Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa
File:                     323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier:          pRDg0KFbgszokThD9+O9apjuBVDNhpz1cWIalF4vBfI=
Subject key identifier:   53:0A:BD:76:5D:66:5C:CD:FB:38:06:9B:10:3E:F4:73:CD:D5:7B:B0
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       0285E5EC019CCF7D6791D4BC9481E71692EE2AB2
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:14:58 +0000
ROA not before:           Thu 03 Nov 2022 17:09:58 +0000
ROA not after:            Thu 02 Nov 2023 17:14:58 +0000
asID:                     264450
IP address blocks:        2804:1edc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:85:e5:ec:01:9c:cf:7d:67:91:d4:bc:94:81:e7:16:92:ee:2a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:09:58 2022 GMT
            Not After : Nov  2 17:14:58 2023 GMT
        Subject: CN=530ABD765D665CCDFB38069B103EF473CDD57BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:a2:08:6b:9b:a9:d1:64:67:89:e3:8d:b6:
                    4a:8a:7e:a1:c5:9a:f2:9b:35:d6:7e:01:fe:5e:2f:
                    d1:a3:b7:cc:60:53:e8:10:f3:66:1f:70:9d:8f:de:
                    f7:be:b9:a9:2a:79:b6:68:21:56:72:a4:e6:b2:c4:
                    fd:d1:d6:24:15:4b:a9:a8:9b:81:9b:a3:a8:3f:00:
                    ed:1a:32:9d:09:be:c8:44:0a:f9:79:73:49:95:5b:
                    2b:cd:99:79:89:af:eb:da:e2:1f:75:56:d6:4d:ba:
                    31:91:74:78:87:61:3c:ef:34:eb:ea:a1:a1:3d:38:
                    ad:68:89:db:0c:d6:6a:37:32:f6:3b:f4:72:71:3b:
                    a9:ed:5a:60:e5:3b:9d:fe:b1:7c:25:b4:4f:91:6b:
                    ab:6c:69:ba:af:2c:e4:11:63:8f:11:d7:83:3c:05:
                    bd:49:08:9d:0f:d8:63:d7:2e:1d:55:13:78:95:c7:
                    eb:99:fd:4c:4a:aa:66:d9:38:7f:13:13:22:a1:fd:
                    3b:d1:c3:ec:4d:15:a8:df:ed:12:26:82:e5:9d:67:
                    a7:b6:dc:1b:da:ed:ab:90:b9:55:24:57:73:d0:6e:
                    8d:ee:ba:9a:b7:da:cd:2a:12:a9:df:fc:0d:f1:be:
                    0c:eb:72:8d:be:dc:fc:31:da:82:d1:19:dc:eb:32:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:BD:76:5D:66:5C:CD:FB:38:06:9B:10:3E:F4:73:CD:D5:7B:B0
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:82:0d:63:ba:fe:c8:21:ca:b9:6a:61:96:80:48:6d:0f:34:
         f5:ca:0c:f2:89:90:e8:c8:c0:11:70:0b:1b:6b:64:50:51:ec:
         1b:a9:ce:17:f3:95:62:73:e2:4b:31:d9:0b:fe:5b:92:09:b7:
         c0:b2:43:fe:94:55:5c:b9:5b:23:30:ae:1e:17:8c:ed:55:d9:
         b8:32:6e:f8:d5:c2:2e:fa:74:e2:87:dc:e4:b0:56:31:9f:8b:
         66:fd:df:ba:de:e8:19:14:fa:52:07:a7:21:07:bc:ca:8c:ae:
         74:12:41:7a:74:af:a6:e6:59:e2:23:79:ec:5a:c4:2f:3c:e1:
         d2:1c:79:29:28:69:6c:ab:a4:ac:a2:05:81:4c:a0:34:96:ee:
         8b:d1:0a:52:82:a4:2d:ad:e6:dc:96:63:3b:58:82:83:1d:73:
         eb:8b:6e:96:c0:1d:c1:97:a6:87:d7:91:19:f8:3f:68:90:18:
         69:c6:f2:50:83:df:43:5d:c1:70:c3:5d:b9:9e:ff:b3:7a:87:
         5e:af:74:c9:e5:a8:35:59:7e:6c:25:ff:05:b6:5e:e3:45:c7:
         bb:5a:e8:c3:7f:d2:71:d7:69:47:b8:35:8b:b6:dd:e2:db:f4:
         ab:1c:40:80:ac:12:54:d4:38:d5:a2:19:8f:de:b2:84:5a:3f:
         9f:0f:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org