Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d3332203d3e20323635343437.roa
File:                     323830343a333434383a3a2f33322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          UIV3rDWBvgTxLzAsuwHzr1vTJ7KrrR6sMqaFmr/7dyw=
Subject key identifier:   7F:B4:2D:0A:F8:50:30:77:53:21:8B:EF:41:39:0C:46:34:35:07:9F
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       3FD15039CFAE4C06E5FBEBDCB383DC481D6120A7
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d3332203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     265447
IP address blocks:        2804:3448::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d1:50:39:cf:ae:4c:06:e5:fb:eb:dc:b3:83:dc:48:1d:61:20:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=7FB42D0AF850307753218BEF41390C463435079F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5e:c0:48:34:fc:e2:47:bf:f6:53:02:93:d9:
                    12:86:33:37:1b:06:7e:24:d0:09:33:94:b7:4f:ea:
                    a4:5b:ec:a2:ea:22:4c:3f:92:fc:c5:23:45:50:f9:
                    cb:2c:c4:1d:76:64:35:b7:70:a4:3c:b8:15:f0:85:
                    1f:27:b1:30:75:a6:2b:36:60:1c:a1:31:29:33:4f:
                    0d:ae:95:60:88:84:a4:96:67:a7:6a:6e:e4:18:58:
                    5f:1f:75:28:59:44:de:bc:bc:ea:13:20:4f:22:ab:
                    ac:ba:b0:43:40:c7:65:d4:38:6a:df:ba:fe:df:d9:
                    67:12:55:6d:2d:13:f2:9a:81:f2:87:75:40:6d:4f:
                    99:0e:f9:bc:36:f3:62:64:f5:d7:4c:fb:7f:37:ee:
                    f1:e5:cb:42:04:ac:9d:ca:4d:4a:69:84:3a:95:bb:
                    90:9c:c2:e3:02:74:80:6d:32:18:f1:73:d9:50:71:
                    17:d1:47:6c:3d:6c:6d:49:a5:31:8f:4e:b0:8a:1f:
                    53:c4:a3:ab:8c:56:91:10:e4:e0:1d:f1:67:a3:6d:
                    1f:a0:f4:b1:00:a8:31:95:4b:43:54:60:e1:4c:3d:
                    7e:e5:23:bd:6d:db:c3:19:5d:b6:13:ac:dc:55:02:
                    b1:d5:da:f4:8b:0d:fc:c1:c2:bd:15:4a:33:45:a3:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:2D:0A:F8:50:30:77:53:21:8B:EF:41:39:0C:46:34:35:07:9F
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:56:ee:a0:85:2d:66:9b:12:b8:18:ed:5a:63:75:0f:f7:
         d1:28:cf:3e:02:88:6b:8e:2e:1c:4c:5c:88:3c:9f:21:2f:f1:
         84:4d:6d:0c:0d:91:d8:b7:07:75:e6:94:07:6a:27:c0:dd:fd:
         eb:21:44:10:0b:d0:ba:9c:8a:f4:bb:a9:31:18:c1:57:6b:44:
         f6:98:24:dd:5d:36:cf:40:6b:3c:00:4d:a8:d4:4e:72:87:c3:
         6c:cc:8d:b6:d4:b2:17:cc:b1:66:67:28:10:e1:ec:b8:89:76:
         78:ff:7e:4e:bf:40:80:c0:00:ae:66:5d:30:a7:cd:6b:49:f3:
         63:26:58:c4:e5:4a:b9:f4:6b:f8:69:ac:cd:da:57:d8:60:87:
         71:8e:12:07:44:9d:34:6f:14:80:20:25:10:79:b3:e3:4e:c9:
         28:ee:5b:81:91:e9:33:4c:d4:07:26:b0:60:53:3f:1d:f3:29:
         c3:a1:ce:58:91:ed:1e:4f:c1:61:d2:38:a7:1f:7e:01:b2:15:
         83:d8:d3:e2:e1:78:5b:af:cf:3f:6f:62:bf:26:15:7b:09:48:
         76:ec:04:21:a5:90:d1:53:5f:23:93:c7:b0:cb:75:b7:04:00:
         f9:b3:bc:f9:e7:5c:c2:1b:a8:53:04:2d:fa:15:e5:67:91:a0:
         cb:94:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org