Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/323830343a383031383a373030303a3a2f33362d3336203d3e20323731323533.roa
File:                     323830343a383031383a373030303a3a2f33362d3336203d3e20323731323533.roa (raw, json)
Hash identifier:          uSdGNrdd60RnlvNLFn8jbm7XVJGmLdfsQfvrI5I9OKQ=
Subject key identifier:   54:60:99:EF:3F:75:EC:D6:2F:BD:B5:09:FF:7F:90:EA:B0:E3:25:E3
Certificate issuer:       /CN=67B2664D2E6E96D73A15D705B531D2A7386AF888
Certificate serial:       08206C06447CF63159F343DEC37FD0109E9E938E
Authority key identifier: 67:B2:66:4D:2E:6E:96:D7:3A:15:D7:05:B5:31:D2:A7:38:6A:F8:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/323830343a383031383a373030303a3a2f33362d3336203d3e20323731323533.roa
Signing time:             Mon 11 Sep 2023 19:05:30 +0000
ROA not before:           Mon 11 Sep 2023 19:00:30 +0000
ROA not after:            Mon 09 Sep 2024 19:05:30 +0000
asID:                     271253
IP address blocks:        2804:8018:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:20:6c:06:44:7c:f6:31:59:f3:43:de:c3:7f:d0:10:9e:9e:93:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B2664D2E6E96D73A15D705B531D2A7386AF888
        Validity
            Not Before: Sep 11 19:00:30 2023 GMT
            Not After : Sep  9 19:05:30 2024 GMT
        Subject: CN=546099EF3F75ECD62FBDB509FF7F90EAB0E325E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:0f:42:52:57:8b:9b:e4:20:cb:ba:ac:da:
                    33:9b:69:b9:49:db:7e:ed:77:5b:92:0d:4b:3d:14:
                    47:09:d4:36:88:e0:03:88:46:34:25:13:1c:9b:7b:
                    4a:35:b0:0a:55:3c:bb:1f:c8:5b:dc:d8:23:03:c7:
                    90:90:e7:2b:fc:c4:cb:d7:78:8d:c7:0f:37:af:a1:
                    44:14:b2:91:cb:75:bd:d1:f0:3f:c3:1b:93:90:e8:
                    74:c0:54:7d:a4:1b:ad:d5:78:6e:d9:20:00:ce:4e:
                    79:5e:9e:2b:a7:7e:f1:fe:27:89:4d:67:b3:9c:e7:
                    68:18:db:32:92:fe:ff:67:05:4b:93:f5:df:00:33:
                    f9:99:11:f7:83:b7:8d:ab:18:48:f5:93:f2:e8:bb:
                    d2:49:ab:7d:1a:ba:c8:b6:57:3f:a9:ec:82:03:e4:
                    d9:94:e0:ee:c9:fd:2f:30:0c:32:07:b6:93:35:06:
                    0d:2f:d4:41:16:d7:47:82:8f:67:3c:19:22:e8:68:
                    f3:e3:86:d9:ff:6e:07:3c:30:4a:ee:d0:e2:f4:ca:
                    c2:c7:71:5f:a8:b9:12:5a:80:0c:dd:24:91:ac:3c:
                    89:21:99:1f:da:96:93:fe:7b:7a:b8:57:b0:63:9b:
                    52:c1:77:47:e4:48:5e:85:5f:24:1e:13:9d:d5:d9:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:99:EF:3F:75:EC:D6:2F:BD:B5:09:FF:7F:90:EA:B0:E3:25:E3
            X509v3 Authority Key Identifier:
                keyid:67:B2:66:4D:2E:6E:96:D7:3A:15:D7:05:B5:31:D2:A7:38:6A:F8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/323830343a383031383a373030303a3a2f33362d3336203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8018:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:c7:6e:c2:a8:3a:32:93:cb:75:aa:92:2c:2f:88:2d:78:
         85:1e:c4:3c:1e:2d:4e:45:da:7f:de:cf:a3:29:6c:c0:f3:e0:
         29:8e:d0:7e:06:a4:50:82:f2:41:d1:c3:17:43:33:23:79:83:
         b6:1d:b6:59:35:03:c0:74:fb:04:75:bd:d5:01:05:08:9b:d1:
         29:52:d3:62:17:73:d0:b0:d9:c6:9d:92:ef:5e:c2:b4:e7:a9:
         1b:63:e1:50:c4:6a:a8:ce:d4:47:74:71:cd:f8:1c:d3:16:25:
         17:ba:00:e8:65:50:bc:40:f9:d8:27:cf:bc:85:c7:ae:2e:63:
         a9:5d:3d:d0:7c:63:c3:24:cf:9e:36:bf:35:4b:40:04:a8:c6:
         3f:ab:76:92:ec:09:b1:fc:21:8c:40:f6:57:d9:0a:83:ba:d1:
         43:31:72:fa:49:6d:7a:c3:b3:4e:c3:97:5b:5e:39:6e:c6:92:
         33:d0:d9:69:84:c3:f6:e9:d3:41:88:2c:7b:47:8e:50:9c:5d:
         70:0f:69:46:bc:58:2b:15:f1:73:0f:81:82:b4:96:38:a7:a2:
         04:0c:5b:5e:8e:ad:b8:6b:15:74:94:6d:61:c3:9f:33:4c:e9:
         72:ed:b0:85:30:ef:f6:7e:57:31:88:89:25:0e:55:bc:24:1c:
         9f:5b:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org