Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/323830343a343a3a2f33322d3334203d3e203238363637.roa
File:                     323830343a343a3a2f33322d3334203d3e203238363637.roa (raw, json)
Hash identifier:          34n5tCvW82hRzny01MRyQlViSDi30KHaVtnogeWPnw8=
Subject key identifier:   6E:ED:B7:D7:22:F2:B6:4F:E3:54:85:2F:77:14:92:D1:89:5A:11:23
Certificate issuer:       /CN=B10C2108505D2DAF88FAF73F54BDEF6BA03F484D
Certificate serial:       438D1FCEA727D0CB90EE591728B01384FC823524
Authority key identifier: B1:0C:21:08:50:5D:2D:AF:88:FA:F7:3F:54:BD:EF:6B:A0:3F:48:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10C2108505D2DAF88FAF73F54BDEF6BA03F484D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/323830343a343a3a2f33322d3334203d3e203238363637.roa
Signing time:             Sun 27 Nov 2022 21:00:00 +0000
ROA not before:           Sun 27 Nov 2022 20:55:00 +0000
ROA not after:            Sun 26 Nov 2023 21:00:00 +0000
asID:                     28667
IP address blocks:        2804:4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8d:1f:ce:a7:27:d0:cb:90:ee:59:17:28:b0:13:84:fc:82:35:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C2108505D2DAF88FAF73F54BDEF6BA03F484D
        Validity
            Not Before: Nov 27 20:55:00 2022 GMT
            Not After : Nov 26 21:00:00 2023 GMT
        Subject: CN=6EEDB7D722F2B64FE354852F771492D1895A1123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:d8:7a:1e:74:85:a8:27:1f:7f:96:d3:3c:
                    25:9b:d9:81:37:a2:42:78:fe:14:dc:06:f9:95:d4:
                    19:c3:f1:c6:9b:7d:59:ba:b4:83:51:b2:a8:64:bc:
                    4f:c7:5f:e9:f9:dd:05:de:3e:6b:f0:53:df:97:25:
                    a7:81:00:3c:b0:b6:17:55:4e:40:a0:d0:07:5c:8f:
                    ce:80:1a:a7:3b:b6:49:ef:bf:e2:00:12:6d:a0:60:
                    aa:d8:1d:b5:e0:3c:d8:7c:e8:84:f0:84:1b:a4:29:
                    98:77:2b:ed:69:06:ea:9a:06:c6:3b:0e:3f:35:a5:
                    32:e6:59:63:e6:12:f8:2c:31:5c:3a:49:6d:37:c2:
                    41:76:6c:af:3e:56:fd:4e:d4:2a:c2:c2:38:0c:69:
                    bc:87:a5:ab:7f:91:3f:96:11:07:ff:81:34:d4:47:
                    53:6a:ea:7a:c4:c8:95:fb:9a:0e:86:7b:e1:1c:7c:
                    ac:e9:4b:7e:00:fe:e5:71:91:03:08:87:37:35:da:
                    93:f5:73:98:08:65:5d:36:bb:9b:f5:a0:a9:b3:d4:
                    98:63:62:27:49:55:29:65:ee:d9:55:7c:cc:86:53:
                    2c:d7:70:86:de:db:6d:d5:e8:82:a3:cc:93:b0:8a:
                    f8:ff:66:ee:89:57:02:73:ef:a6:60:a0:e3:40:6f:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:B7:D7:22:F2:B6:4F:E3:54:85:2F:77:14:92:D1:89:5A:11:23
            X509v3 Authority Key Identifier:
                keyid:B1:0C:21:08:50:5D:2D:AF:88:FA:F7:3F:54:BD:EF:6B:A0:3F:48:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/B10C2108505D2DAF88FAF73F54BDEF6BA03F484D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10C2108505D2DAF88FAF73F54BDEF6BA03F484D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/323830343a343a3a2f33322d3334203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:3e:0d:6c:20:4d:d1:24:67:da:31:b2:2f:3b:b5:11:57:
         7a:d3:fa:a4:cd:0b:71:45:22:29:73:f6:bc:3c:8d:ec:9d:6c:
         b9:f4:28:4b:81:c5:77:0d:a0:4d:47:c8:44:c0:32:a6:04:47:
         4d:dc:53:d9:73:7f:cf:b7:72:57:8f:27:92:f6:5f:11:a6:3b:
         c9:30:41:db:05:d8:82:bf:17:3e:1a:be:cd:61:dc:41:12:05:
         9f:98:d9:71:86:3b:e1:21:43:90:70:ae:78:ad:6f:c5:f1:c0:
         33:81:4b:f4:2c:e3:a3:c4:55:ae:b7:42:e4:a3:1b:d3:ea:92:
         a5:78:6a:43:ab:9d:8e:d1:33:53:ed:29:07:40:ec:0d:51:af:
         fe:a0:18:30:f2:be:df:cb:5d:a7:fc:50:db:53:7b:25:df:9a:
         c8:55:24:0a:54:35:4c:6f:2e:9d:08:0b:af:1c:f3:a5:b8:c2:
         9b:37:82:b7:90:e5:2a:28:a6:ae:61:9d:0c:8f:17:33:66:a9:
         d0:06:f3:66:e9:5a:d0:4c:78:fa:05:ce:f0:60:b3:3f:e4:b2:
         16:08:c5:3d:84:d1:4f:bc:47:cf:27:47:97:9f:1e:5b:d3:0c:
         f4:06:06:a6:a9:4a:99:f2:ba:d6:0c:0d:f6:dc:30:80:60:9f:
         54:5d:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org