Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa
File:                     323830343a363339633a3a2f33332d3333203d3e20323639333732.roa (raw, json)
Hash identifier:          KDwb/ldRDt261OHB/ScD3MouX4HJKkcG5djJP6NVUQo=
Subject key identifier:   55:3D:0F:69:D8:20:2B:F2:4D:4E:C4:37:E5:03:C7:5A:00:B7:5C:E6
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       34F05C5E01CB070CA0F71223338C068B4562351A
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa
Signing time:             Wed 14 Feb 2024 22:06:06 +0000
ROA not before:           Wed 14 Feb 2024 22:01:06 +0000
ROA not after:            Wed 12 Feb 2025 22:06:06 +0000
asID:                     269372
IP address blocks:        2804:639c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:5c:5e:01:cb:07:0c:a0:f7:12:23:33:8c:06:8b:45:62:35:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Feb 14 22:01:06 2024 GMT
            Not After : Feb 12 22:06:06 2025 GMT
        Subject: CN=553D0F69D8202BF24D4EC437E503C75A00B75CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:45:7f:82:0f:0d:e5:96:d1:bc:ec:8c:a5:
                    f3:88:e3:ec:76:72:9c:80:42:9c:85:41:7b:50:ea:
                    0e:e9:ac:11:b7:5d:3d:5e:36:15:a7:c9:f4:55:97:
                    80:7a:46:98:d2:6b:77:87:3a:a2:a4:f7:3c:89:89:
                    64:b7:99:78:71:7d:bd:b2:17:02:e2:4d:80:86:c8:
                    0e:86:29:bc:ad:60:e6:b9:77:53:f8:05:0a:d3:f7:
                    d2:21:ab:5e:62:c8:74:17:e4:48:de:53:8b:b9:0a:
                    9f:58:a1:ba:74:6a:76:d3:cf:2c:e3:cf:62:3b:a4:
                    88:b7:b5:35:bb:db:53:09:8c:b2:0c:19:66:30:8c:
                    c3:26:51:bc:c8:65:fd:3e:e4:5c:f3:d0:31:8d:dc:
                    71:f6:8f:79:42:60:ae:16:56:a6:5c:cc:13:35:a8:
                    1f:d4:bd:8b:ec:cd:6e:7b:b0:25:3d:c6:7d:76:87:
                    05:45:ad:76:c8:3a:84:13:5a:74:c1:2d:be:72:24:
                    94:8b:24:80:a2:a0:ba:27:64:22:6c:17:0c:41:d8:
                    1b:4e:e5:1d:0c:30:dd:ff:58:7a:73:cd:95:1d:98:
                    22:e6:c7:20:9d:c2:86:59:22:d5:50:35:e1:d5:09:
                    ce:3b:ef:4e:0f:fa:a7:78:17:52:f0:9c:2d:57:6f:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:0F:69:D8:20:2B:F2:4D:4E:C4:37:E5:03:C7:5A:00:B7:5C:E6
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:c4:95:61:24:3c:db:be:09:6c:0d:d1:93:64:c4:a6:d8:
         ca:61:c5:4c:3e:d6:ab:c3:02:dd:a9:68:63:20:56:bd:ad:63:
         8c:06:b9:68:4d:c7:e3:c6:91:a3:d0:da:68:37:f3:bb:18:96:
         fd:df:0f:5b:13:30:a8:5b:53:18:c8:b1:7d:f1:a7:ad:18:a0:
         fa:0d:01:ba:aa:ab:08:6c:0a:20:c4:c5:a7:a5:59:dd:73:ca:
         8a:a0:f3:b1:12:a0:f6:f6:27:a4:c5:e2:16:d0:68:67:6a:f8:
         d0:d7:3d:06:ed:27:dd:5e:0b:4f:5b:05:50:53:c2:f4:b4:44:
         14:77:a6:9a:0f:72:39:55:78:c4:08:70:27:16:bf:11:03:9e:
         a3:6a:4b:58:58:fa:fc:75:c5:d1:d7:bc:2f:aa:85:7d:44:2e:
         8d:91:1f:e8:01:0b:27:33:aa:45:88:8c:89:2c:48:7b:24:9c:
         e6:8b:f8:ff:ab:a8:56:cd:dc:44:3d:0d:a2:a2:b7:0a:28:bd:
         80:c1:dc:d2:45:1a:4c:e5:c7:06:ab:42:a6:04:96:36:ef:45:
         45:92:af:9c:5d:a6:82:93:c6:05:5e:63:7d:ab:fb:bc:88:d1:
         ff:0f:16:f5:8f:89:af:39:69:89:64:5e:cb:13:2e:7b:13:44:
         5e:e7:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org