Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/323830343a343130343a3a2f33322d3336203d3e20323635393938.roa
File:                     323830343a343130343a3a2f33322d3336203d3e20323635393938.roa (raw, json)
Hash identifier:          bbOWLCxbUu3zTcbbFgVOjO1Jdtc8r9mqYDC01DrsuSY=
Subject key identifier:   67:D7:6A:A9:33:6A:92:FA:B4:7B:66:3D:FD:A0:8E:04:35:16:95:F9
Certificate issuer:       /CN=7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3
Certificate serial:       28F1F6B8B6B326EAF99005EE1740BD26E32A6E5C
Authority key identifier: 7F:A6:4C:74:EE:FA:83:8E:1B:47:D7:2D:86:A3:F6:98:D4:C9:5E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/323830343a343130343a3a2f33322d3336203d3e20323635393938.roa
Signing time:             Wed 09 Aug 2023 19:28:49 +0000
ROA not before:           Wed 09 Aug 2023 19:23:49 +0000
ROA not after:            Wed 07 Aug 2024 19:28:49 +0000
asID:                     265998
IP address blocks:        2804:4104::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f1:f6:b8:b6:b3:26:ea:f9:90:05:ee:17:40:bd:26:e3:2a:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3
        Validity
            Not Before: Aug  9 19:23:49 2023 GMT
            Not After : Aug  7 19:28:49 2024 GMT
        Subject: CN=67D76AA9336A92FAB47B663DFDA08E04351695F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:51:e3:08:f8:0d:52:2c:87:49:a3:81:5d:
                    10:7b:72:04:be:1a:3f:72:2c:13:a1:8d:b4:93:cf:
                    fe:c1:70:e1:42:23:dd:e8:c3:f6:69:36:5c:b9:2e:
                    2e:ba:c5:60:df:29:22:86:c8:7b:01:cc:de:c6:ea:
                    e8:5d:8a:6c:9e:8e:5d:3c:37:4f:10:67:41:6a:b2:
                    92:c5:10:00:ca:a0:a3:a0:f9:1d:02:29:1e:f9:1d:
                    af:3e:c3:51:e2:bb:2d:9e:89:e7:bf:89:80:20:78:
                    e4:8e:b8:fa:fc:eb:95:66:8f:f4:d2:1c:26:31:ec:
                    7e:3c:42:cd:66:bb:d5:72:65:92:18:ed:7a:00:74:
                    cd:06:6a:de:fe:f5:e9:4c:5a:28:07:22:49:74:f3:
                    ad:9f:5c:4d:47:df:ec:73:54:cc:5e:1d:cd:8c:b9:
                    f4:a7:6e:52:59:91:53:30:98:3b:9d:6a:5a:02:35:
                    f7:99:3e:5a:34:18:93:09:f5:c1:fd:90:96:02:0a:
                    57:fe:29:8e:fd:63:81:4f:46:dd:4f:1a:3f:d7:82:
                    66:e5:09:76:d4:b5:59:03:2d:1f:96:5d:16:d4:ad:
                    6b:79:67:60:16:b1:4f:b1:0e:49:9b:8f:fc:98:43:
                    09:9f:98:5b:55:16:ff:21:05:a9:fd:cd:2c:11:09:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:6A:A9:33:6A:92:FA:B4:7B:66:3D:FD:A0:8E:04:35:16:95:F9
            X509v3 Authority Key Identifier:
                keyid:7F:A6:4C:74:EE:FA:83:8E:1B:47:D7:2D:86:A3:F6:98:D4:C9:5E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/323830343a343130343a3a2f33322d3336203d3e20323635393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4104::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:98:cf:3b:b9:a7:96:d6:c9:1b:08:06:bb:94:3c:38:02:84:
         71:02:15:db:12:49:4e:74:fe:2c:d3:a2:07:fc:21:9c:e4:c5:
         91:4e:68:16:14:3e:76:5b:ff:68:1f:49:d3:68:b9:81:af:f9:
         b2:e5:c2:94:bf:70:63:b5:31:0f:0d:36:8a:11:5a:76:75:c4:
         d0:08:3b:04:6a:c9:eb:e9:e3:83:e8:db:a7:62:13:fb:ae:62:
         8e:03:1c:6f:72:8c:62:22:0c:8c:ea:bf:f1:e8:70:9c:ac:50:
         ce:ce:82:28:82:cb:f1:84:ff:6c:3f:52:f6:88:01:02:ad:e4:
         9b:18:ed:b6:d8:de:8b:08:2b:14:60:0d:24:7c:ec:78:b5:8f:
         c4:fb:d5:f4:35:ec:33:59:84:89:bd:e7:48:81:61:b5:ec:37:
         50:f7:9c:a6:c5:64:cd:57:3e:6c:bb:49:30:b2:2a:f1:0a:53:
         a3:a6:7b:f0:3d:4c:da:b4:3c:19:1e:fd:f9:3d:b7:62:43:5b:
         7f:e3:03:82:38:a8:37:f7:50:cd:9a:0e:e5:ff:bf:13:44:e8:
         9a:d4:65:58:69:a5:39:43:d8:fe:dc:db:b8:c9:8c:c3:f7:4a:
         07:19:f8:b4:2e:f9:2f:7e:7c:ea:7c:70:2b:a4:47:9d:15:81:
         79:46:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org