Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3130303a3a2f3430203d3e20323638363338.roa
File:                     323830343a353434343a3130303a3a2f3430203d3e20323638363338.roa (raw, json)
Hash identifier:          2tb30i9u0hH8APQWHeSqcGC7p3cNCaCm170GkFM+pYI=
Subject key identifier:   03:9B:E3:35:A9:2F:EE:A7:F7:1C:39:6E:A4:7F:10:42:44:29:E3:FA
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       043D57E87A31D3B152B756803A44D486686653D5
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3130303a3a2f3430203d3e20323638363338.roa
Signing time:             Thu 02 Dec 2021 18:00:00 +0000
ROA not before:           Thu 02 Dec 2021 17:55:00 +0000
ROA not after:            Fri 02 Dec 2022 18:00:00 +0000
asID:                     268638
IP address blocks:        2804:5444:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:57:e8:7a:31:d3:b1:52:b7:56:80:3a:44:d4:86:68:66:53:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Dec  2 17:55:00 2021 GMT
            Not After : Dec  2 18:00:00 2022 GMT
        Subject: CN=3082010A0282010100D6788030A8756BCC459001437FFE4E64BCBB1D79D76C0AFDF4E03E9FED0977C8211743E7595DCEF30959E7A8CF96FA9A69FA127FB30158FEB5DAFB3D5282D4C0E81A3C8C685EF71C5C98CA394F33730B987B077E931D5AC1203944B28FA57AC407B6D6AC87425FDF1AC6D79104DA2C0B973EEE4F610A410A74DF9492C62F8CECDF8705F2A20D5F29FC9AFE4FF15F418018BE16D40B3FD13144CA12C96794A2A0D10535B9AA090A40EB4BE1ABBCD35F8394DD3B657CF9D9BA907D286C0EF2CB1FD78DFA84595331A452F709513A6A1D0DE5052C0EA9E0F365F26F97A9F658324C67FBD7E111316554B5E018BDA2A351ED7057B508D559F43FDF1D9CFFFAB94F0D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:80:30:a8:75:6b:cc:45:90:01:43:7f:fe:
                    4e:64:bc:bb:1d:79:d7:6c:0a:fd:f4:e0:3e:9f:ed:
                    09:77:c8:21:17:43:e7:59:5d:ce:f3:09:59:e7:a8:
                    cf:96:fa:9a:69:fa:12:7f:b3:01:58:fe:b5:da:fb:
                    3d:52:82:d4:c0:e8:1a:3c:8c:68:5e:f7:1c:5c:98:
                    ca:39:4f:33:73:0b:98:7b:07:7e:93:1d:5a:c1:20:
                    39:44:b2:8f:a5:7a:c4:07:b6:d6:ac:87:42:5f:df:
                    1a:c6:d7:91:04:da:2c:0b:97:3e:ee:4f:61:0a:41:
                    0a:74:df:94:92:c6:2f:8c:ec:df:87:05:f2:a2:0d:
                    5f:29:fc:9a:fe:4f:f1:5f:41:80:18:be:16:d4:0b:
                    3f:d1:31:44:ca:12:c9:67:94:a2:a0:d1:05:35:b9:
                    aa:09:0a:40:eb:4b:e1:ab:bc:d3:5f:83:94:dd:3b:
                    65:7c:f9:d9:ba:90:7d:28:6c:0e:f2:cb:1f:d7:8d:
                    fa:84:59:53:31:a4:52:f7:09:51:3a:6a:1d:0d:e5:
                    05:2c:0e:a9:e0:f3:65:f2:6f:97:a9:f6:58:32:4c:
                    67:fb:d7:e1:11:31:65:54:b5:e0:18:bd:a2:a3:51:
                    ed:70:57:b5:08:d5:59:f4:3f:df:1d:9c:ff:fa:b9:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:E3:35:A9:2F:EE:A7:F7:1C:39:6E:A4:7F:10:42:44:29:E3:FA
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3130303a3a2f3430203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:b2:35:92:e7:96:14:88:1b:c6:ed:2c:bf:40:dc:8f:4e:6c:
         6e:57:6c:ed:78:8a:3b:55:24:4d:47:e0:a7:4d:8e:cb:bc:dd:
         37:30:22:69:80:5c:98:84:79:c8:e1:e9:6e:84:0e:86:ad:dc:
         a0:2e:47:5e:c2:a6:6c:7a:8b:3f:d3:47:79:ac:e4:5b:ee:9c:
         b7:b8:70:7d:ce:50:51:06:46:81:c2:97:54:8d:3b:e3:91:47:
         8a:2f:3e:25:d3:79:76:82:15:de:f5:ae:ef:f5:94:9e:cd:ff:
         2d:99:d3:8e:aa:b8:55:88:e6:f9:38:a3:89:79:71:c7:ef:a8:
         f5:0b:b2:2b:2d:b2:e9:f0:14:86:23:22:78:17:ad:1f:de:12:
         fb:41:05:58:63:f1:e3:ec:19:e5:62:52:51:ac:f1:9f:99:b5:
         a1:df:ad:84:57:56:3e:a4:35:0e:54:f5:22:a2:23:3f:08:db:
         32:b9:57:3c:8e:96:49:a0:4b:66:58:45:b9:ba:bd:0a:9d:87:
         b8:38:3d:82:26:4d:53:9a:3e:49:84:f7:3c:2f:dd:5a:28:96:
         eb:84:01:2f:96:42:99:53:e0:48:51:20:d9:a3:f0:f5:59:cb:
         7a:d9:19:4d:23:7a:7b:55:ba:6a:25:f4:7b:b2:e3:b9:c3:1c:
         73:a6:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org