Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e203134383430.roa
File:                     323830343a376133303a3a2f33322d313238203d3e203134383430.roa (raw, json)
Hash identifier:          3Y9LK/owpRMe5psyYcwSh5o0Wz0RKrtJ8nRLKcF3mYc=
Subject key identifier:   18:BF:6C:2B:97:A9:D6:B0:DD:84:68:3B:FF:0B:52:24:0B:C9:40:92
Certificate issuer:       /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial:       457DCD383BCFDFBFF5D14FE740AB172DD3F8637D
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e203134383430.roa
Signing time:             Tue 28 Feb 2023 13:48:28 +0000
ROA not before:           Tue 28 Feb 2023 13:43:28 +0000
ROA not after:            Tue 27 Feb 2024 13:48:28 +0000
asID:                     14840
IP address blocks:        2804:7a30::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7d:cd:38:3b:cf:df:bf:f5:d1:4f:e7:40:ab:17:2d:d3:f8:63:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Validity
            Not Before: Feb 28 13:43:28 2023 GMT
            Not After : Feb 27 13:48:28 2024 GMT
        Subject: CN=18BF6C2B97A9D6B0DD84683BFF0B52240BC94092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:e8:74:75:cc:86:76:6e:06:d9:0b:f4:5f:
                    92:2e:ce:6c:51:02:28:42:d6:2c:4e:18:5d:cf:6a:
                    80:b6:75:98:1c:e7:6f:c4:94:ae:1c:e7:da:2a:ec:
                    40:cf:e4:05:48:ae:fd:45:89:a5:dd:5b:ac:41:7d:
                    f0:f9:fb:64:c7:34:a5:19:b2:e3:d2:f7:c7:2f:16:
                    9f:90:35:98:40:74:89:12:d6:ef:cf:9c:ca:cb:c8:
                    ee:d2:19:b8:a1:80:13:5e:9d:90:ce:05:2e:c0:f7:
                    a6:83:9b:23:41:1f:54:0b:23:77:08:cc:6f:13:88:
                    e4:60:ec:1a:e3:d2:82:03:0e:b5:07:b7:0c:18:01:
                    0e:f4:30:ec:e9:55:48:96:e6:f4:55:15:44:4a:40:
                    94:f5:f3:10:eb:37:c1:b7:5d:76:30:34:57:65:b8:
                    bc:83:b0:77:46:7b:01:c4:5e:0f:d9:d0:5d:3b:a5:
                    cc:80:85:b8:cf:3e:55:77:2d:7a:1d:17:51:97:e5:
                    c4:33:83:77:38:f1:fa:06:fe:c5:23:19:c9:03:69:
                    72:56:7d:e2:01:5f:57:1e:44:cb:76:cf:a6:7a:8f:
                    93:35:30:44:dd:af:77:48:cd:a3:73:37:22:c9:e5:
                    be:33:2e:0c:31:7c:4c:a1:d8:c1:f5:fc:2c:d4:4e:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BF:6C:2B:97:A9:D6:B0:DD:84:68:3B:FF:0B:52:24:0B:C9:40:92
            X509v3 Authority Key Identifier:
                keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:ce:4b:6a:b1:a4:02:ac:c8:0b:6d:65:d3:60:32:5e:7b:af:
         c1:f7:b3:7b:49:cf:06:5a:3d:ad:31:67:4b:72:c3:28:d9:18:
         9f:95:92:75:c9:0a:bc:83:ca:08:93:9d:fc:26:f4:e5:82:88:
         32:56:f1:96:aa:3b:94:75:0e:8c:5f:2f:79:64:29:15:f3:44:
         72:cd:b0:2b:21:5a:8a:d7:1d:7a:ca:3e:eb:7a:3a:06:79:b4:
         81:53:0d:37:22:89:ba:c7:83:68:53:62:3d:13:72:b1:d0:b2:
         e0:e8:0e:01:b7:a5:fc:c4:71:5f:e1:e5:a8:17:ef:8e:b5:98:
         8f:ef:4e:55:55:1b:91:c2:7d:5a:7e:7a:77:f8:d3:0c:ba:cb:
         91:66:77:3d:51:b2:3b:14:be:98:6f:c8:3d:5d:32:2e:d0:eb:
         11:23:dd:e0:b8:73:29:b6:11:2c:e0:ac:7e:d5:fc:71:02:34:
         30:fe:d7:ec:c7:b1:e8:ae:01:dd:1b:49:ec:77:d9:e3:6b:be:
         13:01:0d:39:9b:a2:ce:97:4a:f7:91:b6:d3:05:83:13:9c:15:
         d1:c9:26:89:0b:4e:72:46:02:0f:1e:61:0a:bd:9e:75:6d:2a:
         0e:0a:d3:7c:39:98:e9:43:10:ef:49:19:17:2c:04:5c:dd:34:
         9a:16:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org