:16:d8:ed:3a:e2:f5:6d:65:94:3f:80:1b:22:57:f4:96:
         82:de:cd:5e:cd:49:03:30:75:be:b6:6a:11:8d:18:98:7f:1c:
         7b:fb:d8:7a:33:ac:13:30:6f:99:28:58:9c:29:96:38:c4:df:
         42:92:96:2d:c1:d5:cc:94:e7:64:9f:d6:a6:ad:8f:d6:a1:e7:
         31:e3:b9:b5:1e:7b:30:d5:0f:aa:dc:59:17:6e:d0:f6:d8:da:
         5e:71:6d:30:a1:84:1a:28:82:99:dd:6c:22:56:ac:7e:c7:26:
         5c:ac:c8:c3:6f:ae:a1:08:0a:0e:f1:5a:17:90:16:72:36:52:
         28:56:f5:b6:fe:8d:a2:3a:4b:0d:9d:73:0a:62:bd:f5:8b:13:
         69:2c:f9:7d:3f:98:a8:9b:83:95:04:4e:55:89:ed:f3:25:ca:
         52:05:a0:22:a9:a6:fc:84:51:04:21:c3:5f:90:63:38:7f:63:
         5d:fa:be:30:97:fe:9f:6a:b8:40:fd:cc:3c:24:69:95:be:ea:
         cc:c2:65:1a:2d:ef:5e:b4:47:a6:d6:65:55:80:09:77:9f:fe:
         d5:2b:98:24:cf:b7:2a:4a:ab:a2:1a:3e:e4:7e:de:52:fc:be:
         83:ce:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org