Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/323830343a376431383a3a2f33322d3334203d3e20323731353338.roa
File:                     323830343a376431383a3a2f33322d3334203d3e20323731353338.roa (raw, json)
Hash identifier:          65APE6Ct0UyUf7eRmHQAv0cPd5lMrRyT2OAVJhzlab8=
Subject key identifier:   05:6B:EF:F0:E6:6B:47:6A:C7:99:37:33:49:B1:51:B2:6C:5F:D6:C6
Certificate issuer:       /CN=A646D371FC2C8E729B4DF2ED3A1475720567B384
Certificate serial:       56B4D5EBB1DD5E0FC06A1CDECFC0B2A844C23D27
Authority key identifier: A6:46:D3:71:FC:2C:8E:72:9B:4D:F2:ED:3A:14:75:72:05:67:B3:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/323830343a376431383a3a2f33322d3334203d3e20323731353338.roa
Signing time:             Mon 22 May 2023 14:00:00 +0000
ROA not before:           Mon 22 May 2023 13:55:00 +0000
ROA not after:            Wed 22 May 2024 14:00:00 +0000
asID:                     271538
IP address blocks:        2804:7d18::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b4:d5:eb:b1:dd:5e:0f:c0:6a:1c:de:cf:c0:b2:a8:44:c2:3d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A646D371FC2C8E729B4DF2ED3A1475720567B384
        Validity
            Not Before: May 22 13:55:00 2023 GMT
            Not After : May 22 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100E4E5B281D502D4F778C33B0C42A7B2FBFFCA9F9C14636213FE22EA0DE0D11D87C7636A6DF576871F62D6F742EBD70F5327301E0BF2F917BBEFA221F62314AE05234C3E0FB276AA1F7D117A284715CF2E5F7BA1A30252F32126810A0BA9E3C5607CA8920E2CEC4B72DDD86FDE1058AFD78DA811D51CBBAB024CC68C63258D9D812CA8FEDD1E9C99C5AE4518C5845618204DD129BD43F1A7D8ED5A6770B6664AE4D1F7378E6EAC48A4E781FA7B50F337F441C41449A4EAE34C97306BDB9F20E4E368C252CAE1E2C0AF550182538F96B5F3F2ED281F7A475A6C316ADC2B6C3C9717B074E3782AE4EEC9A02B3D9EDE4F4C678C2293C1ED53213920E1EA29F5EA11B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:b2:81:d5:02:d4:f7:78:c3:3b:0c:42:a7:
                    b2:fb:ff:ca:9f:9c:14:63:62:13:fe:22:ea:0d:e0:
                    d1:1d:87:c7:63:6a:6d:f5:76:87:1f:62:d6:f7:42:
                    eb:d7:0f:53:27:30:1e:0b:f2:f9:17:bb:ef:a2:21:
                    f6:23:14:ae:05:23:4c:3e:0f:b2:76:aa:1f:7d:11:
                    7a:28:47:15:cf:2e:5f:7b:a1:a3:02:52:f3:21:26:
                    81:0a:0b:a9:e3:c5:60:7c:a8:92:0e:2c:ec:4b:72:
                    dd:d8:6f:de:10:58:af:d7:8d:a8:11:d5:1c:bb:ab:
                    02:4c:c6:8c:63:25:8d:9d:81:2c:a8:fe:dd:1e:9c:
                    99:c5:ae:45:18:c5:84:56:18:20:4d:d1:29:bd:43:
                    f1:a7:d8:ed:5a:67:70:b6:66:4a:e4:d1:f7:37:8e:
                    6e:ac:48:a4:e7:81:fa:7b:50:f3:37:f4:41:c4:14:
                    49:a4:ea:e3:4c:97:30:6b:db:9f:20:e4:e3:68:c2:
                    52:ca:e1:e2:c0:af:55:01:82:53:8f:96:b5:f3:f2:
                    ed:28:1f:7a:47:5a:6c:31:6a:dc:2b:6c:3c:97:17:
                    b0:74:e3:78:2a:e4:ee:c9:a0:2b:3d:9e:de:4f:4c:
                    67:8c:22:93:c1:ed:53:21:39:20:e1:ea:29:f5:ea:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6B:EF:F0:E6:6B:47:6A:C7:99:37:33:49:B1:51:B2:6C:5F:D6:C6
            X509v3 Authority Key Identifier:
                keyid:A6:46:D3:71:FC:2C:8E:72:9B:4D:F2:ED:3A:14:75:72:05:67:B3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/323830343a376431383a3a2f33322d3334203d3e20323731353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:94:56:59:d2:e0:e9:84:08:1b:ac:66:fa:26:ef:7a:74:9c:
         7c:f0:07:d4:8f:05:d5:8d:f0:66:4b:06:35:5b:f3:f7:82:21:
         4c:b7:c7:a2:9e:1a:b7:f3:14:0d:e3:15:2b:5f:8b:66:b7:92:
         3e:e6:dc:6f:d5:10:d6:44:cb:f7:9d:b8:5f:fa:70:c8:a1:89:
         65:ea:d2:e9:24:14:5e:43:2b:7d:c5:35:02:f7:fd:d7:11:92:
         b9:4b:2e:90:ea:c0:0c:3a:19:13:e4:a3:0a:1c:d8:9f:e0:5b:
         c4:8d:77:bd:17:07:58:de:31:f6:8a:83:43:27:be:21:97:72:
         7f:61:01:df:bb:c4:8f:8e:52:5d:ce:d6:f0:82:50:e3:a6:9f:
         49:17:5d:c1:b9:e2:bd:9a:70:e5:1b:04:cf:08:53:48:2b:17:
         4d:82:18:1a:2d:bf:88:fd:c1:8b:6d:1d:61:d3:45:77:9c:35:
         e6:d1:9a:10:05:60:0d:db:df:2e:6f:73:97:3a:ce:70:93:dc:
         87:35:e0:0f:0b:70:fe:96:f3:cb:77:ca:3e:71:fd:87:cb:1f:
         cc:12:d2:2c:e4:30:c7:f3:43:6b:f9:fc:2e:43:82:c6:c8:de:
         df:7c:7d:f2:e7:f0:ee:a2:db:c9:5d:aa:18:8f:74:12:c1:35:
         ae:9e:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org