Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa
File:                     323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa (raw, json)
Hash identifier:          nOjLJLBYlXr+6aznkZiKq/3SlpYX4IVRnME68zgrPB0=
Subject key identifier:   7D:48:E7:D8:01:9A:46:B3:66:66:66:14:AC:A5:4A:7C:15:31:BB:D5
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       6192EE9006AA051BAE3E0B30B6F339D2BC7E5FDE
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:23 +0000
ROA not before:           Thu 14 Sep 2023 14:40:23 +0000
ROA not after:            Thu 12 Sep 2024 14:45:23 +0000
asID:                     267330
IP address blocks:        2804:4bcc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:ee:90:06:aa:05:1b:ae:3e:0b:30:b6:f3:39:d2:bc:7e:5f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:23 2023 GMT
            Not After : Sep 12 14:45:23 2024 GMT
        Subject: CN=7D48E7D8019A46B366666614ACA54A7C1531BBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:b7:9d:2f:c3:41:c6:15:e6:0c:48:8e:64:
                    12:c9:57:52:03:cb:81:f7:70:b4:39:70:9e:52:0b:
                    85:b2:ec:64:29:c9:6a:10:21:b7:49:53:6f:38:19:
                    3c:ce:0f:5d:7d:3e:41:87:b2:c4:e0:5a:f8:85:0c:
                    bc:2a:e8:b5:bb:c2:ff:dc:99:39:38:a5:a4:4e:18:
                    84:4d:58:11:45:cd:fe:d3:e2:d1:47:b9:d5:8e:ea:
                    e2:73:f8:33:c7:cc:f0:74:35:99:45:97:e6:97:c6:
                    8b:7a:b8:54:79:58:f2:4d:d2:1f:43:85:e7:9e:2f:
                    c9:dc:93:80:a5:d8:74:fc:fc:05:d2:93:ee:81:d3:
                    e0:f2:47:80:6c:51:c1:d8:d6:f8:73:56:c8:a7:a1:
                    8b:c3:4c:7c:79:5d:ed:67:63:48:87:bc:e5:d8:47:
                    44:17:09:c9:fd:0c:87:c8:89:b0:bf:10:71:67:45:
                    0a:0d:63:05:5d:06:dc:d6:2e:d5:1c:cd:88:e2:ae:
                    91:67:ce:47:13:86:28:76:08:40:f9:17:c2:cc:75:
                    ff:63:1a:28:a9:67:9d:7b:b8:0b:7f:e9:22:db:28:
                    3d:c3:9a:94:17:98:5d:66:d8:f3:3f:09:f1:fb:20:
                    09:95:96:29:bc:aa:47:87:87:b8:c8:68:4f:09:1c:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:E7:D8:01:9A:46:B3:66:66:66:14:AC:A5:4A:7C:15:31:BB:D5
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d2:58:ff:1a:87:90:86:2d:ec:23:02:a6:39:a3:8d:bf:41:a8:
         81:ef:cd:9e:4c:2b:0b:b7:d4:96:c7:c7:7f:48:f4:9d:5f:30:
         cd:49:dc:31:4c:84:e9:dc:e8:db:3f:d2:ac:c5:ea:70:5d:a6:
         0e:c9:c6:72:a2:22:8d:bb:bc:41:05:79:66:8f:9e:26:de:64:
         38:25:e4:9e:20:6f:18:b1:a0:d2:f8:c1:bf:43:5d:3f:5f:ed:
         50:e2:c7:58:a1:b6:0a:5d:48:69:e4:37:46:41:7c:2a:c8:8e:
         25:bd:70:df:d8:15:8e:66:f3:15:25:99:59:ce:d2:f3:fa:7b:
         7c:ee:4f:5e:b3:7f:33:a3:73:ec:e9:3e:7a:22:49:06:88:6f:
         df:90:63:26:a6:63:cb:61:07:2e:e7:18:fc:93:39:6a:df:32:
         29:d9:0d:31:65:70:9a:ae:4f:06:10:d7:86:21:d5:2c:16:a9:
         4b:ae:cc:5e:4c:7f:e0:16:78:e8:3c:9a:21:38:7a:8c:b1:d0:
         e6:ba:60:81:f7:4c:06:3c:53:0a:b8:d7:63:42:c5:8b:45:b8:
         1b:93:38:69:b9:b7:c0:3a:8f:cf:77:f7:aa:5f:bb:9b:5e:78:
         42:e0:64:6c:ee:78:71:5e:bc:3a:1f:e3:24:92:4f:ac:e7:54:
         0b:09:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org