Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
File:                     323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier:          1lzgWoH2uUfTgMXFjLvGhVQ7AkpDIpUN1doHD5hybeI=
Subject key identifier:   42:B7:38:3C:1B:03:B2:75:67:A4:27:A0:DD:00:45:FF:F5:BB:FC:58
Certificate issuer:       /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial:       5512227B9286ADF950F7EF5A772E5EA102A2055D
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
Signing time:             Thu 07 Dec 2023 20:14:41 +0000
ROA not before:           Thu 07 Dec 2023 20:09:41 +0000
ROA not after:            Thu 05 Dec 2024 20:14:41 +0000
asID:                     266312
IP address blocks:        2804:35e0:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:12:22:7b:92:86:ad:f9:50:f7:ef:5a:77:2e:5e:a1:02:a2:05:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Validity
            Not Before: Dec  7 20:09:41 2023 GMT
            Not After : Dec  5 20:14:41 2024 GMT
        Subject: CN=42B7383C1B03B27567A427A0DD0045FFF5BBFC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:2a:f6:ea:ac:98:e3:45:84:8f:7c:1b:34:
                    ea:17:9c:07:1f:44:42:1d:70:45:35:82:99:d3:0c:
                    0f:73:5d:53:eb:15:87:a3:80:4a:50:50:aa:02:13:
                    c5:0a:08:ca:e3:b0:f6:10:ed:70:95:08:13:68:27:
                    65:3d:fd:91:d7:c5:17:ad:14:ff:3f:d1:d5:75:7b:
                    48:ed:c4:04:d2:a7:2a:de:f4:01:79:e0:1f:2b:44:
                    d2:e5:6c:6b:69:d0:a1:3f:36:a1:57:e3:b9:4b:26:
                    b6:1c:a5:e3:4c:2f:c4:07:9a:f8:07:78:c4:14:d9:
                    b2:b4:99:cc:8d:2f:be:72:ff:55:c1:97:84:e7:bd:
                    c2:e3:65:3f:89:38:65:af:29:76:65:91:23:34:37:
                    9f:46:14:c6:b2:97:ab:bf:a5:5f:0a:6c:dc:83:02:
                    fe:54:cb:0f:35:9d:51:53:12:bf:2e:e9:f2:99:b4:
                    1b:4b:ea:89:f8:ff:ad:4f:a7:a4:c0:3b:f9:cd:6c:
                    23:2e:12:45:64:eb:ab:7c:58:52:8e:87:a5:10:c0:
                    21:3c:e2:50:36:37:9d:e5:c6:f6:59:a8:0e:16:4a:
                    3d:db:81:37:dd:83:70:7c:3d:37:0b:c7:43:8b:30:
                    0b:9b:e7:06:23:2e:73:a8:dc:16:5e:72:a7:93:6f:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:38:3C:1B:03:B2:75:67:A4:27:A0:DD:00:45:FF:F5:BB:FC:58
            X509v3 Authority Key Identifier:
                keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:44:7c:87:85:19:0f:1a:4c:de:0b:db:bb:f3:98:ec:ca:
         77:19:e0:89:c7:9e:8b:0d:c6:a5:94:39:9a:78:01:db:8d:d9:
         84:e9:8a:c8:59:0a:3a:9e:ea:ae:5f:fe:45:08:66:de:d1:4c:
         ce:c8:26:79:d8:f4:dc:13:21:72:89:1c:8f:69:db:41:9a:04:
         3b:f2:ec:dd:48:75:40:36:6f:0a:48:6a:02:4e:71:39:b6:23:
         a1:10:49:dc:86:44:f2:e4:1c:27:0e:82:66:46:d2:b4:fc:d4:
         72:85:1d:9c:48:53:f8:5d:17:d4:5e:f4:e0:95:e0:96:76:80:
         36:31:0b:0c:c1:2a:0f:93:f6:c9:4a:32:31:d9:e2:55:7b:9a:
         55:39:6a:d4:6b:2b:13:ee:9e:16:20:6e:aa:26:ea:b1:06:d8:
         3e:3b:dd:10:67:1c:0f:e7:89:0f:bb:4a:3a:13:8e:2d:b0:0a:
         7e:65:7d:aa:0f:5a:86:21:c3:4b:d7:b9:dc:f0:aa:2d:bb:ae:
         bb:7f:2b:39:3b:a8:66:17:3b:a9:7f:6b:e0:25:9a:12:2a:b1:
         d0:35:9d:90:d0:1b:70:96:84:ef:e7:cc:1d:42:81:1f:86:6f:
         c1:a5:8f:e7:60:bc:00:7a:63:37:9c:c7:5a:a1:ce:78:3c:bc:
         ea:8c:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org