Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/323830343a6562633a3a2f33322d3438203d3e203631353838.roa
File:                     323830343a6562633a3a2f33322d3438203d3e203631353838.roa (raw, json)
Hash identifier:          V9QUVrkaoLDMNTjK72FFrt0Ww3yNht1UEHX0c1nHwzM=
Subject key identifier:   0D:2D:7B:FC:3C:2D:E2:CC:61:39:3C:B4:4D:08:25:9F:0C:AD:4E:8F
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       01EA457DCB49766E83A587065D4D6171FA3A5E9F
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/323830343a6562633a3a2f33322d3438203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:49:58 +0000
ROA not before:           Fri 18 Nov 2022 17:44:58 +0000
ROA not after:            Fri 17 Nov 2023 17:49:58 +0000
asID:                     61588
IP address blocks:        2804:ebc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ea:45:7d:cb:49:76:6e:83:a5:87:06:5d:4d:61:71:fa:3a:5e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:44:58 2022 GMT
            Not After : Nov 17 17:49:58 2023 GMT
        Subject: CN=0D2D7BFC3C2DE2CC61393CB44D08259F0CAD4E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:ab:cd:bb:ec:cc:16:0a:c3:98:9f:29:6c:
                    91:f5:1f:6c:ee:ff:d5:23:07:66:b0:f2:da:fc:c7:
                    f6:70:ac:1e:c3:fb:af:48:6b:a8:d9:b4:6a:2d:2a:
                    58:32:2b:76:4d:ed:62:5c:2e:de:33:33:ee:32:ea:
                    d3:0e:b2:1f:98:07:b8:d6:e6:f5:ca:f2:0f:cf:ac:
                    0f:9a:5c:18:99:1b:ae:1d:6d:cb:cb:47:11:31:77:
                    d6:29:fa:00:12:4a:53:6b:39:1f:26:2d:db:42:e7:
                    c6:06:dd:16:79:00:95:4c:43:12:e4:e7:3e:c4:3a:
                    d4:cb:ff:e1:b2:f7:c0:c0:7e:68:22:66:6f:04:6f:
                    de:7d:39:3a:6a:0d:50:a9:ee:cb:30:6d:06:9b:fe:
                    f5:55:36:62:fc:f5:70:18:36:3d:55:8e:15:2e:8b:
                    cd:2c:00:a3:7b:14:30:a1:cb:01:5c:90:80:f8:d9:
                    a4:65:29:0f:a8:c5:53:c6:85:58:40:d7:6f:2e:e7:
                    59:80:85:94:93:ba:01:1b:2b:31:a1:bc:e1:8a:ee:
                    1f:e9:be:93:a1:d9:07:89:49:47:9e:e2:6c:42:9d:
                    b7:8c:9c:75:91:be:38:8e:8a:32:2d:38:5f:c0:37:
                    f6:80:5c:33:88:c1:e4:f9:3c:37:9f:12:1a:b0:d5:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2D:7B:FC:3C:2D:E2:CC:61:39:3C:B4:4D:08:25:9F:0C:AD:4E:8F
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/323830343a6562633a3a2f33322d3438203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:55:c5:9a:38:71:35:ab:ed:3c:65:ef:21:c8:78:92:00:23:
         e6:79:4a:60:41:5d:cc:ca:5d:ee:b0:18:9c:54:8a:a2:5d:ba:
         5e:7f:47:a1:9b:2c:64:5d:e2:f7:d7:64:20:39:a4:bc:db:cf:
         2b:23:e2:f4:64:69:e5:70:a9:63:66:ad:31:ae:c0:cb:36:60:
         bd:3f:0b:26:94:7e:27:49:d7:f7:7a:22:f1:3a:bd:15:2c:ef:
         79:a6:e0:1b:d8:84:d1:1f:bb:ba:e5:fe:a8:4d:8b:12:09:41:
         e7:9f:e1:ab:c2:29:64:35:fd:89:9f:f9:69:60:4a:05:f2:ae:
         a4:fb:37:b5:9c:3f:0a:77:52:38:0a:11:41:b0:93:86:30:95:
         5c:b7:96:f7:47:b6:7b:61:81:40:dd:a1:62:a7:1a:cd:57:28:
         7b:63:12:50:45:e1:6b:24:cf:e6:f8:bf:b4:ea:be:e0:a6:53:
         c4:b7:9e:6f:8a:53:28:b2:61:f2:3c:d9:2d:a5:57:3b:ca:1f:
         17:0b:40:1d:08:86:9d:7e:19:94:5f:48:a1:11:38:eb:18:f3:
         b7:99:5c:70:a0:09:f5:43:e6:ee:0f:e6:40:b4:dc:c0:de:54:
         1d:3d:b8:42:f5:cd:12:32:d7:a6:a8:c6:44:e6:05:4f:e7:27:
         3e:07:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org