Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/323830343a313966633a3a2f33322d313238203d3e203631383330.roa
File:                     323830343a313966633a3a2f33322d313238203d3e203631383330.roa (raw, json)
Hash identifier:          BTAtml2tZ49FwfHog9JMQmiJTr2RPmdB2ZGAvXqwJ9c=
Subject key identifier:   89:4B:8B:79:24:EF:98:F8:B6:42:7F:5C:D1:5F:B8:F0:2C:54:D7:7F
Certificate issuer:       /CN=DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD
Certificate serial:       3E353690E0345135442DFB762C0FF1268FD0B572
Authority key identifier: DC:CD:F8:4E:FE:11:55:FA:05:FC:54:F9:B4:03:B0:C7:60:EC:57:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/323830343a313966633a3a2f33322d313238203d3e203631383330.roa
Signing time:             Fri 24 Nov 2023 13:40:27 +0000
ROA not before:           Fri 24 Nov 2023 13:35:27 +0000
ROA not after:            Fri 22 Nov 2024 13:40:27 +0000
asID:                     61830
IP address blocks:        2804:19fc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:35:36:90:e0:34:51:35:44:2d:fb:76:2c:0f:f1:26:8f:d0:b5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD
        Validity
            Not Before: Nov 24 13:35:27 2023 GMT
            Not After : Nov 22 13:40:27 2024 GMT
        Subject: CN=894B8B7924EF98F8B6427F5CD15FB8F02C54D77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:ca:1c:96:c7:48:b7:2d:b5:7c:eb:1b:9f:
                    5a:08:3f:97:3d:53:21:9e:ba:54:85:ad:8d:b9:86:
                    fd:76:61:06:e5:fe:83:7a:0f:57:6c:77:9d:44:fe:
                    48:ce:e0:fd:fe:22:7e:40:f6:ee:39:94:bc:4c:a7:
                    7a:ce:5a:87:b9:b0:f7:47:19:ed:c4:18:f5:8a:6c:
                    51:24:85:3b:dd:d9:18:80:54:89:6a:75:70:38:6e:
                    54:4d:d8:ad:fd:cc:6d:e4:6b:08:8a:0a:7f:23:df:
                    b8:77:db:bc:f6:11:6b:ed:b7:29:65:04:47:81:1c:
                    f6:44:11:6a:63:ac:3b:20:2e:ea:8b:12:e7:38:7c:
                    55:45:e8:9c:18:64:05:f1:23:1d:1e:9f:d3:ab:64:
                    b9:6e:22:2b:2b:02:d5:58:41:12:2f:55:be:31:77:
                    b3:5e:36:36:c8:e8:bc:c3:f4:53:db:88:dd:6b:f1:
                    3e:55:d8:57:db:3d:a4:ba:89:0b:18:9b:be:15:2c:
                    96:23:e6:9d:a3:1b:8a:f6:b6:50:a0:a6:58:a2:1c:
                    b2:3b:95:db:f1:b6:28:b2:48:1e:59:3e:e2:6a:4e:
                    b3:69:f9:fa:10:b7:42:9a:18:25:3b:ea:f3:44:94:
                    eb:42:41:96:13:a1:8d:43:06:a8:e8:e3:f5:13:07:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:8B:79:24:EF:98:F8:B6:42:7F:5C:D1:5F:B8:F0:2C:54:D7:7F
            X509v3 Authority Key Identifier:
                keyid:DC:CD:F8:4E:FE:11:55:FA:05:FC:54:F9:B4:03:B0:C7:60:EC:57:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/323830343a313966633a3a2f33322d313238203d3e203631383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:3c:12:8b:60:dd:c1:dd:7e:44:f5:15:4d:8b:39:52:4d:
         f9:f0:6f:dd:2b:6a:a6:0e:8c:d8:43:51:ec:57:b8:3b:e9:3d:
         2d:c2:2c:49:11:29:08:be:e2:c1:a7:5e:6c:c3:d9:d6:62:88:
         9c:82:eb:2f:a0:df:7d:8b:ef:85:a8:69:f8:9a:75:e7:a3:57:
         41:7e:e4:bb:10:e7:50:ce:ed:d5:80:f0:d7:61:08:0b:a0:23:
         dc:d4:22:a3:e9:53:49:37:2e:cc:6e:b2:f8:db:bd:08:98:27:
         83:8c:62:51:a6:ff:80:10:0a:70:af:db:e0:db:60:e3:49:45:
         23:0e:ea:31:51:d2:27:f5:a3:18:07:eb:4e:a5:ee:1b:4c:8a:
         86:de:bf:ab:44:1a:c1:be:f7:c5:e8:b5:73:47:f2:67:37:d5:
         ac:b1:96:81:fa:c3:9a:33:d0:35:7c:8f:56:0d:55:4e:7a:a9:
         82:09:8e:56:3e:81:ec:c7:bb:29:83:75:66:e3:eb:29:ee:5d:
         f8:f1:bc:2b:da:1e:0e:42:59:2a:23:59:82:e9:fd:2c:2b:ce:
         04:d9:c0:f4:c3:f1:f7:dc:38:d6:a7:54:f2:9b:cf:a5:2c:67:
         8f:6f:85:ff:6a:9c:c4:0e:44:4f:5b:a0:36:36:dd:08:04:0b:
         f7:02:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org