Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa
File:                     323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa (raw, json)
Hash identifier:          Nf/RTWGC8ZodpNbDYAejpVpaBEMXKjtbt2NEsiNLPjs=
Subject key identifier:   65:C1:C3:BA:9D:2E:A9:73:EF:E5:80:2B:C6:A1:8A:B5:71:92:85:23
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       1B83F5172B4F85C2B239E7B056B415AAB7F41F62
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:21 +0000
ROA not before:           Thu 14 Sep 2023 14:40:21 +0000
ROA not after:            Thu 12 Sep 2024 14:45:21 +0000
asID:                     267330
IP address blocks:        2804:4bcc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:f5:17:2b:4f:85:c2:b2:39:e7:b0:56:b4:15:aa:b7:f4:1f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:21 2023 GMT
            Not After : Sep 12 14:45:21 2024 GMT
        Subject: CN=65C1C3BA9D2EA973EFE5802BC6A18AB571928523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:f8:5e:89:f1:04:86:f3:2c:8a:39:04:a5:
                    bb:0c:fc:3f:37:94:7f:83:5d:95:ea:c2:5e:85:72:
                    9d:4a:e9:07:7b:cf:5d:7d:fa:2c:05:a0:d1:0b:35:
                    c3:5f:fd:c7:87:5d:4e:72:71:9a:bb:cd:7c:12:e2:
                    d6:dc:45:b6:0f:fa:6b:ce:ea:1e:62:2c:c0:73:07:
                    10:cb:4b:b9:2e:46:39:48:42:94:91:f3:2c:d5:8b:
                    76:06:3e:9e:7b:a8:b5:92:ba:92:07:69:b5:13:31:
                    73:e8:6e:69:46:9c:17:eb:de:76:18:ef:c3:aa:a1:
                    d2:55:dd:87:0b:c9:24:ff:1e:9a:6b:53:0a:3c:cd:
                    72:a5:2a:9d:93:16:aa:8d:15:af:69:e4:bc:e6:7f:
                    ab:5e:a0:18:6b:4f:94:5f:52:ee:5c:c3:00:7b:c5:
                    3d:07:50:ce:f5:10:2e:44:ee:cd:a0:77:21:54:b5:
                    18:87:ed:ab:20:35:9e:76:0e:28:e7:60:8f:7b:32:
                    50:c5:0c:55:c3:11:a4:93:b7:e8:da:1f:8e:2d:ef:
                    7f:0b:25:10:c2:35:5b:82:50:16:af:8f:8c:94:0d:
                    bb:f3:d6:e2:d0:d4:31:18:3c:d6:c9:b3:12:ce:44:
                    f4:db:3c:e3:bd:c4:9c:75:7d:4d:54:71:f7:ca:a5:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:C3:BA:9D:2E:A9:73:EF:E5:80:2B:C6:A1:8A:B5:71:92:85:23
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:57:72:a1:40:75:05:e1:c1:d4:1b:c0:b8:cf:21:4d:17:06:
         d3:fe:1c:57:25:4f:98:f3:d8:51:af:6a:b2:82:5f:af:77:2c:
         35:98:96:19:01:33:27:07:6c:92:e9:28:c7:b9:5e:97:10:a8:
         9f:0a:ca:75:e5:a2:45:80:f0:23:53:15:94:d0:ff:47:e5:69:
         e3:4e:5a:f9:9c:30:11:04:00:13:78:96:b3:e5:e5:fc:92:c7:
         22:32:10:6c:85:cc:9f:2a:c7:7c:3c:29:dc:3d:b4:54:42:31:
         32:c0:a4:44:a5:e9:64:af:16:54:57:09:df:92:54:98:75:c9:
         e6:a9:28:0a:37:31:29:8d:ba:96:1e:bb:ad:a4:47:40:ff:ba:
         e5:12:18:86:8f:e0:0d:78:d0:fa:c8:8e:49:fb:e7:6b:d1:55:
         f1:37:17:d7:94:db:10:77:c0:ba:d9:63:1a:ed:db:dd:fc:85:
         42:40:1f:a7:3e:f9:8b:99:f6:83:1d:4e:2f:99:42:92:ff:95:
         77:a5:80:c3:ea:08:8d:be:7a:ea:54:32:ad:5d:95:83:f4:ee:
         b4:c9:da:3b:65:23:e2:da:91:c1:96:4c:00:1e:97:2d:89:7d:
         95:81:c0:42:68:00:60:91:56:17:71:97:de:22:42:91:2c:68:
         1f:00:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org