Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa
File:                     323830343a313936633a3a2f33322d3438203d3e203631373934.roa (raw, json)
Hash identifier:          xknci+ILhwn/Ya9m6SvlHWAe+DNLXddRuas8a3mJP5s=
Subject key identifier:   37:33:B2:15:38:BE:54:DD:DE:20:49:CE:DE:C8:13:56:A3:43:C9:4D
Certificate issuer:       /CN=DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496
Certificate serial:       445F782CB3DF72A1087B0A303822268A1C0524A6
Authority key identifier: DA:0F:D3:FE:50:2E:3E:A1:9C:7F:7A:BF:80:BA:C7:B3:94:CD:F4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa
Signing time:             Mon 16 Oct 2023 11:14:19 +0000
ROA not before:           Mon 16 Oct 2023 11:09:19 +0000
ROA not after:            Mon 14 Oct 2024 11:14:19 +0000
asID:                     61794
IP address blocks:        2804:196c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5f:78:2c:b3:df:72:a1:08:7b:0a:30:38:22:26:8a:1c:05:24:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496
        Validity
            Not Before: Oct 16 11:09:19 2023 GMT
            Not After : Oct 14 11:14:19 2024 GMT
        Subject: CN=3733B21538BE54DDDE2049CEDEC81356A343C94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:8c:62:1c:53:da:2e:b3:92:62:32:1c:12:
                    0d:d1:5b:72:69:53:ba:79:26:6b:55:54:eb:10:db:
                    6b:bc:12:a9:16:72:d4:6a:b0:7e:bb:18:83:33:9c:
                    b6:fa:62:42:31:46:21:1d:68:05:e4:89:75:c1:c2:
                    39:90:f3:fd:0a:9f:3d:29:fe:4d:be:3e:e0:8f:0d:
                    c7:77:a3:ab:16:c3:f5:76:3c:42:50:1a:58:f8:6d:
                    80:78:8f:a3:74:ee:f8:dc:9b:12:9c:f3:33:30:c7:
                    11:7e:b7:71:f4:16:c8:81:0a:71:4a:cd:27:7c:68:
                    b3:67:a5:41:36:be:9d:da:2d:8f:93:dc:b0:35:91:
                    aa:7e:d1:57:87:45:0a:d2:0e:db:21:43:20:ac:df:
                    02:a6:e5:a7:f1:6c:ba:23:d3:12:46:29:5e:e9:77:
                    db:06:68:f1:73:b9:76:cf:d1:b9:63:e7:cd:8e:30:
                    a0:fc:0e:64:76:27:19:ac:e5:5c:83:59:5b:b8:05:
                    0d:68:b7:8f:4e:a3:b7:e6:65:fa:a9:a9:66:d7:4d:
                    ff:65:17:ba:8c:43:17:36:d2:12:49:64:05:3c:31:
                    4a:ce:28:12:8c:6d:18:56:23:8a:cc:d8:61:2e:71:
                    db:5c:61:0b:58:8c:3e:34:9d:f8:35:c4:fe:f3:15:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:33:B2:15:38:BE:54:DD:DE:20:49:CE:DE:C8:13:56:A3:43:C9:4D
            X509v3 Authority Key Identifier:
                keyid:DA:0F:D3:FE:50:2E:3E:A1:9C:7F:7A:BF:80:BA:C7:B3:94:CD:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:196c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:66:68:5b:5d:bd:7a:3f:37:72:02:0b:54:d1:4d:50:06:5c:
         5d:0f:14:cd:44:e4:ab:3d:b4:39:4f:e6:8f:5f:27:fd:42:ec:
         8c:38:e0:66:3d:dd:cc:b7:01:6e:56:d8:91:5b:86:3d:c1:53:
         a5:4f:1f:90:03:69:1b:4e:71:48:d9:62:d5:d9:af:25:6f:32:
         52:32:2e:d6:f7:d9:06:59:c8:6f:47:ff:28:4e:8b:99:bf:c5:
         11:69:cd:7f:a6:c4:5e:fd:4a:d7:36:aa:a2:ef:14:46:08:08:
         6b:7a:26:a5:eb:a2:6e:1c:bf:27:3a:f9:27:ba:70:7d:cf:fc:
         ac:f2:0b:66:bc:ce:ce:20:93:06:b7:d1:1f:f7:c2:ab:86:76:
         f3:4c:4e:8b:26:31:38:0e:db:47:a6:8d:1e:ca:ed:20:cf:e6:
         57:29:50:91:f0:66:e8:83:eb:c6:52:65:34:99:2d:be:61:69:
         63:07:e3:76:fd:eb:4f:17:3e:33:48:65:da:24:71:b7:6d:e1:
         c1:f5:f4:5c:19:90:d4:40:ab:5e:46:02:c7:d5:3c:75:0b:0d:
         ee:40:2c:cb:71:a1:37:91:9c:7c:ee:b0:55:6c:13:6d:9f:9f:
         42:c0:6f:6a:a7:1a:f0:5a:c3:8e:ff:96:20:47:2b:f0:c8:7c:
         64:4f:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org