Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323639333938.roa
File:                     323830343a376133303a3a2f33322d313238203d3e20323639333938.roa (raw, json)
Hash identifier:          iDvxgpMJlH3JM2+Quo7dE4Zx5jlgYLozLxhzd2CE53A=
Subject key identifier:   07:D7:84:AB:7F:5F:7A:9B:8A:6D:82:0B:76:34:25:0E:93:1F:3F:3B
Certificate issuer:       /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial:       161352D7CFF389C0DA5D39D61694D5EDE3F6CAD1
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323639333938.roa
Signing time:             Tue 28 Feb 2023 13:48:39 +0000
ROA not before:           Tue 28 Feb 2023 13:43:39 +0000
ROA not after:            Tue 27 Feb 2024 13:48:39 +0000
asID:                     269398
IP address blocks:        2804:7a30::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:52:d7:cf:f3:89:c0:da:5d:39:d6:16:94:d5:ed:e3:f6:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Validity
            Not Before: Feb 28 13:43:39 2023 GMT
            Not After : Feb 27 13:48:39 2024 GMT
        Subject: CN=07D784AB7F5F7A9B8A6D820B7634250E931F3F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:a1:a2:47:f3:8f:36:28:bd:4d:f9:fc:4b:
                    1a:e0:5a:3a:24:51:cb:3a:bc:f4:4b:59:0a:5c:c9:
                    af:22:7a:05:83:44:e1:3c:85:b7:90:c7:9a:f8:44:
                    0e:1d:3c:03:b1:dd:0b:3e:a1:1c:cb:1d:ef:4b:2d:
                    77:e2:d5:e9:e1:ae:ab:c4:6b:0e:19:47:ea:6e:d1:
                    e7:36:bd:23:d4:a2:54:b6:65:2c:97:43:5f:02:dc:
                    b3:45:2f:49:3f:a7:90:f0:d2:d6:d5:75:b5:97:2b:
                    aa:7e:26:30:02:cd:33:7a:a4:44:68:89:2c:f6:53:
                    60:9e:15:5f:88:9e:0e:e9:c8:09:01:a8:6e:dc:02:
                    08:ca:56:3b:94:48:90:31:2b:dd:d3:a2:5d:0b:64:
                    ce:01:70:ed:13:0c:7f:c9:6a:29:80:5a:1a:73:74:
                    00:a0:96:6b:53:8d:7a:96:d5:9b:fb:43:5d:e5:59:
                    ef:df:d9:51:3b:b7:e2:c4:47:4e:76:f0:cc:60:20:
                    85:3d:e5:b1:99:24:b7:31:a9:33:3d:81:c4:8b:e2:
                    5a:c5:a2:6c:06:78:01:78:c2:7a:38:8f:c9:d2:17:
                    4c:8b:5a:c7:c6:31:eb:a6:fc:15:d3:05:a7:2a:9f:
                    56:65:17:ed:62:97:29:2c:78:04:41:f9:f2:d6:cd:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D7:84:AB:7F:5F:7A:9B:8A:6D:82:0B:76:34:25:0E:93:1F:3F:3B
            X509v3 Authority Key Identifier:
                keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323639333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:e9:83:4e:d6:88:e5:6b:3c:65:a6:be:55:c7:c5:da:1e:
         84:39:3f:66:f1:20:d4:dc:8c:52:64:02:b5:16:68:4f:fe:5f:
         bc:70:d7:69:37:58:12:b8:83:dc:6b:2b:6e:79:e3:f4:1e:4f:
         05:3f:a8:fa:6f:8f:cb:7a:80:b2:9e:76:92:0c:b8:74:c7:1b:
         7f:16:c9:cf:3e:b7:5e:f7:14:13:ab:07:e4:00:e2:67:a6:cd:
         e7:a3:41:44:90:56:66:bb:80:58:95:83:07:e9:08:4c:24:bb:
         d9:25:84:73:22:9c:69:3b:a8:35:8d:a5:98:c6:71:a1:2e:8b:
         b1:0d:8e:60:0c:92:cc:32:76:c0:5c:cc:8a:6e:d1:55:75:15:
         9b:f7:7a:99:b1:30:ba:76:84:64:03:0d:1d:56:32:4d:08:a5:
         d7:71:34:98:6e:fa:c8:c3:81:8c:a6:2a:11:f5:e1:b8:ec:0f:
         6f:1c:c4:3b:90:83:cc:49:7c:85:30:f1:d8:1f:54:92:5c:b1:
         bd:15:7a:0f:35:a1:29:a3:79:ef:22:c3:55:50:67:d8:03:61:
         7f:e1:f9:04:af:cc:2e:c7:4a:47:8d:8e:8d:6a:bb:9b:66:bf:
         c8:56:bf:20:a0:08:cb:2d:0f:29:ab:5e:4f:63:ee:75:12:c6:
         9a:b9:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org