Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa
File:                     323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa (raw, json)
Hash identifier:          72BcAKVfwV5RegrpZdKX6vVxiT47k2pB8OD3EV0YaLQ=
Subject key identifier:   48:A0:55:A3:B4:B1:F2:14:11:3A:80:B3:F9:2F:E5:D3:6B:46:CA:0F
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       6F026A3AA32603E1D04BAC7792BBEB8CE760AEBD
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:14:41 +0000
ROA not before:           Thu 03 Nov 2022 17:09:41 +0000
ROA not after:            Thu 02 Nov 2023 17:14:41 +0000
asID:                     264450
IP address blocks:        2804:1edc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:6a:3a:a3:26:03:e1:d0:4b:ac:77:92:bb:eb:8c:e7:60:ae:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:09:41 2022 GMT
            Not After : Nov  2 17:14:41 2023 GMT
        Subject: CN=48A055A3B4B1F214113A80B3F92FE5D36B46CA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:68:ce:25:e8:ea:de:d8:39:dd:02:35:55:
                    93:19:1e:51:81:4e:eb:f7:7e:22:84:6c:f3:a8:be:
                    3d:33:05:72:25:18:ba:53:25:07:05:3d:7e:ad:1a:
                    e8:6c:c2:f8:4a:01:3d:eb:0f:df:ea:0d:08:22:4b:
                    70:d5:cd:e4:3b:3a:df:97:72:d9:44:ae:1b:22:e2:
                    62:08:9c:c6:05:b1:f4:2d:fe:af:e4:32:0a:87:fb:
                    7f:f9:3b:0b:85:0c:8b:2f:f1:f1:0d:1f:ee:34:1d:
                    76:db:b5:d7:87:15:d7:ec:3d:96:d2:98:e2:41:44:
                    7f:1a:f8:17:eb:ae:63:02:72:ab:1b:28:cf:bf:ca:
                    8f:e5:4c:81:ff:16:b8:6c:e5:88:b2:36:a2:81:ee:
                    4c:65:8e:98:5c:93:8f:24:a0:e0:19:9b:b8:72:cf:
                    16:8e:10:54:64:a5:36:03:ff:97:c0:eb:c0:04:1c:
                    3c:32:fb:ea:e3:e0:ad:d2:f0:7c:8f:21:b2:af:92:
                    1d:e4:66:83:da:c1:4a:e0:24:9e:d0:5c:9c:da:b6:
                    93:7c:bd:a8:9c:6c:c0:eb:2d:97:11:ea:ea:7d:68:
                    d6:61:f4:e3:78:c5:4f:a8:c4:29:0b:48:f6:b0:8f:
                    d2:00:f0:79:3e:0b:c4:24:77:38:e8:9e:93:71:f6:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:55:A3:B4:B1:F2:14:11:3A:80:B3:F9:2F:E5:D3:6B:46:CA:0F
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:fb:b1:55:31:8b:0e:1e:e3:dd:a6:a9:01:0a:b6:fa:2f:
         1f:89:f5:cd:ce:db:e8:24:fc:9a:d0:b0:1c:05:15:de:ab:d1:
         e6:69:ed:48:4a:a0:a4:06:b9:03:11:47:2c:9c:9d:0f:2f:6b:
         2c:89:15:84:a7:c3:f9:97:d8:ec:3c:82:08:c0:fc:b0:19:42:
         de:93:5b:54:1c:82:c7:00:20:02:0a:00:08:3b:66:4d:f2:54:
         d7:77:51:dc:ea:8f:a1:49:e0:bb:60:87:c5:aa:ec:a1:94:0b:
         7b:63:e8:53:56:e7:8f:52:f3:3e:75:c6:27:ed:32:1b:16:d4:
         b2:d7:42:11:a3:13:e0:24:39:f5:a2:77:ad:fd:75:ed:1a:7b:
         24:98:d7:4e:b8:07:3a:c7:6f:b7:35:41:eb:f9:89:3c:df:db:
         34:0d:ed:5d:9e:57:e9:23:1e:70:47:71:2a:d2:45:5b:b6:15:
         fc:18:c1:ac:26:65:7d:eb:3f:6f:fe:1e:6b:de:ab:6e:f6:d6:
         63:9b:8c:0a:6d:ac:dd:31:37:2b:2f:c6:39:bd:c8:78:82:3d:
         b6:8a:3d:0c:f9:dd:21:e5:9f:d2:75:65:b4:37:f2:ec:53:d8:
         3e:f6:d9:c4:34:46:a8:83:0c:b6:fb:4b:ec:0e:2b:5e:57:78:
         2f:55:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org