Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a666630303a3a2f34302d3430203d3e20323636333132.roa
File:                     323830343a333565303a666630303a3a2f34302d3430203d3e20323636333132.roa (raw, json)
Hash identifier:          tFSVJ15p7oBbqqqb1afHdXQHzMnakSM9gvegyuObquE=
Subject key identifier:   27:C0:11:0C:35:C5:70:E8:E6:4A:D2:4C:53:B7:50:80:13:45:CB:C5
Certificate issuer:       /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial:       320E166C2CBC7FB80E2DE88FE466978031975471
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a666630303a3a2f34302d3430203d3e20323636333132.roa
Signing time:             Sat 21 Oct 2023 18:49:54 +0000
ROA not before:           Sat 21 Oct 2023 18:44:54 +0000
ROA not after:            Sat 19 Oct 2024 18:49:54 +0000
asID:                     266312
IP address blocks:        2804:35e0:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0e:16:6c:2c:bc:7f:b8:0e:2d:e8:8f:e4:66:97:80:31:97:54:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Validity
            Not Before: Oct 21 18:44:54 2023 GMT
            Not After : Oct 19 18:49:54 2024 GMT
        Subject: CN=27C0110C35C570E8E64AD24C53B750801345CBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:a0:da:9d:26:af:2b:4b:6f:9b:f9:17:0c:
                    ca:b5:c2:70:f3:f2:ed:38:cc:9b:7b:17:e9:f0:ed:
                    3a:bc:ba:65:08:1a:72:db:41:6a:6f:0c:eb:3f:ea:
                    31:3d:25:d8:9b:42:45:42:a1:cd:3e:bb:8e:ea:54:
                    3f:14:60:7e:2b:6d:d5:e5:02:08:e7:e9:76:1a:18:
                    aa:38:83:ce:45:c6:41:cb:11:4c:4d:3c:b2:1d:c4:
                    e8:6d:58:c1:1b:dd:28:b9:ce:f0:0f:93:b1:e3:ab:
                    28:78:2a:b6:bf:e6:de:37:df:c9:eb:bb:ff:a7:82:
                    43:b4:c8:6b:1d:be:8b:60:47:f4:92:43:66:94:05:
                    91:aa:77:af:fe:66:d4:29:0f:7c:fc:3f:71:28:c6:
                    44:52:69:32:87:ef:73:6a:fa:93:8c:86:b2:72:b7:
                    43:48:f8:22:b7:1a:4a:fa:e5:b5:58:05:cf:0c:77:
                    66:dc:a8:7b:56:8a:f0:88:e3:42:d0:01:6c:87:c1:
                    ce:4c:c8:87:63:b1:20:af:4c:dd:34:b6:af:8e:d5:
                    0a:9f:be:9c:f5:ef:dd:39:d7:ed:03:7f:8e:a0:c0:
                    2a:ca:d9:a6:a9:63:a2:d0:86:bf:00:0a:b8:55:98:
                    43:51:13:e7:3d:87:f8:72:8e:d7:ed:be:55:8e:d2:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C0:11:0C:35:C5:70:E8:E6:4A:D2:4C:53:B7:50:80:13:45:CB:C5
            X509v3 Authority Key Identifier:
                keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/323830343a333565303a666630303a3a2f34302d3430203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:71:8a:52:a5:66:59:23:d8:69:b3:af:8a:5f:e9:26:c0:38:
         04:b6:12:f1:0e:87:58:63:42:53:e9:76:f7:73:c3:86:42:45:
         dc:3c:ed:9c:1f:09:18:94:55:ed:f7:aa:f8:cb:14:a6:f1:94:
         75:a3:57:6e:a2:e4:65:23:2a:34:e5:92:d8:31:b7:ce:d5:c4:
         50:78:a6:df:77:38:ed:28:c0:90:42:d6:78:5e:98:d2:f2:4c:
         95:39:c2:68:10:b3:88:89:4a:5b:0b:18:2b:89:33:4a:7a:bf:
         e5:a8:da:a1:29:52:ac:fa:d6:df:92:2f:95:18:8f:40:df:31:
         06:0b:b4:69:69:43:2c:1a:26:58:e9:a6:40:7c:b4:a6:c7:fb:
         2f:ec:29:b4:66:6e:42:fb:d3:6c:1f:89:55:17:fb:7d:c4:ea:
         78:72:37:20:6a:91:c3:e9:f0:32:04:cc:9f:c6:d2:fa:8f:8e:
         30:2e:76:d4:df:38:80:d0:3e:3f:77:2d:61:f0:e2:ae:a4:93:
         8d:b3:4b:0f:00:70:d3:e0:0d:35:25:2b:ca:a9:91:b7:12:27:
         d4:6d:8d:26:83:0b:48:cc:1a:e9:5a:3c:2b:61:63:aa:5c:a4:
         30:2a:b6:79:74:37:8b:f7:a3:05:89:3c:94:3f:6d:e6:8c:4e:
         5c:47:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org