Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/323830343a336233343a3a2f33322d3438203d3e20323636313335.roa
File:                     323830343a336233343a3a2f33322d3438203d3e20323636313335.roa (raw, json)
Hash identifier:          k0XmwsmDtVxwfTXcrbAmG6FjJwgJIMx0D2dbrgsx1Ao=
Subject key identifier:   A8:6F:C3:B2:4E:F3:48:DB:44:06:34:50:07:9D:88:67:2C:4D:77:B9
Certificate issuer:       /CN=66EA09809D63B05E9ED21D386D077B26F209BAF0
Certificate serial:       0F8E92166A763E45119F555598A46ACDA5F5EFDB
Authority key identifier: 66:EA:09:80:9D:63:B0:5E:9E:D2:1D:38:6D:07:7B:26:F2:09:BA:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/323830343a336233343a3a2f33322d3438203d3e20323636313335.roa
Signing time:             Thu 25 May 2023 14:39:38 +0000
ROA not before:           Thu 25 May 2023 14:34:38 +0000
ROA not after:            Thu 23 May 2024 14:39:38 +0000
asID:                     266135
IP address blocks:        2804:3b34::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8e:92:16:6a:76:3e:45:11:9f:55:55:98:a4:6a:cd:a5:f5:ef:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EA09809D63B05E9ED21D386D077B26F209BAF0
        Validity
            Not Before: May 25 14:34:38 2023 GMT
            Not After : May 23 14:39:38 2024 GMT
        Subject: CN=A86FC3B24EF348DB44063450079D88672C4D77B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:ec:22:09:9e:93:8d:26:28:42:4a:f0:a7:
                    55:9c:8a:74:ce:93:c0:e8:65:99:f2:ca:ae:7e:11:
                    65:d2:a1:38:da:a8:3f:65:e2:b9:83:a2:1c:00:92:
                    94:45:c7:04:93:25:35:41:10:30:b8:3a:82:be:af:
                    90:af:ff:93:9e:b7:f2:ce:3f:4d:c3:21:a3:cc:77:
                    99:c8:a1:2c:d8:cb:dc:d4:f1:e5:86:90:b5:de:14:
                    3c:d9:57:31:7b:01:3c:d0:24:95:9a:8f:b1:c1:84:
                    8e:51:14:68:5c:27:fa:55:a1:e0:7c:a4:62:e3:93:
                    d2:16:dc:b4:5f:ab:b0:a3:02:5e:4d:8b:37:f7:e7:
                    65:05:da:28:31:c4:74:97:ef:65:b0:c9:7d:7b:c1:
                    29:a2:36:8f:05:96:e8:f0:69:4c:74:01:2c:2f:bf:
                    06:d1:c5:62:39:3b:57:83:99:5a:65:f4:ba:60:51:
                    91:3e:8b:60:d9:d8:d2:3e:22:f0:7b:f0:e0:1f:ef:
                    79:e7:c3:1c:f8:2c:bf:04:7c:93:73:64:cc:4a:a6:
                    9c:ba:16:3c:50:c4:5f:d6:eb:67:55:6d:1f:0a:a5:
                    8b:db:40:9c:30:8a:d3:06:2c:eb:c4:dd:86:dd:6f:
                    49:dd:e8:63:64:02:3f:cb:19:90:a1:eb:c6:6d:96:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:C3:B2:4E:F3:48:DB:44:06:34:50:07:9D:88:67:2C:4D:77:B9
            X509v3 Authority Key Identifier:
                keyid:66:EA:09:80:9D:63:B0:5E:9E:D2:1D:38:6D:07:7B:26:F2:09:BA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/323830343a336233343a3a2f33322d3438203d3e20323636313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:10:e4:68:18:c7:db:2f:23:54:cf:85:ef:dc:a6:fa:42:
         92:d1:0e:75:f2:cb:aa:82:61:16:b3:14:9e:76:a2:32:14:c6:
         65:c6:7b:a1:7e:50:25:a8:0c:c0:c3:cd:7f:ec:36:9b:bf:69:
         fa:e1:5c:45:2a:95:98:0b:a2:2c:82:b5:83:03:d7:16:01:53:
         5e:57:f1:83:1d:cb:7d:2a:27:57:9b:59:8e:d6:cc:f2:0f:bf:
         43:56:bf:e2:72:86:fb:68:f5:87:bd:91:d0:fc:83:9c:64:16:
         3e:4a:aa:ca:e3:ca:4c:d3:68:56:0f:09:a2:0c:10:b8:5c:c6:
         e4:3c:38:04:0e:ce:ef:c5:a3:c8:6e:b5:d2:ec:be:27:a8:18:
         95:75:9d:b5:f3:e3:55:57:0b:8c:8c:90:47:95:2f:2d:7a:0d:
         69:93:b8:09:23:68:70:b5:83:27:de:fd:c1:22:dd:ce:1f:55:
         d3:cc:fe:bb:7d:5e:8f:22:2d:f5:5e:34:db:01:25:e6:a6:83:
         5b:37:d1:34:20:19:b6:a2:74:1a:f2:47:4e:7e:8f:4a:1b:13:
         6f:a6:f5:61:ff:90:14:c9:e6:23:2a:5b:96:ae:ee:5b:81:ca:
         6b:76:06:67:3d:0d:af:1f:3d:82:22:7b:9a:3f:b7:18:51:3f:
         e0:7e:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org