Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3a2f33322d3431203d3e20323635323832.roa
File:                     323830343a326437303a3a2f33322d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          Lx4QNq2zSpYBwVZGEp+SGvnkmmcsecek4dma9+rUI1A=
Subject key identifier:   41:98:6B:B9:D5:0B:67:7E:39:45:A2:50:7A:D4:73:D6:12:C3:EF:67
Certificate issuer:       /CN=DBFDA603F0466A44BAE263A23DC89D9D9B6FB17B
Certificate serial:       41CCD071663A2692B0CF8FA9EFF1F80DF375FCD4
Authority key identifier: DB:FD:A6:03:F0:46:6A:44:BA:E2:63:A2:3D:C8:9D:9D:9B:6F:B1:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFDA603F0466A44BAE263A23DC89D9D9B6FB17B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3a2f33322d3431203d3e20323635323832.roa
Signing time:             Fri 16 Jun 2023 15:10:32 +0000
ROA not before:           Fri 16 Jun 2023 15:05:32 +0000
ROA not after:            Fri 14 Jun 2024 15:10:32 +0000
asID:                     265282
IP address blocks:        2804:2d70::/32 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:d0:71:66:3a:26:92:b0:cf:8f:a9:ef:f1:f8:0d:f3:75:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFDA603F0466A44BAE263A23DC89D9D9B6FB17B
        Validity
            Not Before: Jun 16 15:05:32 2023 GMT
            Not After : Jun 14 15:10:32 2024 GMT
        Subject: CN=41986BB9D50B677E3945A2507AD473D612C3EF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3d:9b:89:fe:97:c9:44:00:68:3e:21:b9:31:
                    c2:6c:bd:d2:22:25:1e:87:12:49:47:88:45:4e:89:
                    c7:0b:06:a9:92:c1:54:46:5e:c2:62:e9:c6:3f:61:
                    5f:ac:ad:9f:5c:15:56:74:8d:9c:f0:75:b8:d6:0f:
                    92:60:12:c2:9e:60:e1:f6:66:2d:4e:11:25:19:48:
                    8f:b1:45:0a:6b:80:4e:12:59:38:f8:50:47:89:37:
                    dc:7f:c7:1a:c4:1a:d2:41:ae:93:f2:9c:f8:65:db:
                    7b:af:15:ac:af:a6:25:d7:5e:f8:48:fd:a0:f2:06:
                    92:70:15:74:ef:4d:67:77:68:35:dc:4e:c0:df:a9:
                    c3:21:ff:fb:c7:5f:a2:f5:95:33:35:d1:fb:6e:37:
                    d0:b0:9f:f6:0e:c0:50:9f:fe:0b:d0:fc:ee:d2:38:
                    a7:6c:bd:1d:aa:b5:83:f4:05:5a:ec:8e:1b:a9:a9:
                    4e:91:6c:b0:c9:a4:fb:4f:8e:d3:14:6b:31:09:df:
                    71:db:da:ed:8a:82:8a:2a:8f:c4:78:a0:42:28:27:
                    39:64:da:ca:8c:b0:49:3c:1d:18:20:5d:ea:ec:d3:
                    57:39:1a:0a:fe:89:93:20:b5:f8:f0:2d:2c:2a:50:
                    07:40:89:02:85:7e:1f:a9:cb:ff:e7:da:c1:d8:73:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:6B:B9:D5:0B:67:7E:39:45:A2:50:7A:D4:73:D6:12:C3:EF:67
            X509v3 Authority Key Identifier:
                keyid:DB:FD:A6:03:F0:46:6A:44:BA:E2:63:A2:3D:C8:9D:9D:9B:6F:B1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/DBFDA603F0466A44BAE263A23DC89D9D9B6FB17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFDA603F0466A44BAE263A23DC89D9D9B6FB17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3a2f33322d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:33:ef:8b:fe:c6:a0:64:ab:79:bb:62:ef:3f:8d:86:2c:d4:
         e4:d0:10:3a:18:be:a3:a1:e3:c3:d4:32:dc:fb:41:f9:3c:b4:
         20:2a:82:45:2e:a5:ce:f6:43:dd:1f:0f:93:a7:82:88:68:b1:
         00:8d:2b:4e:09:ad:ff:bc:e8:d2:41:b3:22:28:b7:59:54:15:
         81:bd:e9:73:80:27:e6:b7:a9:ab:cf:3f:d8:7e:74:b9:da:73:
         a4:08:74:fb:6f:52:72:99:66:fb:c0:1c:cf:da:6a:54:53:19:
         32:65:63:d8:36:39:e9:e5:9e:79:b3:75:cb:83:c4:16:d2:8a:
         32:be:6f:c0:b9:0f:b4:3e:ba:03:78:28:41:9e:fd:c7:22:9c:
         57:dd:46:56:68:f5:82:54:39:5c:79:2f:09:27:c7:f6:2b:52:
         0d:3a:d5:2e:c1:d6:75:13:7e:5d:9c:1b:55:01:12:91:75:18:
         f0:79:49:53:ca:48:41:9a:e3:fc:f5:26:bb:c7:5d:58:69:c0:
         ef:d1:3a:4b:3c:f3:fc:8e:6e:44:d5:51:04:67:08:9a:36:ce:
         5e:e8:9e:71:49:c0:15:24:64:6e:8a:bf:5e:78:98:96:c5:6c:
         a0:fc:c1:ad:fa:b4:0e:a2:fe:42:d8:70:92:1c:68:17:15:20:
         e9:af:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org