Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa
File:                     323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (raw, json)
Hash identifier:          fAYuQlnS5Q9JijAsScIAW7/gKntZ7I7ql9UpDGxf8Q0=
Subject key identifier:   36:71:BA:BE:D4:75:2A:40:95:DC:FA:DB:E3:E4:94:87:35:18:39:3D
Certificate issuer:       /CN=A071F7D70C7997D600B4290FBC57847D6F3C0F2A
Certificate serial:       3908CF356CD6040E30E45DEE25D553D1321FAED9
Authority key identifier: A0:71:F7:D7:0C:79:97:D6:00:B4:29:0F:BC:57:84:7D:6F:3C:0F:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa
Signing time:             Thu 22 Feb 2024 02:16:31 +0000
ROA not before:           Thu 22 Feb 2024 02:11:31 +0000
ROA not after:            Thu 20 Feb 2025 02:16:31 +0000
asID:                     269018
IP address blocks:        2804:5e34::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:cf:35:6c:d6:04:0e:30:e4:5d:ee:25:d5:53:d1:32:1f:ae:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A071F7D70C7997D600B4290FBC57847D6F3C0F2A
        Validity
            Not Before: Feb 22 02:11:31 2024 GMT
            Not After : Feb 20 02:16:31 2025 GMT
        Subject: CN=3671BABED4752A4095DCFADBE3E494873518393D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:29:c4:a6:e8:c7:b7:6b:39:00:8d:b9:54:
                    6c:6a:3a:01:12:b1:f5:2b:c0:4c:db:a0:05:5b:41:
                    8e:3c:d2:f2:54:9c:4d:e9:6e:77:09:38:af:5e:fe:
                    8d:a6:a3:82:13:61:82:08:3e:52:c4:cf:8d:b7:6d:
                    69:32:f9:8e:31:7f:94:1e:bf:5f:3e:af:fb:f0:a5:
                    dd:f3:c2:f7:9e:a6:5c:5a:b7:7b:66:1e:be:e7:f0:
                    7e:05:e4:36:d8:0a:ee:61:6e:a4:42:ac:0f:ba:36:
                    6d:d2:8d:ab:96:9a:ae:ff:41:d9:57:e5:1b:d6:a6:
                    1a:5c:6c:9c:9a:7e:12:02:9e:99:2b:38:6e:d7:86:
                    39:29:da:ef:20:5f:49:89:c0:b5:2d:7f:b7:9d:7e:
                    34:7c:85:5d:5e:95:42:82:39:46:fb:7e:20:98:a2:
                    ee:c5:d2:43:03:53:77:90:0e:06:b2:75:fe:ca:54:
                    96:5a:58:b2:6e:3c:4d:0a:13:35:94:9b:b3:ad:52:
                    b7:09:ab:96:75:bb:0f:da:0e:ae:66:f5:4b:5d:9a:
                    ae:42:6f:f2:bd:08:b5:b4:96:4e:95:56:a5:03:fc:
                    40:f8:45:94:ef:4c:89:69:d8:41:64:11:5b:ab:e9:
                    e8:67:f4:e2:9c:5e:d1:73:67:c3:43:28:8e:cb:ff:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:71:BA:BE:D4:75:2A:40:95:DC:FA:DB:E3:E4:94:87:35:18:39:3D
            X509v3 Authority Key Identifier:
                keyid:A0:71:F7:D7:0C:79:97:D6:00:B4:29:0F:BC:57:84:7D:6F:3C:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:65:c7:7e:46:11:7a:f6:0e:10:37:21:f5:49:c5:83:2b:
         c7:6e:8f:69:01:cc:9f:ab:ec:0a:22:e6:c8:4c:b5:62:6f:3f:
         42:a9:0b:6a:10:87:4b:d4:45:7a:04:36:6f:8c:1c:a0:60:79:
         93:cf:48:99:fc:12:04:ac:e3:7c:cf:a4:a4:d8:4c:06:2c:dd:
         b5:4b:2f:f1:a1:f4:16:44:f7:94:c8:c4:80:55:71:64:24:28:
         9d:c0:21:30:fa:5b:58:61:d4:7d:26:c6:37:46:97:0b:8a:50:
         b7:bc:43:41:cc:f9:72:bc:ac:68:5f:49:d1:f1:dc:60:16:0a:
         9e:f5:60:ed:d9:a5:7f:6d:61:0c:bf:11:d8:1b:ec:70:ec:98:
         0d:57:dc:15:b9:dd:d1:3c:5c:4a:cf:c3:c4:0d:3e:1d:0c:d7:
         04:4f:41:fe:28:f7:c1:74:a6:fe:a7:41:7c:25:e7:fa:9c:35:
         05:a3:5f:37:77:90:26:8f:1d:29:4b:1f:82:af:70:0c:c7:2f:
         82:3a:e5:15:68:8c:fa:16:56:fa:d4:ee:56:65:29:ba:87:f8:
         67:62:3d:77:88:26:00:be:d6:a9:df:e2:35:b1:72:0b:c4:eb:
         32:6b:2a:99:99:25:bc:d5:31:8e:28:4a:14:89:3f:22:eb:67:
         56:ab:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org