Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/323830343a313133303a3a2f33322d3438203d3e20323633363634.roa
File:                     323830343a313133303a3a2f33322d3438203d3e20323633363634.roa (raw, json)
Hash identifier:          8OLXVHnrE34ImPC7haKDGibbU3wDfkxWAC0IGbDR4Jk=
Subject key identifier:   93:66:75:09:F1:57:59:22:E6:F3:13:1A:E9:93:F5:79:BD:40:95:DC
Certificate issuer:       /CN=05680EA0254541FC6249862796FD1041B82C3ED8
Certificate serial:       3B143111BE653CF060D274688EF99766996407F8
Authority key identifier: 05:68:0E:A0:25:45:41:FC:62:49:86:27:96:FD:10:41:B8:2C:3E:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05680EA0254541FC6249862796FD1041B82C3ED8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/323830343a313133303a3a2f33322d3438203d3e20323633363634.roa
Signing time:             Fri 12 Jan 2024 12:44:20 +0000
ROA not before:           Fri 12 Jan 2024 12:39:20 +0000
ROA not after:            Fri 10 Jan 2025 12:44:20 +0000
asID:                     263664
IP address blocks:        2804:1130::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:14:31:11:be:65:3c:f0:60:d2:74:68:8e:f9:97:66:99:64:07:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05680EA0254541FC6249862796FD1041B82C3ED8
        Validity
            Not Before: Jan 12 12:39:20 2024 GMT
            Not After : Jan 10 12:44:20 2025 GMT
        Subject: CN=93667509F1575922E6F3131AE993F579BD4095DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:92:84:c2:c8:b5:cf:62:f8:c6:77:27:14:
                    98:9a:b6:d0:4c:f9:b8:f8:6e:01:8d:5f:f4:c3:1e:
                    98:50:5a:7e:7c:be:70:8b:ad:ee:66:1e:05:39:50:
                    92:cf:8f:82:27:b9:34:a2:c4:7a:64:0e:f6:0b:39:
                    67:d8:73:87:f2:a1:35:fa:d7:ff:48:e2:f1:58:40:
                    5c:42:33:fd:84:ec:2a:85:05:d5:45:7e:70:86:4b:
                    bb:23:64:db:ed:8d:3e:29:0d:cb:4e:49:88:54:a2:
                    19:16:7b:10:02:88:8b:fb:0a:0c:30:5b:0b:b5:45:
                    50:d5:00:d4:aa:a4:dc:a1:58:4e:0c:d3:c5:fd:9b:
                    79:fe:b3:61:f7:a5:ac:6c:7e:65:5a:01:3e:f4:95:
                    e5:2d:dd:5a:4c:1f:0e:8b:68:a1:3f:63:1c:9e:5d:
                    26:62:f9:32:30:14:a4:46:e3:91:cb:8b:1b:cd:b4:
                    23:ec:b1:7f:34:03:4e:60:d8:c8:1d:45:04:27:97:
                    25:46:be:4b:f6:f2:65:ea:75:b5:c9:ca:a0:86:ef:
                    3b:14:0f:87:b1:75:44:e3:35:9b:23:4a:4f:cf:99:
                    f8:af:21:ec:0b:e6:47:63:f7:6c:b2:dd:60:87:ed:
                    84:0b:95:86:9d:60:97:ae:f4:f4:fe:5e:e3:2e:44:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:66:75:09:F1:57:59:22:E6:F3:13:1A:E9:93:F5:79:BD:40:95:DC
            X509v3 Authority Key Identifier:
                keyid:05:68:0E:A0:25:45:41:FC:62:49:86:27:96:FD:10:41:B8:2C:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/05680EA0254541FC6249862796FD1041B82C3ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05680EA0254541FC6249862796FD1041B82C3ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/323830343a313133303a3a2f33322d3438203d3e20323633363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1130::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:f2:48:10:53:ee:30:6f:d7:06:73:db:e6:a0:bb:ea:e3:
         7c:c0:80:37:39:c3:8d:40:67:45:fc:74:6c:d2:0f:87:88:ca:
         01:e3:0f:b3:ad:33:70:88:70:a9:7a:30:6c:15:b1:f9:53:e9:
         01:bc:0f:bf:5e:af:db:76:05:84:8b:2f:77:57:20:11:96:a1:
         e0:78:61:5e:e8:e1:66:8e:8d:f6:61:c0:62:86:d1:4b:fc:78:
         9c:e6:4e:5d:a1:6b:ed:26:d5:5c:60:e7:ad:24:84:49:fd:27:
         cf:b4:ed:11:63:5f:ff:f8:d3:c8:80:ee:54:8c:6c:e5:ee:87:
         1b:81:c8:23:ca:20:7d:ba:2b:49:83:4e:57:bf:54:24:5e:1b:
         fa:e8:d7:02:71:c1:b6:3f:83:59:e9:e4:99:2a:6c:c5:03:b1:
         dc:39:b3:a9:11:a9:f8:32:5e:46:d7:36:80:fc:c6:18:2e:50:
         00:4b:bf:f3:1e:2b:78:13:1c:ba:ac:66:33:77:a8:5b:cd:d2:
         ae:c6:b8:e7:ab:da:ab:6e:58:11:14:28:8d:13:90:ac:22:91:
         46:eb:a3:0a:64:ff:5a:1c:60:ad:ed:bc:ec:7b:db:53:57:0a:
         01:40:45:c9:dd:3d:b6:f3:8b:2b:dc:f4:a5:f6:a1:ad:81:f1:
         ab:4d:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org