Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/323830343a323935383a3a2f33322d3336203d3e20323634303130.roa
File:                     323830343a323935383a3a2f33322d3336203d3e20323634303130.roa (raw, json)
Hash identifier:          kNqDciozhI+luHFWxXR6drOpfNQtzmHr1+oo5BV2fRc=
Subject key identifier:   16:D3:33:66:F0:E5:0C:0C:F4:A8:99:45:BE:E0:CE:5A:56:F3:76:3A
Certificate issuer:       /CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Certificate serial:       4B31808AA85EBE9C57F123C51D8AD2E34AE5E4F8
Authority key identifier: CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/323830343a323935383a3a2f33322d3336203d3e20323634303130.roa
Signing time:             Wed 17 May 2023 17:25:27 +0000
ROA not before:           Wed 17 May 2023 17:20:27 +0000
ROA not after:            Wed 15 May 2024 17:25:27 +0000
asID:                     264010
IP address blocks:        2804:2958::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:31:80:8a:a8:5e:be:9c:57:f1:23:c5:1d:8a:d2:e3:4a:e5:e4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
        Validity
            Not Before: May 17 17:20:27 2023 GMT
            Not After : May 15 17:25:27 2024 GMT
        Subject: CN=16D33366F0E50C0CF4A89945BEE0CE5A56F3763A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:c6:4e:30:ba:34:fc:72:19:b6:7c:92:29:
                    2d:c6:dd:84:5e:fe:39:93:61:06:d5:b2:3a:e2:fb:
                    8e:b1:e2:32:29:84:7b:6d:24:3e:f5:20:8f:88:6f:
                    91:e4:a0:9d:2b:72:59:8e:64:4b:b2:31:f2:35:86:
                    73:96:5e:cf:3b:3f:b2:6f:bc:10:d9:2f:78:7a:1e:
                    29:e0:ff:3c:ef:88:b5:18:48:5c:85:63:34:f2:ca:
                    09:8b:0d:b4:41:fb:d0:10:f5:fa:02:fd:2c:e4:ff:
                    96:6f:12:91:4a:c0:a6:25:86:1c:cb:03:76:4e:1f:
                    e9:a0:c7:e3:e8:bc:67:a7:fe:ef:08:6d:e2:3e:c3:
                    35:d6:47:e2:35:d3:e2:85:5d:11:7b:69:c4:b3:e9:
                    c7:c5:e6:20:3f:68:ba:1b:78:60:38:1b:32:c7:78:
                    31:03:63:23:74:61:31:9f:29:b7:7f:18:e0:1d:12:
                    30:8d:04:df:31:92:8a:b3:a4:dd:d4:94:59:84:7c:
                    be:fb:dc:3b:84:22:a4:90:07:f3:56:42:0a:bb:be:
                    0a:77:67:9e:c4:a7:b8:96:ef:28:19:61:84:95:85:
                    3f:33:45:26:84:d8:58:03:c0:0b:e1:be:de:a0:81:
                    f4:7e:67:b5:bd:a5:eb:40:ac:79:68:4d:56:2a:d3:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:33:66:F0:E5:0C:0C:F4:A8:99:45:BE:E0:CE:5A:56:F3:76:3A
            X509v3 Authority Key Identifier:
                keyid:CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/323830343a323935383a3a2f33322d3336203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2958::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:6c:96:6c:d5:4b:5a:0a:4c:cd:01:5c:65:a6:85:73:83:
         4a:be:4e:3c:13:4b:55:98:b2:56:ae:02:2c:dd:77:9a:bf:e7:
         48:26:00:c4:14:3e:6b:2f:1c:0b:c7:fb:b1:46:56:63:73:1c:
         cc:40:55:b2:8e:dc:fd:38:b6:43:23:97:73:4c:b1:80:57:bd:
         2b:97:98:cb:79:f2:ac:19:be:5a:e3:3f:3c:40:f5:b1:4d:4d:
         0b:ff:33:a0:06:47:67:2d:02:69:cf:e9:34:06:4a:b4:29:64:
         8c:e4:2c:cd:8b:6f:31:8f:74:0b:56:28:62:23:be:f2:48:19:
         00:c7:f6:88:3a:40:62:38:24:e9:5b:fb:6d:05:29:64:b2:f3:
         cd:b6:4d:71:72:79:53:e3:4c:9d:28:f7:8f:5b:3b:7f:72:22:
         06:e7:18:21:b2:00:8a:21:6b:1f:68:25:bd:cd:4e:28:ad:af:
         61:27:e9:00:0f:57:82:d0:29:33:cb:ca:80:f1:31:03:4f:de:
         75:8c:b6:3d:77:63:70:8d:4d:f9:aa:92:ae:63:0b:20:fd:ed:
         6d:50:06:b9:46:7d:d1:1c:0a:b2:b1:37:f3:9d:c6:3c:4d:48:
         85:da:b4:02:3c:39:b7:01:76:bd:f2:32:f5:80:ef:aa:34:1a:
         4b:42:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org