Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/323830343a363032383a3a2f33332d3333203d3e20323639313439.roa
File:                     323830343a363032383a3a2f33332d3333203d3e20323639313439.roa (raw, json)
Hash identifier:          tB0FCsnSzbOg8Vk9TacTSFAuCu5kQWxW5aQ+D65anHo=
Subject key identifier:   B7:27:8A:41:D9:22:77:55:7E:FA:92:3D:2C:CC:AD:01:60:2F:50:67
Certificate issuer:       /CN=DC49838DC0E82146CA3629580ACAA15681626498
Certificate serial:       049123CC7F2CC6D44EBC40C00EEDFAEEAD5CA115
Authority key identifier: DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/323830343a363032383a3a2f33332d3333203d3e20323639313439.roa
Signing time:             Fri 17 Jun 2022 14:02:01 +0000
ROA not before:           Fri 17 Jun 2022 13:57:01 +0000
ROA not after:            Fri 16 Jun 2023 14:02:01 +0000
asID:                     269149
IP address blocks:        2804:6028::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:91:23:cc:7f:2c:c6:d4:4e:bc:40:c0:0e:ed:fa:ee:ad:5c:a1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC49838DC0E82146CA3629580ACAA15681626498
        Validity
            Not Before: Jun 17 13:57:01 2022 GMT
            Not After : Jun 16 14:02:01 2023 GMT
        Subject: CN=B7278A41D92277557EFA923D2CCCAD01602F5067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:51:5a:03:6d:9a:f3:d5:5e:92:01:77:d7:
                    eb:de:75:13:db:6e:2f:da:e6:b6:67:d3:8b:40:d2:
                    4f:70:f0:77:2a:07:f0:55:3f:6c:52:fb:34:5c:73:
                    15:41:e6:c7:d0:7b:26:e1:b1:5f:98:0e:8e:15:e9:
                    38:e6:48:48:7e:aa:60:1b:9e:97:ad:fb:47:c6:e1:
                    09:4a:0b:43:02:6c:96:37:0d:57:e6:d0:53:ef:31:
                    ed:95:0d:12:c4:85:6b:c5:64:84:2c:32:ae:27:22:
                    98:de:37:6f:89:fc:b5:fe:13:33:83:1b:03:ae:c7:
                    04:cb:57:fe:7f:46:fd:13:88:1d:17:bc:bf:15:97:
                    78:4c:f6:24:a5:24:b9:a3:e8:7a:b7:6f:2e:f6:90:
                    29:4f:77:dc:e0:20:3a:f4:e1:c2:23:c9:20:f7:5e:
                    42:98:de:63:62:2d:24:34:d3:5d:4f:ea:7f:a8:13:
                    57:71:d2:61:19:c4:55:0f:a1:52:e1:e4:ba:b9:e9:
                    50:33:28:36:55:39:ea:9a:b8:85:e6:56:e5:30:ab:
                    7c:12:fd:d2:a9:70:73:80:8a:52:b0:fb:33:78:0e:
                    67:73:64:44:fa:4c:85:fd:71:fe:12:72:4c:8a:59:
                    40:43:ce:35:75:3d:a6:3c:22:43:90:66:3c:ba:b2:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:27:8A:41:D9:22:77:55:7E:FA:92:3D:2C:CC:AD:01:60:2F:50:67
            X509v3 Authority Key Identifier:
                keyid:DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/DC49838DC0E82146CA3629580ACAA15681626498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/323830343a363032383a3a2f33332d3333203d3e20323639313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6028::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:88:0a:df:66:fb:24:18:73:c6:62:eb:77:7b:e4:8d:48:
         f4:de:1c:09:b1:2a:7b:60:11:9b:fc:31:a5:50:26:9c:e6:05:
         02:6d:51:f0:90:e3:e2:44:a9:f8:47:58:12:7c:a1:93:6e:b3:
         04:72:06:ae:7f:84:2d:38:24:7c:a2:e5:59:90:9a:95:9a:65:
         a2:c1:0e:10:d8:30:6e:90:42:14:2d:fa:70:90:de:2a:85:79:
         c4:93:3e:56:2f:c7:bf:d7:63:0b:4b:81:8d:05:16:65:ae:80:
         00:a0:c3:41:d2:95:9e:95:64:11:94:7f:c8:ed:69:59:0b:3c:
         71:e0:4b:7e:f2:31:8d:ac:71:f0:1d:f5:c7:04:f7:23:16:f3:
         ae:85:dd:ce:61:d6:34:22:28:6d:6f:a4:8e:bb:03:c7:b1:77:
         30:bf:08:79:c8:50:0e:9d:17:b9:8c:a9:c3:cb:9c:29:da:07:
         ed:bd:f6:36:0b:9f:c1:d0:09:06:97:1f:7d:a6:a6:b5:3b:a6:
         d1:86:f5:e3:09:64:12:a1:e1:e3:9a:ab:4b:dc:2a:99:d5:2f:
         22:b5:f9:76:2d:c5:a4:72:fa:b9:b0:93:ef:d6:11:d4:29:1a:
         4b:64:d7:83:e6:f5:9b:28:30:55:4c:2b:90:51:3a:43:f3:8e:
         ed:0d:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org