Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a3a2f33322d3334203d3e20323730323536.roa
File:                     323830343a363933383a3a2f33322d3334203d3e20323730323536.roa (raw, json)
Hash identifier:          4E1RjRbyQHudqa8MDLOqQNyCpWFGHmsY3koDUXs6e04=
Subject key identifier:   DB:E9:8E:24:44:0D:EA:5D:60:F2:8C:89:71:E3:A5:57:CA:6E:7C:17
Certificate issuer:       /CN=A342FC6471B5406C66BB5A51BD6F3F7D07316279
Certificate serial:       239B99AC159233DE470D74BB760A839CA2F9EEFC
Authority key identifier: A3:42:FC:64:71:B5:40:6C:66:BB:5A:51:BD:6F:3F:7D:07:31:62:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a3a2f33322d3334203d3e20323730323536.roa
Signing time:             Wed 25 Jan 2023 17:58:18 +0000
ROA not before:           Wed 25 Jan 2023 17:53:18 +0000
ROA not after:            Wed 24 Jan 2024 17:58:18 +0000
asID:                     270256
IP address blocks:        2804:6938::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:99:ac:15:92:33:de:47:0d:74:bb:76:0a:83:9c:a2:f9:ee:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A342FC6471B5406C66BB5A51BD6F3F7D07316279
        Validity
            Not Before: Jan 25 17:53:18 2023 GMT
            Not After : Jan 24 17:58:18 2024 GMT
        Subject: CN=DBE98E24440DEA5D60F28C8971E3A557CA6E7C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:4c:10:8c:bb:59:75:39:9c:83:23:73:06:
                    5f:06:44:08:8f:22:e7:0a:11:4a:c9:a2:95:b8:83:
                    33:f6:b7:92:96:2b:26:8b:c4:18:ce:cd:81:d0:7d:
                    fc:12:a2:83:29:f3:70:23:8a:d5:54:ac:f3:7f:c0:
                    79:c5:c8:44:3d:3c:2f:01:56:64:a0:da:cd:df:2c:
                    7e:5e:88:e5:ae:7f:4b:62:32:80:6d:46:47:8e:b6:
                    4f:57:41:3f:6a:22:97:b1:1d:6f:26:3b:87:2a:3f:
                    92:a9:bb:58:9c:81:a9:1f:b0:e0:33:04:1a:b5:3c:
                    71:c7:b9:1d:a4:8e:5e:cc:f3:55:aa:ee:2f:58:bf:
                    2a:9c:09:4a:61:6d:3d:c2:8a:7b:b6:d9:3b:9f:d6:
                    f5:c8:16:3f:54:f6:ed:68:3d:fe:c2:3b:2b:fe:43:
                    c1:1e:bd:82:b7:2b:3b:32:de:df:b5:76:77:f0:6e:
                    fb:21:6b:f7:c7:ca:bd:2b:c4:b3:24:a3:46:e4:42:
                    ef:30:83:ea:0b:b7:7e:b0:e0:54:fa:c0:66:e6:53:
                    d2:e6:25:fc:d0:c2:4a:38:f8:1d:ee:4f:1f:48:8c:
                    7a:a6:f0:d9:54:e1:e3:15:2c:f3:2c:1d:7d:0c:0f:
                    ff:d7:c2:dc:4f:ab:1a:5a:dd:82:1f:5a:84:2c:0b:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:8E:24:44:0D:EA:5D:60:F2:8C:89:71:E3:A5:57:CA:6E:7C:17
            X509v3 Authority Key Identifier:
                keyid:A3:42:FC:64:71:B5:40:6C:66:BB:5A:51:BD:6F:3F:7D:07:31:62:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a3a2f33322d3334203d3e20323730323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6938::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:24:92:c0:d6:ef:9f:8f:e5:4d:28:2f:43:d8:4e:48:1a:05:
         5b:a9:06:35:78:29:57:44:5c:7a:e7:cf:a6:b8:10:6f:a0:29:
         3f:74:19:bf:8c:8e:8a:bf:0b:f6:9a:e4:4e:a9:a3:1d:f9:5c:
         7a:69:3f:e8:b1:98:07:75:18:82:f4:26:76:f6:0d:36:f3:15:
         df:fa:5b:5f:ee:ae:af:13:d2:77:be:cc:7c:1f:02:de:f8:c0:
         fd:f0:b1:c7:7a:fc:23:8f:75:12:76:97:be:02:b5:69:77:f3:
         95:66:85:26:6a:09:9f:48:dd:b6:78:78:01:c8:af:31:f0:43:
         a2:1e:2c:8d:00:62:6f:5d:51:a7:0e:02:41:29:20:32:ac:54:
         ff:37:41:c9:74:4a:2b:3b:64:bc:79:4c:b6:4e:71:a6:38:6c:
         5a:85:7f:6d:02:02:61:e1:9a:36:fb:f6:9c:3e:95:74:1b:e6:
         a5:0b:89:e6:00:f7:6a:94:52:b1:5b:33:e1:82:ad:85:77:73:
         81:7d:5e:3d:fe:db:83:16:36:83:7f:6e:16:c2:75:bd:b3:be:
         65:6b:bd:f2:3f:48:cf:d9:ba:fe:e1:a1:30:b9:b6:da:a0:1d:
         13:d5:e1:1e:41:48:89:60:d5:61:ee:33:0b:3c:af:e6:c4:9d:
         5f:fb:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org