Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/323830343a386333383a3a2f33322d3438203d3e20323733373838.roa
File:                     323830343a386333383a3a2f33322d3438203d3e20323733373838.roa (raw, json)
Hash identifier:          RdrYx8RMzyvxQwsXijRhKPanpPZPd9p3rRIbc/n6vuc=
Subject key identifier:   C6:75:60:86:D6:BC:E9:46:6D:51:E6:24:8C:BD:81:DB:10:CC:DA:80
Certificate issuer:       /CN=49B7446F60C4089A75A346EAD9D246F02C994ED2
Certificate serial:       3EA25B6E11A53BD7889B6204F52332EA15717C57
Authority key identifier: 49:B7:44:6F:60:C4:08:9A:75:A3:46:EA:D9:D2:46:F0:2C:99:4E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/323830343a386333383a3a2f33322d3438203d3e20323733373838.roa
Signing time:             Wed 06 Dec 2023 12:02:44 +0000
ROA not before:           Wed 06 Dec 2023 11:57:44 +0000
ROA not after:            Wed 04 Dec 2024 12:02:44 +0000
asID:                     273788
IP address blocks:        2804:8c38::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:5b:6e:11:a5:3b:d7:88:9b:62:04:f5:23:32:ea:15:71:7c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B7446F60C4089A75A346EAD9D246F02C994ED2
        Validity
            Not Before: Dec  6 11:57:44 2023 GMT
            Not After : Dec  4 12:02:44 2024 GMT
        Subject: CN=C6756086D6BCE9466D51E6248CBD81DB10CCDA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:92:4d:10:c5:52:fd:91:73:12:b2:ca:f4:
                    0d:ad:9c:8b:f9:5f:bd:a9:53:a1:1d:88:4f:ba:3b:
                    76:40:c9:b2:0c:99:2d:b1:a7:75:ea:f9:b2:42:84:
                    d3:27:17:e7:2d:03:4d:79:36:dd:46:af:b7:5c:3e:
                    82:ad:44:4b:1f:81:8d:1a:a6:a0:05:35:c9:af:5f:
                    06:e5:7b:99:49:a1:96:57:f6:6c:c3:5f:a3:86:69:
                    43:ba:84:ba:2c:ea:05:5c:af:3e:f9:cf:84:30:8d:
                    98:24:f7:f0:5f:d7:b8:2f:01:70:76:4b:3b:24:fa:
                    62:55:a3:fe:5b:0d:10:d7:53:54:6e:a5:09:89:c3:
                    b2:44:9c:e1:76:56:a3:a1:45:21:81:40:b5:cf:14:
                    75:0a:ba:42:cc:47:99:97:28:8d:bd:fa:61:ba:6e:
                    dc:d0:d3:58:9f:29:74:1f:b2:4f:21:fd:34:ea:ed:
                    1c:4c:de:1d:f2:c5:72:18:ba:e9:55:01:3f:5d:f6:
                    97:f6:c3:53:72:1e:30:1c:f5:ba:cb:42:0a:34:2f:
                    fe:53:9a:a1:62:2c:b7:0e:a3:39:4f:41:57:c2:e6:
                    5f:28:24:77:d7:b0:cf:e1:1c:4f:90:03:75:42:6a:
                    f2:70:f2:96:da:e7:80:f3:a1:99:94:40:eb:0e:14:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:60:86:D6:BC:E9:46:6D:51:E6:24:8C:BD:81:DB:10:CC:DA:80
            X509v3 Authority Key Identifier:
                keyid:49:B7:44:6F:60:C4:08:9A:75:A3:46:EA:D9:D2:46:F0:2C:99:4E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/323830343a386333383a3a2f33322d3438203d3e20323733373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:af:89:ef:40:e2:ca:2d:16:64:9c:54:89:a1:4b:e3:c3:d5:
         1b:d0:dc:78:a9:bd:53:25:bb:58:0b:21:7c:f2:f3:42:8f:05:
         82:ce:07:cf:e9:00:f0:c9:99:c0:a9:37:9f:58:9f:79:3e:c8:
         6e:6b:05:d0:4c:e8:bf:ca:81:70:b4:03:62:9f:74:6c:4d:eb:
         ff:ef:5c:81:4d:81:72:65:f0:db:22:e3:12:e9:f4:40:ef:70:
         ab:55:89:ec:3e:41:7b:66:de:9a:14:40:3f:d7:05:b3:9a:10:
         92:db:d5:36:79:7a:bb:a8:e3:e1:0b:5d:56:03:6b:e2:36:22:
         be:39:bf:a3:fe:26:3a:e4:59:aa:08:93:89:c4:d9:0b:b5:ff:
         54:4b:4d:d5:4d:52:50:14:c5:79:7d:b5:92:5a:47:32:66:ed:
         f9:ad:80:d9:87:f4:b5:bc:cc:d5:9f:d5:d4:17:ca:b6:33:11:
         ca:38:99:87:e5:60:4f:4d:f1:78:ef:7d:da:ac:ba:4a:ff:b3:
         85:09:0b:b8:9a:dc:ab:92:6c:3c:25:85:3e:90:cd:c1:44:3a:
         e9:b0:87:d6:f5:3d:b3:22:52:8c:c6:23:99:2e:b9:9d:5a:fd:
         f6:af:95:09:a0:2b:eb:78:2f:e8:33:c1:cf:76:b9:f5:54:aa:
         7b:05:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:33 2024 by rpki-client on console-fra.rpki-client.org