Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
File:                     323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa (raw, json)
Hash identifier:          +gudfr8lc8GQi4RKv7nBnefIAC6zwkgzTqwGoTBtcek=
Subject key identifier:   D3:E2:87:95:E4:D2:57:35:B0:BA:54:56:6F:54:4E:23:94:21:C1:AA
Certificate issuer:       /CN=39B0A79080E6A51773F6AE71E043B42C04011838
Certificate serial:       6AD0AB37134D057D4881E6D4D83D067AFBA3B209
Authority key identifier: 39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
Signing time:             Fri 27 Oct 2023 18:34:54 +0000
ROA not before:           Fri 27 Oct 2023 18:29:54 +0000
ROA not after:            Fri 25 Oct 2024 18:34:54 +0000
asID:                     269555
IP address blocks:        2804:6664:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d0:ab:37:13:4d:05:7d:48:81:e6:d4:d8:3d:06:7a:fb:a3:b2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B0A79080E6A51773F6AE71E043B42C04011838
        Validity
            Not Before: Oct 27 18:29:54 2023 GMT
            Not After : Oct 25 18:34:54 2024 GMT
        Subject: CN=D3E28795E4D25735B0BA54566F544E239421C1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fe:02:5e:9c:94:2a:16:99:ee:6a:9c:2a:65:
                    f0:a4:b4:36:a9:c8:11:78:59:80:62:d4:05:31:07:
                    f2:ff:38:de:19:2a:d5:de:38:f8:2c:63:c5:ad:ed:
                    9b:1f:4f:fe:1c:92:7b:7d:58:47:ba:03:c2:8e:f3:
                    9e:ce:e5:8a:6f:2d:0a:a0:96:c2:00:72:fd:c0:dd:
                    9a:c3:cf:8e:df:cc:94:f3:4e:4c:66:b3:75:22:c3:
                    8a:7e:82:e5:4b:41:71:4f:d7:af:e9:04:c6:70:cc:
                    2f:37:0c:8b:fe:08:7e:3c:f8:bf:96:92:6b:2a:e6:
                    5a:08:33:ff:67:82:cc:65:d4:56:50:cd:40:92:cf:
                    ce:ac:a0:17:99:c4:db:93:80:c0:c2:01:4e:53:90:
                    88:8c:97:45:c4:61:56:e3:eb:ed:e9:ca:1a:95:22:
                    a9:c4:d2:a9:7d:22:a5:25:b7:c9:17:5d:e1:81:d0:
                    82:7e:7d:5b:12:1c:7e:5c:f1:d6:57:6e:c1:03:80:
                    be:96:c8:99:2e:59:c8:46:d2:1a:62:84:51:7f:b2:
                    81:12:38:e3:bb:13:b0:5e:d9:12:9f:86:58:0f:84:
                    27:a1:6d:d4:4e:99:1e:84:c5:69:8a:bd:ee:90:2e:
                    36:4e:3b:7a:1e:95:34:c7:03:91:75:96:6c:bb:ee:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E2:87:95:E4:D2:57:35:B0:BA:54:56:6F:54:4E:23:94:21:C1:AA
            X509v3 Authority Key Identifier:
                keyid:39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/39B0A79080E6A51773F6AE71E043B42C04011838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6664:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d0:71:38:40:b9:02:bb:f4:d3:29:06:ff:f8:06:f7:10:00:79:
         69:54:7c:b5:8b:42:fc:6b:0f:ae:f7:9a:7e:fe:eb:19:c7:4a:
         b1:79:48:d8:2b:0e:43:c6:6b:67:f6:79:17:11:bb:4f:a2:35:
         e1:26:6b:14:56:89:f8:6a:a5:a8:e4:82:41:20:52:36:ea:0e:
         ae:98:82:5a:c9:f1:13:66:4f:79:cc:cc:3a:38:9d:cf:13:06:
         21:0a:cf:4b:e8:f8:de:2b:24:b8:a8:77:d5:46:2d:1f:05:e2:
         eb:63:3d:b2:33:68:d9:85:4f:d8:05:b2:33:2e:f3:62:ba:ad:
         49:68:75:1e:22:d0:83:eb:88:65:a2:16:a9:85:65:c7:4e:42:
         e1:3c:76:e8:9f:3f:e7:f5:43:76:b1:9b:99:64:7a:92:55:8d:
         a2:fd:e3:c1:d7:1e:9d:d4:8d:ea:c9:5f:a7:a0:44:6e:27:41:
         91:67:cc:fa:71:02:0d:85:31:32:04:05:49:b0:3e:cd:05:a5:
         42:40:d6:da:82:fa:8f:21:02:56:b5:a0:e0:d6:e0:00:75:d0:
         60:36:4b:84:ea:4a:4c:c0:a9:88:85:28:9d:fa:b0:41:5c:5e:
         36:1d:0a:ab:01:cd:f5:78:17:6d:9c:c2:78:2e:ea:45:2b:59:
         3e:57:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:58 2024 by rpki-client on console-ams.rpki-client.org