Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d3334203d3e20323639353330.roa
File:                     323830343a363630633a3a2f33322d3334203d3e20323639353330.roa (raw, json)
Hash identifier:          eu9unoOzk/Vsa36m8dMXiTCzxZPR7G9QqDpDlufWbak=
Subject key identifier:   45:36:D0:FC:81:66:39:01:74:2D:FD:21:DD:D1:89:8D:A8:B0:02:82
Certificate issuer:       /CN=D41FBBD4BB9A705D55D26403EB508620E0DBC782
Certificate serial:       066354F1EFAE2AB0E08FB581966237402400DA6B
Authority key identifier: D4:1F:BB:D4:BB:9A:70:5D:55:D2:64:03:EB:50:86:20:E0:DB:C7:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d3334203d3e20323639353330.roa
Signing time:             Sat 30 Mar 2024 13:22:30 +0000
ROA not before:           Sat 30 Mar 2024 13:17:30 +0000
ROA not after:            Sat 29 Mar 2025 13:22:30 +0000
asID:                     269530
IP address blocks:        2804:660c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:63:54:f1:ef:ae:2a:b0:e0:8f:b5:81:96:62:37:40:24:00:da:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D41FBBD4BB9A705D55D26403EB508620E0DBC782
        Validity
            Not Before: Mar 30 13:17:30 2024 GMT
            Not After : Mar 29 13:22:30 2025 GMT
        Subject: CN=4536D0FC81663901742DFD21DDD1898DA8B00282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:2c:86:21:36:0d:e9:49:6b:0e:66:31:bd:
                    58:5f:1b:33:a0:65:76:b3:26:78:05:25:98:ef:95:
                    ba:cf:11:e1:1b:de:65:bd:1a:7d:63:15:fe:ec:e5:
                    3b:3b:9e:b7:95:4a:d4:4c:33:57:65:3d:fb:83:a2:
                    49:31:35:a0:9f:ce:25:0d:c1:3e:be:9b:f3:2e:35:
                    19:25:a9:28:f4:47:68:e4:a1:53:73:4c:00:0a:f9:
                    9d:dc:63:a6:d9:f2:a1:83:0c:ba:31:95:dc:22:61:
                    fe:14:89:18:54:f2:6b:2b:6a:c8:75:3b:a8:27:ae:
                    15:6d:c9:36:d2:88:c4:c1:62:91:8b:8e:14:08:43:
                    85:82:bd:52:7c:27:41:05:42:6f:2a:50:3b:fc:b5:
                    69:70:b6:45:63:0a:bb:14:1d:d8:40:c3:5a:c6:5d:
                    9d:c8:7a:5e:f7:87:03:c8:2a:29:9f:0b:b7:09:e3:
                    a4:fe:21:8b:13:37:f2:43:8e:74:15:75:df:44:9f:
                    45:73:2c:ff:09:43:02:56:4c:41:6f:c1:17:14:f7:
                    75:f7:b0:57:cf:5c:b9:7b:2b:25:1c:89:54:a4:72:
                    1f:47:94:21:45:bc:1e:b9:fe:89:81:36:4e:da:c0:
                    4b:c1:39:4a:ed:77:29:23:45:5d:27:09:03:07:bf:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:36:D0:FC:81:66:39:01:74:2D:FD:21:DD:D1:89:8D:A8:B0:02:82
            X509v3 Authority Key Identifier:
                keyid:D4:1F:BB:D4:BB:9A:70:5D:55:D2:64:03:EB:50:86:20:E0:DB:C7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d3334203d3e20323639353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:660c::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:d3:fc:7e:7b:07:19:28:63:fd:33:65:68:c8:ad:4a:21:bc:
         72:ca:f8:01:60:3c:02:f2:3d:75:40:ec:fa:eb:5d:72:6f:22:
         a3:47:e0:e7:8f:51:4f:d1:56:7a:4c:31:2e:1d:8a:a2:c1:3b:
         5e:f9:ec:1c:15:fa:02:e7:f6:c1:a5:14:0c:44:14:d6:96:a6:
         14:b8:e4:29:33:15:cc:aa:7d:c1:fb:01:df:17:63:bd:e5:bb:
         38:e9:0c:4c:c4:af:a1:a9:ae:90:a8:70:fe:16:39:ea:10:92:
         2b:23:62:7c:50:ba:06:59:36:3e:30:7a:f0:29:16:7e:5c:71:
         99:d4:80:c8:3a:7a:a3:60:84:3f:f0:68:4c:e6:59:14:14:bf:
         73:ea:3e:58:3d:07:be:15:e6:5d:bf:cc:94:b9:77:be:38:38:
         78:03:94:d9:6e:d2:2e:8a:8b:2b:0a:91:b8:d6:79:00:0e:4e:
         4c:d0:be:59:89:6d:7d:15:fa:7d:d6:d0:f4:5d:05:1a:94:cb:
         1e:6e:e2:de:b6:58:18:91:10:60:e6:db:60:30:ec:01:50:0b:
         6a:a5:d4:e0:7b:7d:50:6b:09:04:f8:24:81:26:dc:23:75:6d:
         30:28:a5:3e:9f:2e:cb:26:0d:14:84:47:2e:fb:ef:00:b1:75:
         b7:25:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org