Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f3430203d3e20323638363338.roa
File:                     323830343a353434343a3a2f3430203d3e20323638363338.roa (raw, json)
Hash identifier:          TomCCitWxa4N9igZr3bUDpTX4JprQOgmg7NPK2mqWOc=
Subject key identifier:   0D:67:20:02:03:7D:62:2C:CF:F5:3B:98:47:13:0A:AC:B4:DF:2C:DE
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       48EB4ABE5CC1DB2A9098157821BC2000D1F7ACD0
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f3430203d3e20323638363338.roa
Signing time:             Thu 02 Dec 2021 18:00:00 +0000
ROA not before:           Thu 02 Dec 2021 17:55:00 +0000
ROA not after:            Fri 02 Dec 2022 18:00:00 +0000
asID:                     268638
IP address blocks:        2804:5444::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:eb:4a:be:5c:c1:db:2a:90:98:15:78:21:bc:20:00:d1:f7:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Dec  2 17:55:00 2021 GMT
            Not After : Dec  2 18:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:95:d7:3d:02:54:75:96:22:83:ea:44:84:
                    9d:19:14:d1:85:44:c4:14:d8:0d:81:81:72:1b:bd:
                    36:d9:9e:6e:36:84:b1:f0:53:06:10:97:c1:7c:ed:
                    b0:0f:a9:4f:6c:2f:ea:7b:cd:22:81:f0:c7:1d:20:
                    3c:19:b5:e2:1a:e3:5d:65:22:37:33:a3:8b:68:75:
                    97:0c:e9:a5:df:82:8f:c4:e5:5d:5e:a6:25:4f:bf:
                    aa:bc:a9:af:e1:51:74:70:c5:a4:cf:f0:41:35:7d:
                    fd:5c:79:67:e4:fe:d3:15:7d:02:a9:53:d7:fe:b6:
                    35:ae:9c:47:cb:93:96:bb:2b:1c:4a:8f:4c:e1:d2:
                    a6:5b:56:7b:db:06:ef:87:96:95:e4:42:db:e1:46:
                    e1:71:7d:8b:09:fa:78:35:ef:04:70:3b:b5:69:ff:
                    3f:42:80:85:42:69:ef:71:42:73:2f:7a:d7:cd:eb:
                    74:a0:ce:db:38:26:93:85:44:03:d5:b4:af:be:0d:
                    96:04:d0:8e:a8:e3:28:84:15:2e:0e:28:3f:06:41:
                    dc:20:3d:4e:6c:dd:45:58:5c:c0:0c:47:b9:74:6c:
                    7f:e9:82:64:46:c2:fa:61:b6:35:b4:c7:bc:2f:14:
                    e1:02:97:d5:6c:69:76:f2:ff:09:a3:22:fa:70:b1:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:67:20:02:03:7D:62:2C:CF:F5:3B:98:47:13:0A:AC:B4:DF:2C:DE
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f3430203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:b3:7b:ea:d5:76:3b:ba:ed:f6:4c:de:d8:76:8b:97:2a:
         e3:b5:3c:a0:7a:70:d3:82:fc:be:ce:5e:5b:22:d4:67:0a:47:
         ea:89:45:2e:1e:03:ea:f0:5b:00:aa:59:93:92:90:fd:01:a3:
         59:74:12:dc:5b:68:51:f1:70:dc:d2:7f:e2:f3:00:e4:bd:06:
         85:0e:e7:3e:d2:c2:ba:74:5f:c2:a1:08:ff:58:6b:e4:90:3f:
         c0:36:d4:38:ee:51:11:82:27:36:7e:3b:98:d6:59:5d:de:d3:
         1f:7a:3e:06:90:88:47:ba:d5:c0:99:9f:cd:a4:00:8d:05:25:
         12:ea:3a:1a:96:85:1f:6e:91:11:dc:ba:c2:71:d0:2b:88:f6:
         c2:93:30:72:9e:25:ad:37:54:a8:12:fb:a9:62:08:78:fe:e7:
         da:ac:6d:31:3c:fc:ad:cb:27:8e:9f:92:d6:f7:85:55:cf:81:
         39:a0:20:84:7b:d7:68:4a:b8:46:8f:60:7d:07:ce:ad:30:e9:
         90:f6:71:88:69:53:31:f4:3d:a2:f0:3b:3d:cc:07:27:2f:d2:
         9b:6e:cc:96:b9:4b:30:2d:96:c3:ef:b5:30:b3:98:52:3d:d4:
         0d:8d:2f:ce:33:01:47:a1:38:33:3e:78:f0:e3:2a:74:c3:a4:
         ea:90:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org