Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3332203d3e20323731323934.roa
File:                     323830343a373934303a3a2f33322d3332203d3e20323731323934.roa (raw, json)
Hash identifier:          6+ilcac2tylvcoHncTpEsbJi6Ec1SHTIsNbF0eEJkBs=
Subject key identifier:   2A:50:B7:19:A4:B8:9B:C4:2E:BD:8B:87:22:BD:3C:83:BE:A1:2F:81
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       71C6CBD8EB5025E1380796B9AAC7865D530BB6F5
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3332203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:53 +0000
ROA not before:           Wed 10 Jan 2024 12:40:53 +0000
ROA not after:            Wed 08 Jan 2025 12:45:53 +0000
asID:                     271294
IP address blocks:        2804:7940::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c6:cb:d8:eb:50:25:e1:38:07:96:b9:aa:c7:86:5d:53:0b:b6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:53 2024 GMT
            Not After : Jan  8 12:45:53 2025 GMT
        Subject: CN=2A50B719A4B89BC42EBD8B8722BD3C83BEA12F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:18:22:04:e9:29:47:93:c6:7b:7b:39:6d:
                    16:70:91:0c:39:e4:3a:a0:a4:2a:c7:30:16:34:94:
                    48:17:6c:d4:ab:15:1d:81:03:74:48:32:69:56:a1:
                    c0:82:7e:cb:59:82:49:62:51:a0:06:4d:6d:b7:2f:
                    99:dd:77:2a:34:85:d2:7a:06:1b:ef:9e:9a:8c:35:
                    23:2f:2f:dc:89:66:fe:5c:bf:2c:bf:c2:fa:99:0e:
                    43:aa:4e:a2:fa:ac:75:1b:ea:9c:f1:49:62:c7:1e:
                    d3:3e:f7:0c:98:07:b7:a3:d9:03:42:04:5b:36:0e:
                    f4:20:9e:f9:6b:8f:0a:cd:25:51:a7:12:0e:5e:28:
                    a2:f0:2e:ae:42:8d:87:c2:70:6d:6a:3b:39:ff:69:
                    4f:ec:1a:9e:9e:cd:2f:9d:11:a6:9b:6d:87:d2:9c:
                    6e:5f:d6:38:a4:1e:48:db:ad:c0:a2:54:fa:42:93:
                    7c:c0:31:74:15:07:10:06:cf:3c:7c:84:e9:db:ec:
                    58:fd:ca:cc:f8:c8:e9:53:87:d8:7c:fe:a6:7e:26:
                    76:6c:2d:36:40:38:e4:33:26:84:70:1d:69:69:f9:
                    46:40:5f:10:e0:97:d9:cb:12:38:1e:fd:96:39:eb:
                    ab:b4:2d:b7:ac:0b:33:a8:07:8b:81:42:e8:39:ec:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:50:B7:19:A4:B8:9B:C4:2E:BD:8B:87:22:BD:3C:83:BE:A1:2F:81
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3332203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7940::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:0b:cd:cb:bd:78:52:d5:82:79:90:2c:6b:25:ea:9f:13:6f:
         dd:20:a8:bd:7d:67:e8:3c:73:ef:46:75:51:c9:03:59:a3:df:
         5c:5c:72:37:08:d1:18:7e:8f:c6:94:e9:ee:0b:0c:3d:75:3c:
         7e:c1:65:dc:af:e8:1d:2f:d6:bc:1b:5f:91:a1:16:a7:e1:d9:
         79:0a:7a:5f:3b:7c:38:b5:3c:c1:87:30:84:fa:3a:8f:a8:2d:
         f5:83:17:25:65:7b:7c:8a:8e:23:17:99:5e:3e:8f:d5:71:1f:
         eb:7e:ce:23:8b:d8:ad:ac:ca:60:97:35:79:c5:06:fc:39:42:
         71:dd:6d:9f:e2:4d:27:03:d3:93:d0:3d:16:00:8d:03:90:d0:
         0e:1a:07:c7:6b:c7:0a:b8:7e:24:74:5b:b3:48:db:54:73:6d:
         1a:05:6e:5f:c4:5a:d3:e3:d9:07:9d:b3:f2:9b:ad:89:76:8e:
         32:b4:24:02:dc:1d:bb:ef:71:29:58:92:0f:72:22:69:ae:36:
         c7:92:e8:48:80:7b:14:a8:62:c7:03:01:1a:1a:f8:e4:17:a2:
         06:8b:be:71:e0:28:a7:70:02:4e:5a:d3:7d:58:f0:48:fa:02:
         9e:1a:b6:50:57:05:e4:0f:41:95:fd:b1:4e:81:34:45:c9:fe:
         39:a4:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org