Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f3332203d3e20323638363338.roa
File:                     323830343a353434343a3a2f3332203d3e20323638363338.roa (raw, json)
Hash identifier:          u80kgIFohLWA/AH8x3v4nQqvd2DvUrxvXnIH3K0O1og=
Subject key identifier:   06:2A:81:B7:A6:05:0E:44:0C:67:16:E6:FC:66:2B:5B:2E:9C:E1:CA
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       6D1145161FDA6D8592C5371B282DBBE4C5168332
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f3332203d3e20323638363338.roa
Signing time:             Wed 08 Sep 2021 12:00:00 +0000
ROA not before:           Wed 08 Sep 2021 11:55:00 +0000
ROA not after:            Thu 08 Sep 2022 12:00:00 +0000
asID:                     268638
IP address blocks:        2804:5444::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:45:16:1f:da:6d:85:92:c5:37:1b:28:2d:bb:e4:c5:16:83:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Sep  8 11:55:00 2021 GMT
            Not After : Sep  8 12:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:1c:93:c4:19:db:57:fe:38:39:03:4a:5a:
                    75:b1:94:b7:4f:34:e5:2e:ce:01:fb:f2:b1:9b:f1:
                    2a:65:a8:25:f7:45:eb:59:60:d2:fd:93:1a:0d:2e:
                    62:63:5d:a1:4e:69:2f:a7:c9:84:04:0c:42:87:0e:
                    0b:3d:5d:f6:4c:93:fc:b7:3a:d0:1d:63:a8:58:8b:
                    0e:e6:04:1b:ff:a5:5e:05:8b:8d:a1:57:67:01:7e:
                    e0:d5:a5:7d:ec:51:ca:c7:c6:3f:b4:8b:52:04:35:
                    82:02:4d:f9:e6:fe:e4:0f:e2:e7:1d:1a:bb:43:d2:
                    1a:d2:b7:0d:16:8f:62:03:85:d3:be:98:13:75:ae:
                    e9:66:14:bb:f9:78:c6:a9:c4:71:48:fd:84:89:97:
                    59:07:63:82:7a:a1:29:aa:1d:25:02:9c:c5:dc:a5:
                    f7:fe:c6:08:f0:e4:15:cd:fd:3d:ee:c7:3c:5a:62:
                    1c:8d:b2:05:7a:92:be:cc:cd:20:4a:67:bc:d7:82:
                    7e:7b:ea:af:ef:b2:7c:cd:4d:0e:17:67:19:f0:89:
                    17:5e:cb:0f:4a:ad:9b:ec:f2:8b:1f:f4:cd:a9:c2:
                    2d:37:f7:bb:44:31:b7:4e:47:a4:53:b9:35:67:2b:
                    42:bf:b3:5a:02:89:8e:13:c3:c5:98:50:02:7a:21:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:81:B7:A6:05:0E:44:0C:67:16:E6:FC:66:2B:5B:2E:9C:E1:CA
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:a3:8f:b1:a6:d5:17:20:4a:60:af:8c:42:4d:5b:00:35:
         0d:d4:84:dd:0c:55:b7:bc:54:37:db:83:96:b0:75:10:3c:83:
         0b:03:cd:25:50:ba:5b:cc:23:1f:f9:21:66:cf:88:ea:d4:10:
         8f:fe:f3:fa:1c:ec:8c:c8:00:a6:2f:45:db:15:31:f7:e2:3b:
         ab:26:a8:b0:9e:c6:de:73:ff:42:c7:7f:14:b9:8f:a7:4b:cb:
         5f:7d:7d:b8:eb:a3:b2:d6:79:bd:b6:e4:e1:fa:f2:fd:16:35:
         2e:c8:20:5c:8e:64:f5:d4:8c:57:8b:3f:d9:c7:bd:2b:7b:e5:
         b6:bd:7c:b1:f5:bc:85:28:6a:91:c0:b8:06:69:9e:1a:82:29:
         5c:85:b3:88:7d:86:3c:4c:70:18:2f:f5:3a:a8:49:10:9d:7d:
         3b:28:5d:87:ef:62:e6:d8:87:4e:c0:c6:fd:fb:91:da:c0:2e:
         61:4d:5f:33:64:cb:1b:e2:95:7b:ad:ad:15:84:91:78:33:98:
         41:a6:40:e3:72:c0:70:3c:71:cc:96:4b:09:5f:80:02:bc:b3:
         d5:4b:9f:37:41:eb:19:32:45:f2:fc:15:36:38:60:e9:f8:a7:
         b4:4e:76:50:8e:d9:a2:5b:1b:85:f9:7e:cf:39:0b:90:15:23:
         63:d3:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org