Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3330303a3a2f3430203d3e20323638363338.roa
File:                     323830343a353434343a3330303a3a2f3430203d3e20323638363338.roa (raw, json)
Hash identifier:          c/iOOqkp3JZAYSkvfyAovaj2Xb7B81iMFAd9ONY2ipY=
Subject key identifier:   D0:1D:E4:E0:94:B9:5F:A1:E7:AB:93:65:C5:A3:B6:B6:2A:C4:3D:B5
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       705A52CBB444D7804E0B6F747C15BC8CC7F80862
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3330303a3a2f3430203d3e20323638363338.roa
Signing time:             Thu 02 Dec 2021 18:00:00 +0000
ROA not before:           Thu 02 Dec 2021 17:55:00 +0000
ROA not after:            Fri 02 Dec 2022 18:00:00 +0000
asID:                     268638
IP address blocks:        2804:5444:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5a:52:cb:b4:44:d7:80:4e:0b:6f:74:7c:15:bc:8c:c7:f8:08:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Dec  2 17:55:00 2021 GMT
            Not After : Dec  2 18:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:91:a6:7d:10:80:c7:53:95:90:43:49:b2:
                    dd:8d:4f:ff:d5:b6:23:ba:57:98:1c:ca:df:8f:bb:
                    e0:9f:ca:14:4e:12:e7:d6:95:f3:42:f5:36:54:27:
                    37:60:26:95:b8:4d:81:11:fe:79:a4:51:bc:55:d0:
                    46:10:80:08:b1:f9:43:28:0b:25:36:fd:e9:fa:50:
                    83:c4:56:48:e1:d5:ab:3f:74:af:9a:c3:b3:66:27:
                    52:10:d6:60:c1:42:7a:54:af:7b:0c:17:e5:c2:5f:
                    4d:8e:2f:ba:b6:c4:bc:f2:53:0f:56:b2:8b:05:62:
                    89:17:15:9e:a2:07:87:a9:63:3f:48:ff:ad:16:80:
                    58:74:96:08:08:ee:cd:b8:a3:0f:f4:08:cf:11:a6:
                    1f:2c:5c:69:b5:24:48:a2:c4:47:62:70:38:fe:ac:
                    4f:3b:ca:8e:ba:75:de:39:38:f9:26:10:40:e0:3f:
                    aa:30:56:45:bc:83:dc:df:b6:2a:4c:81:86:84:45:
                    a5:70:0f:af:21:46:ad:c6:e2:86:90:26:76:2a:12:
                    81:ca:6e:02:bc:79:ea:8a:1e:85:cc:4a:12:5b:6e:
                    51:bf:69:0f:cd:5e:7f:ce:89:5f:cb:e4:d6:ec:d1:
                    c1:8b:aa:be:46:7f:1f:66:99:0e:a2:4e:df:7d:32:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:E4:E0:94:B9:5F:A1:E7:AB:93:65:C5:A3:B6:B6:2A:C4:3D:B5
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3330303a3a2f3430203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:40:0d:d5:f3:1a:bb:7c:03:65:c2:0f:45:ef:0e:80:8b:
         83:c3:76:44:bc:eb:b9:50:b1:9c:6b:57:ef:9e:05:bd:9f:95:
         39:36:c4:09:f5:8e:94:b4:c8:27:51:be:d6:65:22:1b:02:5f:
         b4:81:f4:3b:f8:45:cd:28:27:71:a6:49:df:86:f1:0d:68:e1:
         fe:1f:3b:0b:9f:2c:9b:cd:b1:97:25:d6:67:d2:4b:9f:11:19:
         6f:cf:e7:89:60:55:57:66:03:d0:9a:0e:71:e1:a1:fc:e7:27:
         6b:08:13:3c:42:f7:c1:cb:96:5d:2b:23:95:3c:a6:63:2d:05:
         34:95:50:f2:92:f0:30:34:3c:1b:d8:1e:d9:d4:c7:e3:55:ef:
         60:8e:2d:b9:54:ca:3a:61:3b:03:08:32:cf:f7:80:64:a5:f1:
         54:a8:4b:4a:24:82:69:a3:a4:60:19:59:99:58:8d:35:3c:02:
         14:32:c8:4d:c0:28:ab:c9:71:fb:1e:ca:d9:c6:24:f0:3a:6b:
         4d:d3:31:c8:5b:f6:12:6a:4b:f8:44:5a:e6:ec:32:35:51:48:
         7a:97:23:46:c2:44:f4:df:1b:44:e4:e5:72:a6:63:fb:4b:00:
         6c:07:30:28:a2:3b:7f:fc:89:dd:a0:06:bd:27:63:0c:d3:b0:
         2f:93:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org