Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/323830343a326434633a3a2f33322d3336203d3e20323635323732.roa
File:                     323830343a326434633a3a2f33322d3336203d3e20323635323732.roa (raw, json)
Hash identifier:          rs8MOaVCEuLuawgcbCLPr5LAuSELBnYkhwVWobwnQII=
Subject key identifier:   7D:52:B1:B9:3B:7B:32:45:EC:F1:1D:69:37:0E:84:C6:23:F2:C4:74
Certificate issuer:       /CN=DBBE4703A67772643D7AC2C210F961FBF106CA6A
Certificate serial:       503FF44103EEF15EDCC9A0162A3D540BAB90538D
Authority key identifier: DB:BE:47:03:A6:77:72:64:3D:7A:C2:C2:10:F9:61:FB:F1:06:CA:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/323830343a326434633a3a2f33322d3336203d3e20323635323732.roa
Signing time:             Mon 10 Apr 2023 21:58:19 +0000
ROA not before:           Mon 10 Apr 2023 21:53:19 +0000
ROA not after:            Mon 08 Apr 2024 21:58:19 +0000
asID:                     265272
IP address blocks:        2804:2d4c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:f4:41:03:ee:f1:5e:dc:c9:a0:16:2a:3d:54:0b:ab:90:53:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBBE4703A67772643D7AC2C210F961FBF106CA6A
        Validity
            Not Before: Apr 10 21:53:19 2023 GMT
            Not After : Apr  8 21:58:19 2024 GMT
        Subject: CN=7D52B1B93B7B3245ECF11D69370E84C623F2C474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:4f:c2:a4:72:bd:15:b5:7b:3f:20:b9:0f:
                    d5:86:25:c5:3d:15:1f:0b:8a:db:73:5c:38:31:57:
                    8b:71:b8:48:17:46:47:0f:59:99:ff:de:42:09:e5:
                    c8:d9:a8:1b:a6:a3:80:3f:9b:68:c5:17:d2:b9:c4:
                    64:13:62:9b:3f:4d:ee:5e:3f:19:87:83:9b:8a:2e:
                    b5:cf:1c:50:9f:21:cb:7d:e5:0f:b5:58:4d:60:20:
                    31:93:84:05:4a:42:1f:95:01:66:fa:3a:56:14:6c:
                    a3:8c:75:78:a6:54:4b:94:bc:1f:1a:51:c2:80:b6:
                    08:63:84:8a:20:21:39:3e:3d:a0:b0:6f:31:df:b7:
                    2a:60:3d:ac:90:c6:ae:39:fe:68:61:cb:b2:6c:82:
                    55:74:80:bd:74:ba:35:89:51:7b:58:3f:f4:65:a1:
                    fc:f7:f2:f6:07:c8:42:79:8d:00:42:b5:e7:62:69:
                    8b:a9:03:1f:42:3c:ec:ca:c2:3f:33:27:f2:05:89:
                    d1:df:43:e3:89:58:bd:d2:50:33:8e:2f:c5:10:ee:
                    6d:55:29:a4:45:03:20:91:e2:2f:ff:71:41:ad:ed:
                    bd:9e:00:3c:2d:a0:44:19:d6:1b:78:80:20:fe:f3:
                    af:f5:c0:13:84:90:fb:75:9f:9e:10:2b:13:1e:0b:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:B1:B9:3B:7B:32:45:EC:F1:1D:69:37:0E:84:C6:23:F2:C4:74
            X509v3 Authority Key Identifier:
                keyid:DB:BE:47:03:A6:77:72:64:3D:7A:C2:C2:10:F9:61:FB:F1:06:CA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/323830343a326434633a3a2f33322d3336203d3e20323635323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:87:ac:e4:4f:ab:75:f5:50:6c:69:0e:3f:72:0a:91:06:
         af:13:a6:79:ba:65:cc:53:5c:31:8d:17:f4:00:1c:9d:91:e1:
         3d:5a:ab:df:19:e5:6d:1e:c0:58:06:be:f0:7d:ae:2f:50:33:
         7b:db:9f:16:00:5d:a5:ea:d3:4d:e4:f8:97:e2:ef:9d:18:09:
         a0:fe:f9:e4:c2:8e:e8:12:fa:db:20:44:ce:92:18:f4:ef:64:
         bd:5a:85:64:bc:bc:9b:b4:ae:fc:42:a0:e9:0c:e2:55:01:b3:
         e5:20:6e:8a:c5:47:e8:76:55:48:06:69:c3:c0:1b:d4:73:cc:
         3b:84:38:3c:48:c2:72:53:48:86:c4:5f:91:5c:01:21:fc:9e:
         44:e6:75:58:1d:23:0a:3f:e2:f4:72:c5:63:cc:88:5f:6f:53:
         17:43:a7:73:d8:6a:f8:ef:af:fc:6a:b6:1b:3d:ba:c4:3f:92:
         45:0e:b3:61:1b:62:5f:d8:ef:2c:7b:9d:6e:8d:6f:86:d8:fa:
         00:ec:5a:9c:35:42:6e:42:51:09:ae:79:af:5e:b1:bc:95:c6:
         49:65:fa:b2:1d:f6:e6:b2:d1:a4:e1:38:97:67:14:a3:a0:63:
         6e:41:c3:1e:18:7d:33:10:f5:41:d2:57:d0:46:05:5b:df:6c:
         61:85:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org