Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a383030303a3a2f33332d3333203d3e20323637333639.roa
File:                     323830343a346336383a383030303a3a2f33332d3333203d3e20323637333639.roa (raw, json)
Hash identifier:          OmpgiHisz2ZEI+J6L6FnKy3LWiLlYaWwV4g/zV4yF5E=
Subject key identifier:   FC:9A:E5:21:B7:23:6A:90:7F:8B:9B:EE:5C:FC:49:46:82:99:9B:01
Certificate issuer:       /CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
Certificate serial:       243AA3EC42884C0D03DA2896C96A40FD4EE43EB1
Authority key identifier: DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a383030303a3a2f33332d3333203d3e20323637333639.roa
Signing time:             Thu 21 Sep 2023 11:26:43 +0000
ROA not before:           Thu 21 Sep 2023 11:21:43 +0000
ROA not after:            Thu 19 Sep 2024 11:26:43 +0000
asID:                     267369
IP address blocks:        2804:4c68:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3a:a3:ec:42:88:4c:0d:03:da:28:96:c9:6a:40:fd:4e:e4:3e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Validity
            Not Before: Sep 21 11:21:43 2023 GMT
            Not After : Sep 19 11:26:43 2024 GMT
        Subject: CN=FC9AE521B7236A907F8B9BEE5CFC494682999B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:5b:8b:78:58:78:44:31:33:f5:ee:1e:9d:
                    89:c7:00:69:2a:1e:3c:bb:4f:b6:06:4c:bd:98:39:
                    50:59:dc:b4:68:d0:29:9e:c9:70:39:e9:d4:de:6b:
                    a4:af:22:08:ef:2d:12:d6:bf:2a:fa:c6:0e:2c:b8:
                    1f:fa:d2:e6:ad:08:32:3f:9c:e1:36:56:52:fa:74:
                    94:28:22:99:53:42:6e:a2:74:a5:da:24:f5:1d:d0:
                    f4:66:02:d0:2e:91:4c:cd:ac:18:38:e5:c0:01:28:
                    4e:e1:18:5e:62:bd:a3:26:0f:6d:19:68:5a:35:29:
                    8c:c4:f1:0b:c2:f0:49:2b:7e:85:79:33:6e:b6:c0:
                    0e:62:f4:ba:65:95:b4:d0:47:b5:71:42:22:97:2b:
                    79:d3:eb:68:e2:37:e0:b4:53:45:f3:27:d0:69:6e:
                    63:39:3b:d1:00:0e:f7:1b:9a:91:dd:9f:83:50:1d:
                    02:a5:1e:74:56:db:1c:58:6f:79:5c:02:80:10:92:
                    25:71:b6:19:93:c2:27:3b:17:03:80:8e:78:44:d2:
                    5f:b6:5c:9f:a6:c9:bf:53:d2:a5:e8:3f:a2:97:c6:
                    ad:7c:13:26:c6:d5:c5:8a:cf:b3:3a:37:7d:f5:65:
                    2c:d3:7e:f0:f1:b9:a8:63:c1:f9:d7:ec:0e:3a:41:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:E5:21:B7:23:6A:90:7F:8B:9B:EE:5C:FC:49:46:82:99:9B:01
            X509v3 Authority Key Identifier:
                keyid:DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a383030303a3a2f33332d3333203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c68:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:96:db:2d:06:ca:c9:bd:63:20:b5:e6:b8:05:16:d0:38:e9:
         8b:d5:af:a7:68:e6:dd:2c:58:bf:c8:28:b7:34:f9:50:fa:de:
         9d:21:97:1e:f1:bc:68:f6:4c:f6:92:3e:6c:31:d0:74:53:b8:
         d7:fa:88:86:62:78:76:c5:3c:92:81:63:28:57:56:39:07:ee:
         c8:c8:bf:d3:89:67:ea:b2:cc:35:56:b8:61:93:44:c2:6e:4f:
         66:d2:34:b5:b1:c9:be:e3:bf:52:20:bd:96:ef:5a:fa:5e:6b:
         cb:01:8e:7b:b9:84:23:48:53:a8:b0:a6:d7:b9:1d:4f:2e:e1:
         d9:5e:71:a1:7c:23:ba:8c:fa:b8:69:d5:aa:f8:83:d3:42:01:
         c0:8d:5d:16:21:d1:ca:57:43:73:b7:ff:79:22:76:8b:43:12:
         87:6b:f8:77:90:71:5c:35:e6:16:9d:b3:5e:22:b9:e4:56:a2:
         ce:db:0e:ce:07:3a:a5:47:f2:bb:3b:3a:39:d6:83:24:e2:4b:
         62:0c:36:0c:92:38:a0:04:14:ff:35:b0:88:11:5a:8b:4b:3b:
         f7:fe:c3:98:10:05:eb:04:a2:e6:45:fd:88:06:bb:7e:a7:dd:
         79:83:bd:5a:62:99:16:df:e9:ce:82:db:fd:21:a8:e6:e8:a2:
         9e:c9:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org