Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          nL39HwbuoV9rFcbz0aaqvrNNWepPyo9zbf2jixLdP7w=
Subject key identifier:   D2:C5:33:E3:A4:E0:A0:4A:E4:C5:3E:64:FA:3C:D5:00:5F:C7:1E:45
Certificate issuer:       /CN=E8214DF93C84952C85789DC14F08528DEBA22E43
Certificate serial:       638C06CE32FCA762F2181A0AA08CFAEC0EEF1A37
Authority key identifier: E8:21:4D:F9:3C:84:95:2C:85:78:9D:C1:4F:08:52:8D:EB:A2:2E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8214DF93C84952C85789DC14F08528DEBA22E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Tue 07 Nov 2023 15:10:48 +0000
ROA not before:           Tue 07 Nov 2023 15:05:48 +0000
ROA not after:            Tue 05 Nov 2024 15:10:48 +0000
asID:                     269514
IP address blocks:        2804:65c8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8c:06:ce:32:fc:a7:62:f2:18:1a:0a:a0:8c:fa:ec:0e:ef:1a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8214DF93C84952C85789DC14F08528DEBA22E43
        Validity
            Not Before: Nov  7 15:05:48 2023 GMT
            Not After : Nov  5 15:10:48 2024 GMT
        Subject: CN=D2C533E3A4E0A04AE4C53E64FA3CD5005FC71E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:8b:3a:98:a4:a3:33:a7:26:9f:4e:4c:33:
                    f8:e8:31:ca:87:44:5f:53:ea:0e:1d:0d:2b:6b:77:
                    bc:e0:26:38:4f:45:98:f1:1b:cd:29:8b:8e:c4:4e:
                    d8:83:f1:5a:17:b3:49:7c:f8:9d:82:dc:86:d7:97:
                    72:17:95:2d:65:4d:e6:d7:bc:b9:2d:2c:da:77:42:
                    d9:fc:fe:b7:e5:4b:e7:f6:7e:d1:cb:73:e6:ea:1f:
                    02:0e:28:1f:97:18:ff:de:4f:ea:bc:ae:45:3b:59:
                    55:25:fc:18:ed:92:ef:dd:9e:e7:92:66:bf:1b:bf:
                    a9:50:e9:f8:9f:b9:3d:8a:d8:87:67:28:47:58:37:
                    6e:ad:73:9d:ed:36:4e:8c:55:1e:f4:13:08:6e:8b:
                    a8:1d:a4:8d:6b:57:5e:ad:b5:52:cc:d6:2a:73:6e:
                    a6:65:b8:c1:2d:f4:4d:61:3b:39:10:49:68:7f:4a:
                    92:78:a9:2e:16:1b:72:62:4b:54:ca:47:23:e3:1b:
                    3f:77:70:75:ca:c9:f6:37:d4:03:66:45:71:04:45:
                    b4:52:77:82:2a:9f:35:54:1b:d3:ef:02:a7:9c:47:
                    70:ba:7f:7f:72:69:d1:6e:eb:bf:13:17:da:1c:e1:
                    3c:bc:6d:fb:99:8c:43:6e:b9:a7:b4:05:9d:aa:8b:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C5:33:E3:A4:E0:A0:4A:E4:C5:3E:64:FA:3C:D5:00:5F:C7:1E:45
            X509v3 Authority Key Identifier:
                keyid:E8:21:4D:F9:3C:84:95:2C:85:78:9D:C1:4F:08:52:8D:EB:A2:2E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/E8214DF93C84952C85789DC14F08528DEBA22E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8214DF93C84952C85789DC14F08528DEBA22E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:85:47:ec:7a:46:46:11:2a:0b:61:74:67:78:6f:2f:82:
         b3:f5:f5:88:57:5c:f9:0a:09:3b:03:3f:a6:85:25:ed:90:ed:
         40:dd:19:aa:10:6e:b9:95:5f:9b:de:1e:30:14:de:72:a2:a0:
         61:38:47:54:51:f9:a7:45:12:5c:f1:ab:55:cd:54:07:c6:ac:
         05:e1:41:74:c2:42:6c:53:64:62:0a:e0:bb:8c:79:ac:91:d8:
         1f:f3:e7:75:12:83:8f:f6:6f:31:81:61:32:d0:79:8f:57:b0:
         f4:1e:b1:6d:66:bb:7a:52:1c:6c:ec:44:23:df:8d:41:5b:85:
         e1:0a:e2:58:0f:35:d9:27:00:ce:1d:2b:01:7f:be:8b:11:69:
         db:12:9e:be:26:e2:e5:fe:f9:b6:89:04:e8:12:7b:91:e3:c0:
         b2:fb:e0:a7:6b:9c:36:e6:d5:f9:e3:52:c3:ec:c4:e7:05:64:
         c4:97:d2:98:70:6c:02:2a:a9:88:6a:4f:43:4c:37:52:3b:e2:
         78:ef:c0:dd:36:76:4a:63:ac:de:23:0b:ff:5e:1e:c7:f9:2a:
         83:29:79:17:dc:c4:53:7d:c0:c1:93:c9:4c:f4:cd:4b:03:17:
         b8:eb:84:d3:99:51:9c:46:ef:b8:6e:b5:5a:a3:b8:83:a6:ad:
         29:04:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org