Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33332d3333203d3e20323731343536.roa (raw, json)
Hash identifier:          dHOaFwfNtslqo3NYx2SAb7EDXxGHGDiyKQiZi9GYm5w=
Subject key identifier:   DC:B7:BD:F7:E3:A3:8D:DF:5D:B0:CD:85:66:F0:F9:42:FF:79:BD:28
Certificate issuer:       /CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
Certificate serial:       12EF5884EF9F188232C8391ED04253A736F8CAAA
Authority key identifier: DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
Signing time:             Wed 21 Feb 2024 20:16:57 +0000
ROA not before:           Wed 21 Feb 2024 20:11:57 +0000
ROA not after:            Wed 19 Feb 2025 20:16:57 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:58:84:ef:9f:18:82:32:c8:39:1e:d0:42:53:a7:36:f8:ca:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
        Validity
            Not Before: Feb 21 20:11:57 2024 GMT
            Not After : Feb 19 20:16:57 2025 GMT
        Subject: CN=DCB7BDF7E3A38DDF5DB0CD8566F0F942FF79BD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:33:c7:ec:ac:3c:a7:45:d6:98:51:ed:ed:
                    4e:80:44:1e:1a:9f:39:f0:18:a7:43:90:dc:bf:56:
                    76:60:f5:3a:f9:bb:a9:2a:4b:33:25:7d:ad:3b:4b:
                    7b:cf:e5:64:5e:74:3b:91:9a:d5:af:e4:ba:3c:22:
                    bf:02:80:bf:51:d0:8a:13:42:a3:75:11:19:d6:ac:
                    03:96:44:54:68:23:96:a1:93:9f:51:0b:67:23:be:
                    d9:a4:ec:80:e6:18:89:94:79:ec:9b:47:4c:5b:29:
                    0e:a1:e8:b1:00:1b:5b:94:46:0a:c7:35:25:ad:21:
                    80:b7:98:28:69:67:4a:0e:66:1a:0e:05:9d:24:3e:
                    ad:01:e5:ea:5a:a1:9e:6a:f7:69:63:87:76:83:bf:
                    03:67:d8:80:58:f9:92:43:b3:60:6b:fa:cc:fe:47:
                    ef:f7:bd:01:20:04:ce:63:92:82:4d:1b:57:b6:e3:
                    ff:85:60:22:7b:55:5c:81:2b:8f:4e:c6:53:29:d8:
                    93:be:91:16:03:0d:bd:f1:c9:59:7d:b6:30:5e:ee:
                    9b:89:7d:29:fa:81:ed:b6:a7:24:a9:b3:f4:33:60:
                    26:e3:c9:42:91:80:db:9b:e1:08:31:e4:fa:1e:86:
                    82:4c:54:66:21:e0:ad:28:53:1a:dd:d2:aa:55:27:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:BD:F7:E3:A3:8D:DF:5D:B0:CD:85:66:F0:F9:42:FF:79:BD:28
            X509v3 Authority Key Identifier:
                keyid:DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:b9:eb:5e:f2:79:c6:96:62:71:91:84:a3:2b:99:66:8b:
         14:f2:a9:e1:e0:9d:88:c8:12:36:b9:ce:f9:a6:99:10:a9:69:
         c5:5b:f8:97:ed:37:d3:c0:d1:b5:fb:44:a2:6d:ef:19:5c:c2:
         44:71:54:5f:14:67:d7:53:43:4d:df:f0:3f:15:b5:4f:90:1b:
         7e:01:22:9e:c2:a3:aa:7e:ba:76:5c:97:69:f9:f3:10:87:ba:
         aa:0a:27:9a:c2:d5:08:e8:9f:c6:56:de:79:e5:e4:b7:72:26:
         c0:27:28:c7:55:35:a1:d0:8a:80:cc:94:57:d9:d2:c7:35:79:
         2d:90:c8:73:36:80:c6:97:03:c7:33:ab:8a:9e:5b:22:2d:fc:
         9c:b2:24:e0:c4:e0:75:3b:d5:05:76:c5:23:6d:8b:9d:1e:0f:
         f4:fa:ca:32:ea:55:97:d8:1a:dd:92:c4:3c:6e:05:f2:b7:8d:
         c2:03:30:fd:9e:c1:3c:29:ec:6d:75:54:67:4a:ae:48:8d:49:
         15:2d:2d:48:7a:b5:11:60:d3:0f:62:dd:84:54:04:09:8f:cc:
         14:43:8d:69:3e:c1:a5:52:9e:99:5b:10:f8:1a:3c:43:03:c1:
         08:2a:db:1c:f0:1a:d9:c4:a1:ad:e6:3b:a7:0c:85:b0:6c:c1:
         fb:a2:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org