Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/323830343a343933343a3a2f33322d3333203d3e20323637313730.roa
File:                     323830343a343933343a3a2f33322d3333203d3e20323637313730.roa (raw, json)
Hash identifier:          vZuJ3eoeKeHoZ4W0Ek5fEwLkoaMaBCAIgvpMhGQULd8=
Subject key identifier:   D9:05:89:48:A1:36:37:32:75:29:0D:4A:4B:F0:70:78:FA:29:09:4F
Certificate issuer:       /CN=0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F
Certificate serial:       0CE8947322B8B2C091D0BC5571416CBD22D45374
Authority key identifier: 0C:DD:D4:A5:7A:EA:2D:AE:E8:4C:7E:46:41:B7:D9:55:7C:15:28:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/323830343a343933343a3a2f33322d3333203d3e20323637313730.roa
Signing time:             Fri 11 Aug 2023 18:56:30 +0000
ROA not before:           Fri 11 Aug 2023 18:51:30 +0000
ROA not after:            Fri 09 Aug 2024 18:56:30 +0000
asID:                     267170
IP address blocks:        2804:4934::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e8:94:73:22:b8:b2:c0:91:d0:bc:55:71:41:6c:bd:22:d4:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F
        Validity
            Not Before: Aug 11 18:51:30 2023 GMT
            Not After : Aug  9 18:56:30 2024 GMT
        Subject: CN=D9058948A136373275290D4A4BF07078FA29094F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:6d:3b:ce:1c:bd:62:1e:1f:ba:d9:91:62:
                    03:1e:87:b5:5f:ee:2b:05:1b:9e:7e:9f:04:87:fe:
                    ae:9f:80:88:88:54:4e:6c:44:f0:8a:0b:5c:4c:1b:
                    02:0e:d1:ee:86:04:b5:40:75:d9:d4:71:0b:b9:f6:
                    77:0d:9c:20:9e:04:b7:7c:44:1a:c4:e0:54:26:10:
                    bc:19:5b:95:5c:2e:b9:54:a6:40:2d:da:4e:1e:8f:
                    f2:0c:8c:a6:96:df:ad:b3:e1:97:f3:94:bb:82:c4:
                    65:84:af:0d:f6:8c:4c:fe:22:4a:85:4d:62:fe:a1:
                    a8:d7:49:b7:10:5f:ab:ca:94:a1:62:53:5d:57:70:
                    b7:9f:71:9f:be:08:e7:7e:82:fc:c1:0f:dd:22:97:
                    0b:9e:1e:ab:af:87:98:b6:69:61:12:11:66:c3:2d:
                    64:ed:b6:f9:20:c0:49:3d:b1:5c:c0:84:e4:d7:d4:
                    18:7b:2d:23:fb:a1:d2:65:55:0f:65:2d:cb:01:5d:
                    a0:b3:34:c1:40:19:83:c9:b7:84:17:8c:72:3d:0f:
                    94:8f:f3:42:f1:e9:f5:24:1b:e8:27:5c:e8:9d:8e:
                    86:9b:cb:3d:de:5b:9e:fd:26:b8:56:4c:ef:28:12:
                    69:fa:3d:5a:b1:49:e1:53:1d:7e:7a:76:ba:51:b1:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:05:89:48:A1:36:37:32:75:29:0D:4A:4B:F0:70:78:FA:29:09:4F
            X509v3 Authority Key Identifier:
                keyid:0C:DD:D4:A5:7A:EA:2D:AE:E8:4C:7E:46:41:B7:D9:55:7C:15:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/323830343a343933343a3a2f33322d3333203d3e20323637313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4934::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:4a:93:fd:ff:00:a6:bf:30:02:cf:e9:28:8e:38:66:06:5c:
         11:85:25:5c:18:36:ee:03:e5:4e:38:2c:75:ff:2c:1b:83:ee:
         fd:28:a5:de:59:40:3c:b9:1a:5b:ec:64:d1:0f:2e:71:50:53:
         f2:ad:63:8a:c1:f1:0c:27:ea:a3:5e:12:be:97:be:98:db:64:
         da:40:2d:fd:35:e1:15:29:ed:b1:66:3f:40:81:08:49:df:ff:
         fb:45:e3:f4:ec:d5:db:26:70:ee:cc:98:34:e6:3e:8e:74:2a:
         0d:19:f9:95:d7:bf:41:84:8d:f2:e7:08:97:80:23:d2:59:19:
         09:93:bc:07:c5:2e:75:37:2d:a1:39:71:71:4b:2a:fa:7c:06:
         fa:92:01:84:99:36:10:77:80:bd:61:a7:10:46:5f:fa:f5:66:
         ef:98:6e:3f:5f:a4:f8:9c:0f:e6:cb:48:33:ec:e2:7f:8e:f2:
         a9:54:fe:ff:d9:d7:8f:a3:ae:7b:b1:93:32:31:da:bc:03:a1:
         1e:12:eb:d2:70:d7:10:7d:a6:7a:a1:3d:f1:5e:80:42:26:4b:
         2c:6c:ff:b1:ac:aa:94:28:87:fb:d6:ad:fc:05:3f:e2:22:4f:
         cb:13:2a:5d:e6:a9:6c:1c:03:19:86:67:b4:ca:f6:2c:89:4f:
         e6:00:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org