Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/323830343a6330303a3a2f33322d3438203d3e203532363535.roa
File:                     323830343a6330303a3a2f33322d3438203d3e203532363535.roa (raw, json)
Hash identifier:          wbuKhsMawSIDeVcVubU4Y7pffWJ899mPqdjfouHoKEk=
Subject key identifier:   69:3C:EA:90:79:2A:86:6D:19:05:39:A3:42:F6:BB:F5:96:16:BF:68
Certificate issuer:       /CN=2DD79814894469B25F238E6DE3A66C520D4B68C1
Certificate serial:       5612B4AD87BC979631EA37242BDF7B61C8790387
Authority key identifier: 2D:D7:98:14:89:44:69:B2:5F:23:8E:6D:E3:A6:6C:52:0D:4B:68:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/323830343a6330303a3a2f33322d3438203d3e203532363535.roa
Signing time:             Wed 10 Apr 2024 13:27:20 +0000
ROA not before:           Wed 10 Apr 2024 13:22:20 +0000
ROA not after:            Wed 09 Apr 2025 13:27:20 +0000
asID:                     52655
IP address blocks:        2804:c00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:b4:ad:87:bc:97:96:31:ea:37:24:2b:df:7b:61:c8:79:03:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD79814894469B25F238E6DE3A66C520D4B68C1
        Validity
            Not Before: Apr 10 13:22:20 2024 GMT
            Not After : Apr  9 13:27:20 2025 GMT
        Subject: CN=693CEA90792A866D190539A342F6BBF59616BF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:09:94:14:7f:23:fc:6f:26:41:26:92:1c:
                    e2:fd:0f:6b:d2:f1:78:14:85:03:45:c0:e8:28:fb:
                    68:43:f4:44:38:f9:80:1e:d9:68:4c:b5:5a:1b:68:
                    48:85:46:84:48:fd:23:10:c7:78:9e:d9:d1:5e:b8:
                    06:12:c2:6c:82:63:7b:5e:38:85:fc:75:d3:35:b3:
                    a6:f3:38:1a:be:eb:d4:db:27:34:d9:b9:4e:6f:2f:
                    9f:9b:96:34:f0:08:f6:a2:b7:4c:e7:39:eb:87:ab:
                    41:7b:ce:4e:c9:dc:a6:64:67:1e:a4:e2:c6:0c:87:
                    11:15:38:4c:a7:f2:ad:50:41:cc:44:e1:81:08:ca:
                    01:81:e8:51:65:13:cf:24:73:7f:d1:f0:6a:78:bd:
                    74:6b:5c:5c:04:90:ab:af:d6:9e:c1:36:6b:3c:35:
                    05:15:fa:eb:76:03:45:62:cb:11:e2:a5:ec:e7:2a:
                    5b:9b:84:5e:dd:b9:4f:b4:4c:92:9f:7b:d0:75:a1:
                    45:b3:55:40:3f:60:74:f7:32:17:01:89:d7:ba:7f:
                    fb:b6:9f:43:5a:0b:5c:49:ef:4e:50:aa:35:d9:13:
                    62:7d:22:a6:f6:06:65:e0:ed:a9:39:13:9d:89:66:
                    5a:4f:70:a0:1a:09:9e:1d:d7:1b:47:df:52:5b:05:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:EA:90:79:2A:86:6D:19:05:39:A3:42:F6:BB:F5:96:16:BF:68
            X509v3 Authority Key Identifier:
                keyid:2D:D7:98:14:89:44:69:B2:5F:23:8E:6D:E3:A6:6C:52:0D:4B:68:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/323830343a6330303a3a2f33322d3438203d3e203532363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:ad:a3:f2:ce:ab:8d:1d:d4:f6:36:ea:ab:0c:21:97:62:
         b3:61:1c:ec:5f:72:e3:4e:61:38:52:cd:28:4a:ee:0a:85:75:
         3f:c8:27:4e:85:16:43:04:54:f4:05:32:7e:1a:10:0f:26:11:
         9c:6b:91:72:49:50:62:c2:0f:b1:7a:64:d2:88:e2:16:1f:27:
         06:0a:56:79:0a:ee:a0:49:60:7b:f9:dd:21:62:15:08:ec:15:
         10:46:aa:d2:7a:26:6b:b5:0a:5e:54:21:32:2b:59:ad:fc:5f:
         e7:83:57:da:fa:ba:28:44:9d:31:42:70:47:95:d5:f4:80:f9:
         64:0e:fe:cb:83:10:1e:63:37:2b:0e:0b:32:26:2d:91:63:49:
         09:39:49:24:ec:a7:b3:f9:25:d1:c8:79:89:9f:ce:8f:e6:bb:
         20:5a:80:82:7c:e5:0c:3c:13:51:a5:bf:c2:6c:6e:08:58:04:
         02:4a:6d:6b:11:a0:0b:dc:8f:c0:8f:7f:55:60:2a:2b:6a:15:
         9e:e4:80:50:e2:3a:dd:95:af:28:38:ed:89:fb:30:58:04:27:
         4d:65:f6:fa:7e:12:32:40:cd:55:15:2d:37:1f:0e:84:eb:5c:
         39:c8:54:e1:f1:62:46:75:53:08:5c:e8:1d:14:33:43:79:13:
         71:dd:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org