Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a313030303a3a2f33362d3336203d3e20323637313931.roa
File:                     323830343a343939343a313030303a3a2f33362d3336203d3e20323637313931.roa (raw, json)
Hash identifier:          AdFEKAQt4fSwhV8qJJaEBJE5ewNAU7iO7G45HBPU3Jc=
Subject key identifier:   34:0A:68:0E:7A:D0:DD:21:2C:07:C5:03:80:4D:22:05:C1:AF:6B:05
Certificate issuer:       /CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
Certificate serial:       1D1A379A2077814C99FC04489DFEFB9A0F64FC7A
Authority key identifier: 48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a313030303a3a2f33362d3336203d3e20323637313931.roa
Signing time:             Fri 14 Apr 2023 22:29:17 +0000
ROA not before:           Fri 14 Apr 2023 22:24:17 +0000
ROA not after:            Fri 12 Apr 2024 22:29:17 +0000
asID:                     267191
IP address blocks:        2804:4994:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1a:37:9a:20:77:81:4c:99:fc:04:48:9d:fe:fb:9a:0f:64:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
        Validity
            Not Before: Apr 14 22:24:17 2023 GMT
            Not After : Apr 12 22:29:17 2024 GMT
        Subject: CN=340A680E7AD0DD212C07C503804D2205C1AF6B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:d2:0e:b6:b9:19:3e:3a:86:2d:df:a3:8b:
                    17:72:f4:c7:2a:19:e5:13:19:07:90:ca:49:c5:01:
                    cf:9c:43:89:f4:bc:53:63:1b:25:c9:70:ff:2a:b6:
                    83:cb:51:ba:1b:e3:8f:55:d4:5c:04:61:65:f7:59:
                    cd:3c:9f:b0:92:7f:52:a3:34:01:e6:4e:8b:a9:4d:
                    79:a2:8e:8d:52:cd:85:63:af:c2:df:f2:5b:12:5b:
                    7a:d2:33:93:e0:44:e9:dd:40:a9:1e:10:73:d3:b3:
                    1b:04:10:c6:f6:15:20:e4:27:55:79:ca:40:04:c1:
                    87:e4:f6:31:0c:ca:9b:70:f3:4d:64:65:25:a2:6c:
                    35:b6:62:b9:8a:a0:0c:aa:7c:f3:98:66:d2:ac:b2:
                    23:cd:b4:31:b4:0e:c1:63:ae:6e:1f:c0:c6:6f:c4:
                    00:4b:a5:b3:6a:16:41:e5:b6:21:62:6b:36:9f:31:
                    d2:50:34:4a:13:b2:89:ba:9c:5a:dd:ea:4b:bd:cf:
                    cb:12:74:df:fd:56:2b:db:a5:91:1e:c9:39:31:ed:
                    63:fe:9b:36:97:68:07:1b:80:3b:db:6d:3d:df:8e:
                    c3:66:33:04:ab:77:a1:52:3b:3c:f1:c1:c9:58:42:
                    da:f3:ea:19:34:58:38:11:01:5a:ef:81:2a:80:30:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0A:68:0E:7A:D0:DD:21:2C:07:C5:03:80:4D:22:05:C1:AF:6B:05
            X509v3 Authority Key Identifier:
                keyid:48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a313030303a3a2f33362d3336203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4994:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         be:12:73:d3:be:3d:de:42:28:dc:90:e4:96:a1:d8:c0:5a:8c:
         65:fe:a0:63:43:a1:c0:23:7a:f7:f4:8d:14:54:e9:6b:58:b5:
         a1:95:e9:d3:0d:21:b3:ab:26:93:a9:9a:c1:12:4a:b6:08:77:
         41:c3:b5:de:b7:5a:95:16:44:ac:63:40:12:48:11:ee:2d:83:
         80:79:9e:15:04:b4:4f:0a:10:14:02:99:84:7a:e9:43:9c:22:
         e7:b3:14:9b:c6:b2:c4:ed:f7:b2:f1:98:70:b2:ac:3a:f6:21:
         20:ee:d1:58:c2:2b:26:74:c8:77:5f:4b:f8:aa:36:35:5e:17:
         af:83:20:04:fc:c2:f0:18:b3:fe:c3:92:79:64:d7:bb:c9:25:
         fa:e5:91:27:4f:2e:6d:34:09:1f:70:8b:9a:b0:a3:3b:8a:29:
         59:bd:ca:e9:b4:ed:c4:17:68:e9:01:51:0d:b4:15:67:28:fb:
         ee:04:75:4e:ad:c7:c1:cb:bb:33:6e:fb:d9:0c:73:8e:85:ad:
         2b:0e:31:ae:d5:24:90:5a:01:a9:bb:0c:3b:1d:22:b0:05:2b:
         cd:4f:0e:0c:ae:59:5c:eb:ab:7c:6e:ea:63:17:0f:0b:9e:00:
         d0:6b:62:40:5a:aa:53:da:07:ea:ad:ff:09:f2:86:ae:3f:ec:
         f7:71:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org