Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa
File:                     323830343a346263633a3a2f33332d3333203d3e20323637333330.roa (raw, json)
Hash identifier:          +Cin5ITFcOTuITXhakOs1D97tZa833VDOOUYpf114TA=
Subject key identifier:   DE:09:C4:CC:19:12:A1:2A:EE:19:0F:C0:99:22:19:E4:26:27:1D:08
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       364E4349087F41DC471E303843F90C23536EB260
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:20 +0000
ROA not before:           Thu 14 Sep 2023 14:40:20 +0000
ROA not after:            Thu 12 Sep 2024 14:45:20 +0000
asID:                     267330
IP address blocks:        2804:4bcc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4e:43:49:08:7f:41:dc:47:1e:30:38:43:f9:0c:23:53:6e:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:20 2023 GMT
            Not After : Sep 12 14:45:20 2024 GMT
        Subject: CN=DE09C4CC1912A12AEE190FC0992219E426271D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:79:fe:2e:79:da:34:b9:dd:34:3a:85:5a:
                    bc:20:a6:7b:bc:02:50:87:8d:f2:dc:cf:bf:27:d6:
                    22:f2:40:b8:bd:1a:73:13:2f:49:44:7f:1f:be:8c:
                    d0:08:d4:18:f4:aa:98:f1:33:0a:2f:81:4d:ff:04:
                    22:62:43:92:d9:95:b2:a3:fb:7f:ea:22:23:14:c6:
                    c1:38:00:b8:24:e8:f9:8f:51:65:17:4d:3b:5a:82:
                    2f:73:28:95:7e:d7:7b:03:eb:3d:b8:f0:97:1e:e8:
                    3b:e0:72:61:e2:d3:2c:50:d0:73:41:75:0e:24:3d:
                    79:2b:bc:61:26:69:6d:d8:5f:12:c2:e0:10:44:c2:
                    bf:0b:69:fc:38:3c:1a:e6:0f:97:1e:04:cf:0b:80:
                    c8:1c:c2:86:28:e2:07:29:10:88:18:d2:5b:22:16:
                    a1:b4:53:69:93:fe:2b:5c:99:04:16:c0:bc:b3:aa:
                    d9:af:66:a9:9e:b6:0d:40:42:48:43:ba:85:e7:b7:
                    c6:86:21:f7:64:0f:78:ad:23:c8:3b:67:2a:1e:73:
                    cc:cd:83:33:d6:e1:ea:75:e5:1f:58:3c:b4:71:ad:
                    2e:35:e5:0b:9e:fe:32:c5:59:86:d9:4c:66:d0:e9:
                    8d:aa:2b:d4:c7:e3:75:39:0f:c3:38:e1:9e:0c:e2:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:C4:CC:19:12:A1:2A:EE:19:0F:C0:99:22:19:E4:26:27:1D:08
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:18:a1:90:d9:60:f8:12:7f:44:43:18:34:9e:55:12:8a:
         28:d9:68:7d:36:8c:d5:32:75:3e:8b:fb:8f:b8:08:16:16:17:
         ab:21:8e:6e:ff:8e:2d:0a:15:90:df:68:81:40:7e:c0:da:59:
         65:1f:69:d3:0c:b7:dd:a7:00:e5:c6:8b:58:c0:3e:8c:b7:e1:
         3a:7b:7a:0a:a0:cb:47:10:1a:6c:1d:ae:a5:2e:e4:e0:71:20:
         aa:4d:98:1a:33:8d:58:fa:17:7c:7f:72:5a:8c:8b:c4:86:18:
         53:1e:07:06:61:60:97:cb:65:e0:1f:4d:e2:be:1f:5f:dd:85:
         fd:e9:11:b1:18:78:f7:48:94:41:51:c8:6b:ef:e3:06:f1:f7:
         f0:dd:44:bc:30:cd:a9:d4:2b:ea:01:47:5b:56:93:1f:7d:d3:
         49:bb:7e:3e:b0:f6:9a:a0:7b:d2:98:de:65:ec:d5:b5:82:a4:
         3b:e3:27:93:61:c8:c8:0a:07:96:ee:a3:a7:c4:eb:eb:62:f5:
         94:4a:9b:21:c3:04:dd:f4:84:ad:61:f0:a2:80:86:d8:95:f5:
         de:92:89:d6:24:36:2b:4f:ac:fd:88:12:92:35:65:21:9f:16:
         dd:cf:62:0c:f2:5e:f7:6a:fc:cb:3f:d9:2e:a1:e6:d6:3c:16:
         81:e1:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org