Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3430303a3a2f3430203d3e20323638363338.roa
File:                     323830343a353434343a3430303a3a2f3430203d3e20323638363338.roa (raw, json)
Hash identifier:          wsJ/K/cnPv7taHj7vU+ASChE89ywSoqeR0YUxztfA80=
Subject key identifier:   39:6D:BA:3B:50:15:E4:20:E2:A7:6A:51:EA:B4:85:76:46:38:3A:E2
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       26D0DF51B680C72920C48592CA2F57DFD3FC1C1C
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3430303a3a2f3430203d3e20323638363338.roa
Signing time:             Thu 02 Dec 2021 18:00:00 +0000
ROA not before:           Thu 02 Dec 2021 17:55:00 +0000
ROA not after:            Fri 02 Dec 2022 18:00:00 +0000
asID:                     268638
IP address blocks:        2804:5444:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d0:df:51:b6:80:c7:29:20:c4:85:92:ca:2f:57:df:d3:fc:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Dec  2 17:55:00 2021 GMT
            Not After : Dec  2 18:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:1d:ce:40:57:56:65:6e:bf:cf:77:ca:91:
                    f6:6d:4d:ec:c8:b4:91:ad:4e:21:36:3c:22:d6:7e:
                    6e:7a:e7:bf:cf:f5:57:4c:f1:db:ff:c2:18:e4:84:
                    9e:bf:f4:68:c5:34:12:c5:1e:29:90:a5:aa:08:17:
                    64:56:9b:3c:21:41:34:b3:eb:fb:35:f2:8a:4f:3f:
                    42:93:37:bb:03:ee:74:49:8f:ed:45:d8:58:16:ed:
                    85:43:dd:df:40:e1:de:66:08:42:6a:1c:b1:1e:d4:
                    5a:61:a0:dc:34:8a:c1:ac:89:04:75:06:9b:c8:21:
                    65:1a:60:89:a2:5a:06:13:c0:3b:43:8b:aa:d6:31:
                    44:3f:45:32:8f:71:61:aa:21:f9:2d:9c:9a:98:ea:
                    10:47:b7:ef:44:4f:85:5e:cc:60:30:8e:72:c9:b9:
                    bf:5b:39:40:22:b1:74:20:20:1e:2b:26:3e:47:f1:
                    d8:42:5d:6d:a1:a5:91:4c:53:7e:33:82:e7:a7:6c:
                    89:a5:e2:09:b2:42:c4:8b:fa:e1:1a:6f:9e:b5:ca:
                    7e:e8:2f:de:6c:d2:9a:88:fd:7c:2d:e0:b6:33:dc:
                    d0:a2:ba:65:76:c7:85:94:17:02:0d:37:bd:d5:16:
                    ee:0c:43:92:88:59:5d:48:7a:50:64:f4:a3:8d:b5:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6D:BA:3B:50:15:E4:20:E2:A7:6A:51:EA:B4:85:76:46:38:3A:E2
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3430303a3a2f3430203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:df:6a:53:ab:d7:66:0e:37:78:3c:7c:ac:67:1d:f1:dc:
         2d:df:28:b2:04:66:02:da:99:a3:38:6d:21:43:f5:a3:c6:1e:
         7f:5f:ed:2b:f9:a5:9e:55:74:5e:90:33:f4:24:9a:b3:a6:9c:
         a2:4a:2c:75:89:ef:77:c4:4b:d6:17:29:c3:55:87:10:dd:94:
         96:a4:51:44:ce:84:50:f6:35:9f:8c:fc:8b:ed:78:c4:7a:f3:
         01:ac:6e:e9:67:0c:43:62:16:71:40:63:a3:4b:03:42:be:28:
         a1:1c:3d:13:1f:d8:03:cc:3e:49:31:c7:12:47:46:a2:9a:23:
         33:86:72:08:7d:25:86:42:ed:da:b5:5f:2b:a7:d2:d6:9d:0d:
         a1:a4:65:1d:b2:f6:ac:36:1e:43:af:dc:e1:1d:0c:41:21:41:
         74:ec:b4:be:9b:13:4c:e2:33:e8:87:e9:51:3b:72:fc:6d:f9:
         99:3c:33:32:b7:a7:6b:37:4a:93:f2:57:d4:e8:bd:a9:df:5b:
         c8:ef:95:b6:89:a2:73:ef:90:98:d0:3a:16:58:6d:d4:76:c9:
         89:ff:dd:cc:f5:22:73:bc:54:15:08:44:93:d3:bf:2b:14:78:
         db:24:da:01:75:7e:aa:3f:7e:07:4a:9b:4d:32:4a:9c:78:6e:
         6c:ed:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org