Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3438203d3e20323636393938.roa
File:                     323830343a343639343a3a2f33322d3438203d3e20323636393938.roa (raw, json)
Hash identifier:          P0vk5yYdm047Ng2fBgtd+rvRYhdt4q/+HStwH7lPTyk=
Subject key identifier:   F2:DA:3F:DD:A9:39:7E:F3:69:EC:CA:9F:0D:20:72:77:EB:CD:65:67
Certificate issuer:       /CN=29ABB41290CDE571584628D4C4AA6E8153D223D0
Certificate serial:       20353A36994F44050FC0022A65689AD49660931A
Authority key identifier: 29:AB:B4:12:90:CD:E5:71:58:46:28:D4:C4:AA:6E:81:53:D2:23:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29ABB41290CDE571584628D4C4AA6E8153D223D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3438203d3e20323636393938.roa
Signing time:             Wed 16 Aug 2023 20:32:00 +0000
ROA not before:           Wed 16 Aug 2023 20:27:00 +0000
ROA not after:            Wed 14 Aug 2024 20:32:00 +0000
asID:                     266998
IP address blocks:        2804:4694::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:3a:36:99:4f:44:05:0f:c0:02:2a:65:68:9a:d4:96:60:93:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ABB41290CDE571584628D4C4AA6E8153D223D0
        Validity
            Not Before: Aug 16 20:27:00 2023 GMT
            Not After : Aug 14 20:32:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:2f:0b:78:82:f6:65:ff:01:e9:37:06:6e:
                    10:8c:15:f1:71:c8:a7:d4:96:12:cd:c3:a8:a9:c5:
                    4f:e8:49:2a:e8:3c:2c:dd:a2:14:d6:46:82:33:fb:
                    52:c5:03:6d:0a:55:a4:00:06:ee:8b:c4:7e:db:97:
                    0d:86:b8:65:da:20:c0:86:33:7e:45:d8:5a:4e:19:
                    ca:4b:d6:ef:77:f5:d7:57:24:8a:e2:ed:9a:ed:6e:
                    5a:f5:7e:cd:a9:21:1a:7e:92:d9:ea:ec:37:51:e7:
                    ae:a1:8d:9d:85:40:a2:1f:d2:1f:34:8f:24:86:51:
                    fe:5a:e2:54:e5:f2:26:98:d3:05:ec:b1:14:af:2d:
                    e3:39:43:09:45:3c:91:ac:1f:4e:a3:ae:85:de:00:
                    c7:46:6c:3b:71:24:4a:cf:7a:8a:de:8a:f2:bc:d2:
                    7f:40:15:f2:e9:a1:71:af:df:5e:22:20:ba:10:35:
                    8f:e9:fe:20:49:12:a4:8b:19:35:ac:d1:74:54:13:
                    6e:45:0c:54:03:a3:52:3f:9d:92:e8:77:74:61:4c:
                    c6:94:5d:d1:80:42:bd:5b:23:11:e3:b8:b0:46:a8:
                    8e:1a:34:01:20:19:da:aa:5e:ef:b3:af:58:f8:ff:
                    56:9b:01:01:30:4b:bf:ec:b2:16:aa:f2:28:cb:8c:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:3F:DD:A9:39:7E:F3:69:EC:CA:9F:0D:20:72:77:EB:CD:65:67
            X509v3 Authority Key Identifier:
                keyid:29:AB:B4:12:90:CD:E5:71:58:46:28:D4:C4:AA:6E:81:53:D2:23:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/29ABB41290CDE571584628D4C4AA6E8153D223D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29ABB41290CDE571584628D4C4AA6E8153D223D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3438203d3e20323636393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4694::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:01:77:bf:64:64:e0:25:8c:06:6c:1e:35:aa:21:c6:f8:
         21:1c:e9:ed:e8:77:67:d3:22:be:36:7f:2b:71:c8:0c:19:05:
         9f:95:4d:04:3b:73:2a:41:e6:a4:ac:84:ff:fa:57:ec:5f:bf:
         e7:ae:8d:58:0f:f9:8c:49:af:11:44:d8:ab:a1:ae:16:f5:b7:
         eb:11:c5:f2:f2:4b:c5:a9:16:8e:80:79:e5:37:ae:5b:48:b3:
         4b:a7:d0:50:e2:09:bc:90:e1:82:ce:a5:51:5c:e8:7a:7a:68:
         e8:fc:d6:a5:6e:8b:94:5d:7f:dd:d7:77:da:c0:3c:c9:06:15:
         85:97:e3:e7:02:b1:de:74:15:65:83:c2:d7:91:4b:1f:d2:a4:
         8e:8c:f0:dc:d0:4d:2c:1d:dd:21:d5:df:aa:ac:89:bd:00:da:
         d5:38:10:4f:b7:1a:21:85:72:e6:91:46:c2:fd:b8:db:fa:b5:
         84:bf:f1:01:17:74:69:a5:5e:70:f3:65:f2:44:3b:d6:3a:1e:
         81:a9:b4:ad:02:08:94:a8:be:08:07:ec:40:6c:eb:7c:a2:80:
         6e:90:54:db:17:f6:6c:f8:e9:df:81:5e:d9:a4:ee:46:d1:9b:
         02:61:78:2c:88:8e:2b:92:45:57:61:4c:e2:96:f5:6c:67:cc:
         a5:2c:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org