Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/323830343a356363303a3a2f33322d3438203d3e20323638393238.roa
File:                     323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (raw, json)
Hash identifier:          sb+Rj3QLbRoGjZNECju6RoK5jRsZsBg2gzIf/6Q2008=
Subject key identifier:   BB:E3:A0:76:E7:65:E5:7C:0E:AE:07:F8:A1:15:66:4A:C4:B0:A0:61
Certificate issuer:       /CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
Certificate serial:       1024B86AF2A7D60A46C55AB5A1D926B8DDB0E548
Authority key identifier: C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/323830343a356363303a3a2f33322d3438203d3e20323638393238.roa
Signing time:             Tue 05 Dec 2023 19:01:20 +0000
ROA not before:           Tue 05 Dec 2023 18:56:20 +0000
ROA not after:            Tue 03 Dec 2024 19:01:20 +0000
asID:                     268928
IP address blocks:        2804:5cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:24:b8:6a:f2:a7:d6:0a:46:c5:5a:b5:a1:d9:26:b8:dd:b0:e5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
        Validity
            Not Before: Dec  5 18:56:20 2023 GMT
            Not After : Dec  3 19:01:20 2024 GMT
        Subject: CN=BBE3A076E765E57C0EAE07F8A115664AC4B0A061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:b1:fd:66:c7:38:2f:40:d7:53:24:1e:f0:
                    aa:e1:dc:3e:67:cf:c4:3c:97:d5:9c:06:15:dc:6a:
                    75:ef:d8:24:a3:4d:03:15:74:5b:b4:2a:ec:d9:a0:
                    23:c4:7b:25:55:29:23:e4:94:96:fb:25:f1:fb:a7:
                    af:02:96:45:3c:6d:9a:bc:18:32:86:8b:14:95:64:
                    ab:67:3c:02:ee:bc:94:7d:dc:0c:b6:87:cc:b5:3b:
                    d6:6f:69:46:89:00:ac:55:93:84:aa:b3:d5:1d:eb:
                    f8:11:29:6b:2c:00:0f:e9:dc:72:34:f9:ad:ca:93:
                    57:f2:f9:16:5f:7d:68:56:7e:15:c1:a0:64:fa:c5:
                    b3:d8:2d:1d:23:f3:77:fc:88:69:6e:90:2c:17:35:
                    ed:9c:c4:eb:81:c4:c4:4f:8b:6b:ab:43:76:84:fa:
                    f9:01:f4:45:44:80:9d:45:91:64:af:bf:cf:b0:6d:
                    22:26:21:8e:b3:c1:27:cd:3f:b6:f2:85:ab:df:17:
                    75:d7:a3:5d:e3:2a:ba:ad:1a:b5:aa:62:3e:7a:1a:
                    de:09:52:c1:f6:99:aa:fd:72:64:fe:22:7b:2e:36:
                    87:50:9d:1b:98:86:b2:20:96:2b:e4:5e:84:27:a1:
                    9e:6a:99:1f:8e:a9:e4:8a:ed:ad:1a:3d:ec:be:37:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E3:A0:76:E7:65:E5:7C:0E:AE:07:F8:A1:15:66:4A:C4:B0:A0:61
            X509v3 Authority Key Identifier:
                keyid:C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/323830343a356363303a3a2f33322d3438203d3e20323638393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:67:62:1c:5b:04:f5:2a:f3:48:c5:de:5e:b6:93:da:15:
         e7:39:86:ed:72:94:f2:f6:aa:48:06:8a:a1:e3:21:b3:92:30:
         16:72:3e:ad:06:a2:7f:10:83:59:4f:56:75:c5:9e:b7:32:d3:
         b8:57:03:7b:10:7c:07:5a:b2:e5:bc:86:1f:d1:6f:f4:a6:f2:
         d7:97:da:9d:fd:6b:7c:5d:66:6e:96:ff:8a:33:6a:3f:04:b7:
         16:5d:ed:9b:8e:ef:34:90:bb:74:e1:14:7c:bf:b2:5f:d8:c4:
         27:09:49:32:00:72:9c:b2:48:b4:3b:eb:dd:26:83:70:d7:a2:
         3e:9b:1a:a0:0c:88:5f:82:9b:29:9e:63:9d:b8:dd:05:a8:01:
         9c:e3:07:67:ed:ac:e3:c6:42:69:0d:c1:c8:46:90:db:ea:8f:
         be:d7:a4:53:ef:0a:a4:db:32:d9:58:9b:fb:d0:08:49:85:ac:
         78:7c:cc:58:44:2f:fa:01:a1:e8:ee:84:6c:4d:ea:5d:c3:09:
         fc:e4:d8:17:0b:e4:71:fc:e2:53:96:f5:59:0b:8d:3e:7a:33:
         04:16:31:9b:9e:f0:e6:6d:a9:a1:70:eb:7d:9b:59:66:d5:1d:
         3f:18:dc:e7:fe:77:a1:08:b7:db:3b:2f:26:5f:1f:05:a5:cd:
         ec:c1:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org