Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a383030303a3a2f33342d3334203d3e20323731323934.roa
File:                     323830343a373934303a383030303a3a2f33342d3334203d3e20323731323934.roa (raw, json)
Hash identifier:          tFr0i399J5bIR1EWEjZMb8CSNTEACgq1dTdWyifHPFg=
Subject key identifier:   BA:19:68:B1:DC:C0:53:D4:32:BF:A2:92:D8:7F:9A:80:62:0A:89:A1
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       0F29AEEA200FCB8C80FBA6A17EF0849AD2D25DAD
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a383030303a3a2f33342d3334203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:58 +0000
ROA not before:           Wed 10 Jan 2024 12:40:58 +0000
ROA not after:            Wed 08 Jan 2025 12:45:58 +0000
asID:                     271294
IP address blocks:        2804:7940:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:29:ae:ea:20:0f:cb:8c:80:fb:a6:a1:7e:f0:84:9a:d2:d2:5d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:58 2024 GMT
            Not After : Jan  8 12:45:58 2025 GMT
        Subject: CN=BA1968B1DCC053D432BFA292D87F9A80620A89A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:a5:71:c8:20:59:54:db:2e:25:02:6f:33:
                    a4:e6:b3:ed:a1:cb:d6:a8:d2:f4:13:4f:0a:65:a7:
                    05:0d:71:11:a6:7c:bb:96:81:34:0d:d6:0c:34:05:
                    ed:dd:fe:2f:82:0b:5c:0e:29:97:4c:a9:e9:69:8c:
                    35:ab:7a:a0:40:4b:e0:33:b9:7d:12:89:79:89:56:
                    2d:bf:cb:73:58:0d:9b:29:dd:97:d0:29:a2:ac:1a:
                    ca:ab:cb:b1:e8:25:26:3e:c8:6c:48:be:ab:cb:e2:
                    41:5e:af:88:a9:fb:5c:d3:6d:b0:b2:e7:b0:21:ae:
                    98:1d:76:b8:62:0e:15:c8:b7:2e:05:11:42:a4:35:
                    59:1e:42:d8:1e:2e:91:ee:44:43:32:16:3f:2a:28:
                    4d:6f:44:31:d0:78:7d:e6:a8:58:86:28:ac:ae:6e:
                    41:26:2b:f3:b3:04:3b:79:1b:c4:09:61:61:62:8e:
                    1a:24:c4:74:11:0f:d2:fc:a3:ed:1d:90:95:4d:39:
                    66:c3:a3:14:9c:d7:a5:22:cf:28:83:a8:3c:fb:27:
                    9b:f3:4c:e4:b0:91:53:cc:77:c1:fd:96:c0:84:14:
                    34:33:af:cf:66:13:d0:9d:5e:77:13:53:43:1b:9a:
                    44:f6:dd:37:81:cd:fb:c4:d5:45:93:68:14:86:1a:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:68:B1:DC:C0:53:D4:32:BF:A2:92:D8:7F:9A:80:62:0A:89:A1
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a383030303a3a2f33342d3334203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7940:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:86:82:c1:a4:ae:c4:29:b9:6c:6e:6b:1e:f9:74:d0:76:
         51:cb:67:ce:37:bb:9a:fa:b1:f0:ee:0a:5c:cf:15:c8:45:d8:
         e2:d7:0d:ec:84:fe:66:61:20:c2:0f:15:55:08:38:60:c7:32:
         7e:ee:aa:88:c6:67:e9:ae:26:bc:da:8e:8d:23:e4:09:12:52:
         88:1e:d2:a4:2e:cc:59:9c:46:a7:3e:96:a8:cb:d4:6e:c3:4a:
         6b:f0:5a:53:74:e8:26:62:d6:03:7d:23:f8:23:b0:62:4b:97:
         24:c2:18:41:ec:86:71:e8:d2:aa:9d:c1:d7:52:3a:da:6c:5b:
         e3:23:38:3e:1d:e6:e5:77:33:f2:ea:95:64:3a:77:f5:18:62:
         58:25:c0:db:69:c4:63:35:aa:c1:2a:dd:da:cd:0a:ad:a1:ed:
         73:e4:1d:ff:cd:32:3b:14:7e:c5:20:a3:f0:b4:98:4f:8d:8a:
         9f:a4:35:89:c4:d4:4b:59:f6:36:00:11:46:f0:e2:d2:ca:aa:
         03:d0:30:46:c3:ea:67:cd:8f:af:18:51:ef:68:a4:8f:82:20:
         43:38:0f:ea:58:0b:ae:02:e4:ae:4c:8e:13:f0:53:b5:5f:4a:
         3c:2e:22:36:f2:92:7e:f8:7f:2c:1e:26:f6:b3:c7:f5:4a:fb:
         2a:d5:91:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org