Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a343030303a3a2f33342d3334203d3e20323637333330.roa
File:                     323830343a346263633a343030303a3a2f33342d3334203d3e20323637333330.roa (raw, json)
Hash identifier:          xvztqqTLNMN1oPMuqZLoO0yPQ6loPgPgQq33hsIZ9Ew=
Subject key identifier:   09:6D:8D:32:61:37:36:02:69:6E:17:40:FC:BB:B3:1D:11:69:90:69
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       23A38E650FEE55F8E082D0239AEEE34B8C93659B
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a343030303a3a2f33342d3334203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:22 +0000
ROA not before:           Thu 14 Sep 2023 14:40:22 +0000
ROA not after:            Thu 12 Sep 2024 14:45:22 +0000
asID:                     267330
IP address blocks:        2804:4bcc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a3:8e:65:0f:ee:55:f8:e0:82:d0:23:9a:ee:e3:4b:8c:93:65:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:22 2023 GMT
            Not After : Sep 12 14:45:22 2024 GMT
        Subject: CN=096D8D3261373602696E1740FCBBB31D11699069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:53:93:9b:56:8b:fd:be:d9:07:ea:8c:34:
                    75:dd:ed:9b:e8:73:96:27:dc:63:1d:cb:c1:3d:67:
                    b5:fe:3d:cd:73:c2:ad:13:b7:b4:6d:f2:48:df:75:
                    a1:1f:31:e5:c3:ad:53:23:2f:93:f5:c1:7d:94:ca:
                    44:4a:bb:2e:23:5a:5f:b0:be:c0:6c:4e:c3:ea:0b:
                    ee:76:8b:ec:98:74:01:36:32:d6:3d:7b:a9:23:55:
                    a4:33:c6:de:2d:ba:bd:68:79:cc:65:c7:c3:4e:49:
                    fd:68:d0:68:8b:e8:ef:b5:1f:b6:d4:f6:5b:e8:f5:
                    07:af:12:d3:fa:46:58:62:bc:25:61:f8:4e:3f:e5:
                    eb:a9:94:a9:36:b5:8b:2c:b1:47:e8:a1:0b:39:02:
                    79:5f:6c:34:69:8e:ac:d9:73:18:23:9d:4c:9d:2c:
                    4c:ae:ef:cc:0b:f3:fd:2d:e4:b5:95:2c:fc:9b:9d:
                    96:54:19:7c:d6:55:3c:fe:77:6d:15:5f:97:4b:ee:
                    a3:9e:71:8a:0a:c5:c6:22:3f:93:d1:c8:ca:5d:7d:
                    74:97:08:54:25:25:57:45:8d:e2:8a:bc:65:e3:74:
                    fc:0a:f2:be:53:44:36:27:ca:c8:28:9a:ee:58:82:
                    e4:3e:32:e5:b9:57:d1:4c:09:30:c8:f0:99:12:f1:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:8D:32:61:37:36:02:69:6E:17:40:FC:BB:B3:1D:11:69:90:69
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a343030303a3a2f33342d3334203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c4:86:f5:69:78:4d:9f:aa:60:4f:59:51:57:f1:e4:58:ff:e3:
         b3:86:14:ac:76:ae:23:de:47:b1:31:6b:d3:5e:6d:d7:98:d8:
         1e:73:04:9a:a6:85:d0:31:d7:1c:a7:83:20:1e:2e:58:4b:71:
         69:03:ad:0b:6d:52:bf:e4:ed:2f:07:78:53:51:49:5d:19:a8:
         11:cb:ca:a3:a1:cd:bf:84:44:1d:eb:de:9b:ba:f6:32:8f:ac:
         20:ae:90:0d:71:ff:53:39:95:3c:6b:aa:5d:ef:e3:b3:51:77:
         79:d9:be:13:8b:9f:eb:fc:1c:52:5b:6d:c8:ea:50:02:22:51:
         86:3a:ac:46:f7:d0:57:7d:e1:7f:07:32:eb:69:de:1c:4f:33:
         3a:64:a9:78:85:bf:11:7c:46:81:ea:3f:b1:88:bf:28:ca:f3:
         b4:45:8d:a7:58:67:c8:fa:61:e6:13:5b:ed:d5:b3:52:19:3e:
         f4:87:72:e9:38:d0:4d:1c:45:47:7d:b7:a1:75:73:c5:7e:38:
         3d:8c:c4:b8:59:2e:a2:8c:73:f6:9d:b4:d1:ef:00:1b:21:6f:
         d9:a6:68:ac:91:b4:b0:7e:93:28:2c:5d:3f:c1:a1:00:d1:12:
         52:a1:c2:a4:aa:d1:6e:d1:a9:8c:80:97:fa:9a:e6:84:79:00:
         f2:bd:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org