Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3530303a3a2f3430203d3e20323638363338.roa
File:                     323830343a353434343a3530303a3a2f3430203d3e20323638363338.roa (raw, json)
Hash identifier:          lcOHvboMB8eVXxotgmq7QTzAoW0+ivaUPJt6GOaLTBE=
Subject key identifier:   7F:85:5B:DE:EC:3A:AC:72:E3:92:75:BF:09:60:06:98:B3:40:1E:8B
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       734B5A74330DF737DC97684255A90543E5A6F96E
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3530303a3a2f3430203d3e20323638363338.roa
Signing time:             Sat 05 Feb 2022 20:00:00 +0000
ROA not before:           Sat 05 Feb 2022 19:55:00 +0000
ROA not after:            Sun 05 Feb 2023 20:00:00 +0000
asID:                     268638
IP address blocks:        2804:5444:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4b:5a:74:33:0d:f7:37:dc:97:68:42:55:a9:05:43:e5:a6:f9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Feb  5 19:55:00 2022 GMT
            Not After : Feb  5 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:eb:34:cb:f2:9c:74:3f:42:82:44:43:b7:
                    b0:52:a1:b5:d7:4d:1a:6a:6a:eb:d9:f6:de:ce:88:
                    27:a0:ef:6e:d2:ab:29:2b:05:5c:b3:2f:ba:3f:34:
                    43:42:72:f7:a8:4f:81:ed:fb:77:02:e2:09:21:50:
                    d7:f6:33:ca:c3:07:3d:fa:64:c4:37:fc:b7:13:62:
                    06:d1:bb:c9:a2:6a:56:b2:a4:b6:4c:ef:27:1b:81:
                    cb:31:9f:98:15:5e:42:a4:8a:34:4a:0f:66:b2:7b:
                    f0:57:07:b0:09:71:f6:42:09:b8:28:f7:95:e8:10:
                    67:9e:30:b1:d4:52:a7:56:a0:be:ee:0f:9d:15:94:
                    42:48:a5:a5:14:ee:39:1a:9a:00:57:6c:1c:8f:b8:
                    eb:e8:3a:61:73:25:ee:77:84:6c:69:14:c1:5a:ed:
                    ce:c3:d5:d0:19:5c:49:25:b8:ff:34:f2:a9:32:b0:
                    1d:4a:0d:93:04:11:0a:9b:a9:36:9a:d5:c4:05:e1:
                    c9:fb:f4:30:d6:b7:17:3d:5a:27:ed:ed:e0:66:7d:
                    7f:0a:5e:97:71:ff:cb:29:6f:0b:f1:d1:ec:dd:3b:
                    e3:c8:6b:d4:d5:fe:aa:d9:50:50:19:17:0b:ab:dd:
                    dd:db:4e:b9:7d:ea:16:6a:b4:23:36:b7:a8:a0:30:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:85:5B:DE:EC:3A:AC:72:E3:92:75:BF:09:60:06:98:B3:40:1E:8B
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3530303a3a2f3430203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:58:cd:80:c1:9f:b9:7d:9f:49:13:76:a1:36:99:6d:d3:d0:
         0b:0d:27:7a:17:c8:0c:f9:8b:c4:1c:66:11:00:af:18:b4:f8:
         f0:9a:8e:77:53:e9:8a:93:dc:e6:93:f2:cd:24:4f:cc:d2:67:
         1e:dc:10:df:39:b7:7f:92:44:dd:c1:77:d7:7b:91:45:f7:83:
         ce:58:2b:b0:d6:f4:ba:f1:6a:18:c1:99:ec:5a:1f:aa:f7:aa:
         eb:b1:23:86:d3:b2:d0:16:ab:55:71:a8:fd:68:c9:a9:d3:b1:
         f0:a4:eb:92:48:32:d7:c9:bf:cb:41:ac:ca:74:e7:bb:03:10:
         da:d7:82:f0:db:9e:38:37:d4:2b:e8:ca:86:5c:e5:9b:a4:90:
         bd:e5:ee:0f:0a:de:2d:c2:0d:2d:59:49:75:12:d3:3b:6c:03:
         1e:fe:54:d0:8d:e3:2d:77:3c:c1:b3:df:14:42:32:16:38:c4:
         88:b7:dc:80:87:a6:ce:bc:70:2e:aa:95:31:90:44:76:ee:56:
         8a:ef:32:22:01:7e:28:1c:67:40:07:04:99:85:05:5c:19:3c:
         68:70:a2:7a:48:82:d4:53:ef:85:69:6e:ea:ec:9e:87:1e:98:
         1d:20:2f:82:05:51:08:d7:1e:ea:2e:ec:f2:08:d0:2d:e1:25:
         9a:aa:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org