Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a3a2f33362d3336203d3e20323636333132.roa
File:                     323830343a333565303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier:          o+xPKilwazzIj4FLjZ7NUCSsjmk3fJMSkrWTxwHY8nc=
Subject key identifier:   22:0D:5B:34:62:22:41:0E:BB:AA:D6:08:54:AC:DB:DC:76:5E:F1:08
Certificate issuer:       /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial:       73D27661105257308AECF4FDE4B0807958270506
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a3a2f33362d3336203d3e20323636333132.roa
Signing time:             Thu 07 Dec 2023 19:14:39 +0000
ROA not before:           Thu 07 Dec 2023 19:09:39 +0000
ROA not after:            Thu 05 Dec 2024 19:14:39 +0000
asID:                     266312
IP address blocks:        2804:35e0::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d2:76:61:10:52:57:30:8a:ec:f4:fd:e4:b0:80:79:58:27:05:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Validity
            Not Before: Dec  7 19:09:39 2023 GMT
            Not After : Dec  5 19:14:39 2024 GMT
        Subject: CN=220D5B346222410EBBAAD60854ACDBDC765EF108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:33:f9:e8:b0:6a:c1:52:57:28:b4:7e:74:
                    29:62:24:31:95:c9:d1:18:be:25:2b:81:1a:16:8a:
                    f3:01:a6:ea:d2:77:67:58:c7:52:49:9b:6b:29:8e:
                    b2:7b:f3:c9:31:7e:95:0c:ed:19:51:41:e9:e7:51:
                    41:29:3a:34:88:5a:ed:dc:b2:8d:c8:f7:36:c8:a1:
                    ad:26:0f:c9:b1:14:24:a9:df:b0:cf:32:43:45:99:
                    93:aa:3e:c0:b9:02:92:80:d9:8a:a6:e1:b8:cd:fa:
                    79:90:a9:19:ce:4f:27:f7:19:10:4e:1d:92:1b:4b:
                    f4:6f:d2:15:40:66:08:56:29:ec:57:98:f4:e9:80:
                    ec:26:6b:c8:58:f4:64:cf:6b:1d:55:37:96:c5:20:
                    a1:1f:cf:b9:1e:55:2d:b7:fc:bc:cf:9f:ca:04:40:
                    60:42:4c:c4:67:a4:09:c4:39:dc:75:64:b1:68:eb:
                    47:65:04:2b:df:bf:eb:54:c5:6c:7e:a4:83:9a:21:
                    2a:16:8a:23:3b:5d:9b:d8:2f:86:09:94:d9:0e:78:
                    e0:a7:1c:1f:30:05:8a:da:23:fd:50:bf:fa:f2:e9:
                    a1:70:1a:46:f7:d0:9b:8f:ac:ae:5b:9e:f2:6d:34:
                    1b:6b:f8:e8:7e:6a:76:87:ec:2f:b9:50:23:88:82:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:5B:34:62:22:41:0E:BB:AA:D6:08:54:AC:DB:DC:76:5E:F1:08
            X509v3 Authority Key Identifier:
                keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a3a2f33362d3336203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:27:00:b1:26:2f:dd:b8:2f:a6:72:2e:42:c7:84:d5:de:35:
         85:82:3f:7e:86:99:b9:b7:95:d2:ce:9e:1c:6e:44:1a:71:16:
         33:59:b7:30:76:98:81:fa:ca:1e:db:a1:fa:e8:2c:0e:79:3e:
         c3:d0:70:22:d6:e9:95:ab:77:09:ce:16:21:f1:a2:4d:28:e1:
         5f:cc:65:6c:9e:ef:3f:33:93:9c:5a:c8:b4:5b:64:f1:2a:19:
         5b:e6:7e:71:1f:18:6d:d9:66:8f:8f:b6:5c:83:45:3b:01:be:
         33:6a:2c:55:8f:65:c1:25:64:32:e7:15:55:72:75:22:2b:4c:
         48:7d:f8:8b:4d:3c:19:a4:c8:fd:0a:b8:28:53:ae:51:97:97:
         41:56:4d:80:65:dc:72:ee:a2:94:6b:0a:bf:fa:1b:a6:65:6d:
         a7:52:43:68:02:d5:0d:e8:41:8c:13:42:9a:c9:0b:e2:aa:d4:
         a9:3e:88:97:8a:26:a0:d2:55:43:d2:96:7a:94:ac:d3:ea:9b:
         85:9a:0b:44:fd:49:af:62:8b:1e:bd:46:72:91:ee:02:95:49:
         3b:e0:04:3e:1a:c2:55:01:6a:a7:1f:1a:17:1c:2c:16:99:07:
         29:b8:61:f1:64:5e:c8:cf:e9:38:bc:d8:c8:b8:1e:69:0f:c6:
         e4:f3:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org