Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/323830343a356234633a3a2f33322d313238203d3e20323638383333.roa
File:                     323830343a356234633a3a2f33322d313238203d3e20323638383333.roa (raw, json)
Hash identifier:          l97vHTsxeCNTKBH0zP+ZPOLcYcIKJsyX0tax8MowEj8=
Subject key identifier:   B4:DA:12:F7:F1:0F:BE:B4:9D:CF:00:B3:C6:B2:E0:82:DB:0B:43:CB
Certificate issuer:       /CN=3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798
Certificate serial:       784526589560EA53FD7FC97A555722B321831297
Authority key identifier: 3A:F9:AC:DF:68:71:AB:B0:B4:88:D7:A1:6E:6F:97:94:7F:CD:77:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/323830343a356234633a3a2f33322d313238203d3e20323638383333.roa
Signing time:             Mon 08 May 2023 20:37:42 +0000
ROA not before:           Mon 08 May 2023 20:32:42 +0000
ROA not after:            Mon 06 May 2024 20:37:42 +0000
asID:                     268833
IP address blocks:        2804:5b4c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:45:26:58:95:60:ea:53:fd:7f:c9:7a:55:57:22:b3:21:83:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798
        Validity
            Not Before: May  8 20:32:42 2023 GMT
            Not After : May  6 20:37:42 2024 GMT
        Subject: CN=B4DA12F7F10FBEB49DCF00B3C6B2E082DB0B43CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:35:c0:9b:5a:fd:ee:f0:dc:43:35:81:f3:
                    63:f4:8f:68:4d:01:12:93:39:ad:cb:a5:80:99:a2:
                    a5:dc:13:94:a6:e6:b7:2d:97:06:fd:75:e3:4d:33:
                    fb:d6:60:9d:34:96:d9:e4:7a:78:1e:82:59:0f:86:
                    1a:69:9c:ec:22:28:b0:8e:42:41:75:10:e4:98:c4:
                    8f:42:c1:a1:d4:aa:11:d7:a3:b8:66:d5:3a:00:dc:
                    83:96:04:b8:6c:b5:8d:44:70:34:ff:d0:23:ef:1f:
                    73:62:5d:58:a8:b9:b0:5c:c5:cb:95:79:dc:02:1a:
                    1d:64:97:03:3d:7c:37:65:f2:94:f3:45:cf:ff:40:
                    cd:de:49:90:a7:29:3f:0d:a2:82:6c:0d:bb:fa:bf:
                    35:20:ff:1f:25:13:90:a1:e7:2e:e3:68:f6:89:cf:
                    4c:11:17:bb:14:c3:ce:2e:5f:8c:67:52:14:91:47:
                    c7:be:15:41:ea:1b:5d:3e:19:07:50:3b:93:51:e6:
                    69:6e:1a:0e:96:68:52:a4:3e:a5:41:e6:22:b0:7b:
                    5b:bd:ad:f1:a3:69:ab:db:a6:84:6d:57:ea:1d:32:
                    57:8f:50:de:34:e2:4d:0e:f0:fd:1c:93:ce:ed:a7:
                    4e:75:0c:c5:6e:aa:3d:60:b2:a2:3a:89:1a:d8:ec:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:12:F7:F1:0F:BE:B4:9D:CF:00:B3:C6:B2:E0:82:DB:0B:43:CB
            X509v3 Authority Key Identifier:
                keyid:3A:F9:AC:DF:68:71:AB:B0:B4:88:D7:A1:6E:6F:97:94:7F:CD:77:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/323830343a356234633a3a2f33322d313238203d3e20323638383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:16:3d:dc:d2:64:d6:d7:46:ea:a7:d2:60:4a:a9:fb:5d:
         25:aa:17:1d:db:63:4a:d8:be:66:a0:5d:27:93:9d:7a:e6:0a:
         69:a4:4c:8e:8f:6a:e3:de:f3:fa:9c:6f:d0:da:14:25:2b:e3:
         60:42:66:b7:42:84:e1:77:f8:cd:1f:b6:97:f7:9f:d3:fe:01:
         46:74:c3:47:7b:b1:ec:2c:65:d6:bb:d9:6c:8e:c4:eb:3a:7b:
         cd:cb:d2:db:44:ef:40:1f:fd:76:a4:8f:7d:44:a6:b5:30:ce:
         6a:1c:18:02:c4:dc:9a:f2:4c:c1:ca:00:8d:9b:ce:e2:db:40:
         25:b6:33:18:8a:cb:bf:c2:b1:62:9f:84:1f:33:7f:b7:0d:d0:
         c8:64:0e:6f:c9:75:f6:2c:ef:80:e1:3e:ce:3f:f0:67:df:c4:
         03:1f:ba:e1:31:0e:b0:cc:b7:6c:0c:13:3a:3e:76:aa:be:ad:
         e8:5e:c5:ee:39:94:2d:e2:18:47:37:c7:a0:9d:cd:d3:f6:e2:
         03:7e:f9:e2:f9:15:ad:8f:ca:f3:3f:4b:f1:56:3e:cc:8e:6c:
         a7:3b:ce:d2:f8:74:20:cc:25:ca:79:a8:cc:46:c4:a6:7a:a9:
         2a:07:1f:ba:1f:04:e5:bf:a9:5e:7f:33:00:90:68:79:54:98:
         fa:b9:b7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org