Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a393030303a3a2f34302d3430203d3e20323637353733.roa
File:                     323830343a343337633a393030303a3a2f34302d3430203d3e20323637353733.roa (raw, json)
Hash identifier:          j1B+2LJK3QqCdRbtvTMt8XAukpA9ZS2++cYiawYIOME=
Subject key identifier:   AD:98:D6:5C:63:E1:2A:DA:C7:AC:3D:E7:0A:C5:77:C9:2B:29:94:33
Certificate issuer:       /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial:       0C8DB3B32F65E6CB850D2F9B8A2278BF13326B01
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a393030303a3a2f34302d3430203d3e20323637353733.roa
Signing time:             Mon 15 May 2023 22:52:09 +0000
ROA not before:           Mon 15 May 2023 22:47:09 +0000
ROA not after:            Mon 13 May 2024 22:52:09 +0000
asID:                     267573
IP address blocks:        2804:437c:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8d:b3:b3:2f:65:e6:cb:85:0d:2f:9b:8a:22:78:bf:13:32:6b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Validity
            Not Before: May 15 22:47:09 2023 GMT
            Not After : May 13 22:52:09 2024 GMT
        Subject: CN=AD98D65C63E12ADAC7AC3DE70AC577C92B299433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:b0:b6:c9:2d:16:77:d4:da:a7:5f:ee:72:
                    0a:cd:37:b0:1c:d6:62:87:58:8d:c4:ff:38:b0:b1:
                    71:84:a6:3a:15:16:01:34:55:74:7a:d0:b2:5b:43:
                    d3:1e:f2:d0:49:2c:05:e5:45:c8:a6:01:24:46:28:
                    d1:4b:32:dc:6c:2b:7a:6e:ea:df:ce:78:f3:c7:f9:
                    b6:06:c7:4c:8d:dd:5d:7d:cd:02:16:5b:ab:78:72:
                    23:f6:63:86:77:2c:4b:d8:ed:b4:8e:c3:a3:89:25:
                    e4:88:52:33:96:ee:9d:07:25:dd:07:ca:04:b7:09:
                    0c:d3:64:e3:ad:2f:81:ed:d1:42:fc:bf:64:3c:84:
                    0b:9c:0c:db:11:60:de:4b:12:73:a6:95:dc:eb:37:
                    d1:3e:f5:1e:bb:7f:f4:82:38:60:4f:eb:04:a8:52:
                    5f:8e:e5:a1:ca:ff:34:a8:a5:9b:71:d2:92:90:ad:
                    2d:3a:d4:70:99:3b:05:59:5a:38:c1:12:44:25:b9:
                    79:89:d0:5c:9c:ef:2f:fc:e3:76:b0:b9:95:e7:40:
                    f0:7a:11:41:ed:3c:b9:bc:f4:ab:18:00:6b:cc:47:
                    32:08:ab:a0:26:02:28:92:a2:17:3d:8c:4c:fe:38:
                    c3:7b:14:3e:56:32:34:d6:c1:43:08:21:b2:97:d3:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:D6:5C:63:E1:2A:DA:C7:AC:3D:E7:0A:C5:77:C9:2B:29:94:33
            X509v3 Authority Key Identifier:
                keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a393030303a3a2f34302d3430203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:437c:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:6c:4c:05:1d:7c:ff:75:88:a2:c3:54:ee:0f:1b:f3:34:
         73:f1:d2:31:58:f4:3c:f9:f3:1b:ed:97:33:19:da:f7:43:c1:
         21:95:3e:44:a2:bb:99:41:01:c5:b4:5c:51:90:27:51:3f:12:
         a5:ad:ce:ee:47:89:a1:c9:f0:c9:85:ef:4a:e8:0d:f8:ac:17:
         3b:30:aa:7c:af:34:17:d7:02:e4:89:04:fd:55:b8:cd:d2:ca:
         5a:44:83:14:fd:fa:e9:1b:a7:3b:8c:bc:97:67:71:f9:07:13:
         03:c1:e1:70:90:e5:3d:91:42:0e:2f:11:bc:dc:d3:a0:ad:f7:
         e3:02:4c:ca:32:97:6a:30:58:64:6d:7b:6f:50:52:f0:67:e7:
         16:75:0e:45:5a:86:84:0b:47:0f:49:98:08:61:00:4b:b3:56:
         9f:ee:34:96:a8:e5:80:f6:aa:25:92:29:9e:50:24:5e:a6:a9:
         85:20:a9:5c:2c:8a:34:73:b1:6f:1f:8e:57:20:f4:86:23:8d:
         06:e6:8d:5a:99:b2:b0:3b:7a:67:33:67:2e:fa:82:69:f4:9c:
         cf:35:23:ef:18:3c:8f:7b:3a:c6:18:ea:34:8a:09:e6:9f:b0:
         20:fd:dc:d7:a4:4c:79:08:ee:cb:3a:32:fb:f5:f0:75:72:12:
         05:f8:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org