Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa
File:                     323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa (raw, json)
Hash identifier:          viSjv4iXy3/KnT6RKABw7DN8UXaXjAwc50ZiAjrtUdk=
Subject key identifier:   38:4E:17:53:7B:99:40:70:AB:38:8D:70:EC:4F:60:A0:D1:D2:5C:34
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       7D0E6586BB4F70487C579A11B7304FDF0B262610
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa
Signing time:             Fri 24 Nov 2023 14:04:48 +0000
ROA not before:           Fri 24 Nov 2023 13:59:48 +0000
ROA not after:            Fri 22 Nov 2024 14:04:48 +0000
asID:                     262942
IP address blocks:        2804:e38:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:65:86:bb:4f:70:48:7c:57:9a:11:b7:30:4f:df:0b:26:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Nov 24 13:59:48 2023 GMT
            Not After : Nov 22 14:04:48 2024 GMT
        Subject: CN=384E17537B994070AB388D70EC4F60A0D1D25C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:6d:bf:95:1a:44:84:a6:be:87:45:ed:cf:
                    b5:bc:0d:b1:1a:18:63:7b:9a:b6:38:e1:0d:71:99:
                    a8:e3:f4:99:61:8e:0a:c3:07:7b:06:63:57:7b:52:
                    7f:84:f4:48:c9:99:23:0b:09:74:d7:9d:38:ad:09:
                    6c:2d:4b:f5:5a:32:98:91:11:b0:6b:dc:ce:4e:82:
                    46:e4:56:b0:fc:45:4f:ef:a8:7a:3d:b8:28:99:1f:
                    f2:a3:15:d9:f6:6f:89:14:e1:db:f9:57:f7:6b:57:
                    ea:6d:9c:11:8a:f6:2a:13:2e:a9:13:df:34:0f:23:
                    28:7a:8e:62:ef:be:e2:98:34:d4:a0:58:1d:70:3a:
                    61:cd:16:ff:6a:52:0e:bc:eb:58:cd:5d:27:de:ec:
                    32:0a:b7:67:25:42:af:11:94:26:4e:76:02:8b:01:
                    ff:df:a6:91:25:ca:4a:ae:f8:02:d3:dd:a4:28:66:
                    d7:4b:e2:d2:bc:e7:dc:e1:80:db:ba:01:74:33:db:
                    b9:ab:58:f4:fe:42:7e:63:28:e3:c4:45:87:20:28:
                    e8:13:8d:98:cd:d4:bb:47:cd:8c:73:c2:76:be:43:
                    c7:35:95:31:bf:09:70:9d:fa:60:da:51:fc:b8:75:
                    aa:e4:c2:92:77:a7:17:da:1f:f0:fc:6b:94:03:9d:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4E:17:53:7B:99:40:70:AB:38:8D:70:EC:4F:60:A0:D1:D2:5C:34
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:2a:b2:4e:3f:4f:49:d3:e6:e1:34:7c:67:65:4b:52:40:
         c2:1e:6f:61:46:ce:75:cf:c3:ab:44:c2:ab:50:3b:66:28:2c:
         ae:86:ed:b0:f8:b2:bb:56:94:7e:80:52:18:fd:03:77:b3:e8:
         42:57:45:2d:ff:6f:d5:e2:e5:03:81:63:36:f7:27:b5:05:db:
         3c:e0:a6:5f:7e:89:32:0f:54:de:ce:41:87:15:89:da:6a:00:
         4e:d6:c5:b6:cb:17:4c:94:5b:da:e9:ab:e3:3b:46:fa:41:ad:
         56:83:e6:eb:09:9d:dc:33:ee:6a:50:a9:a7:80:a8:01:b6:00:
         f4:45:8a:bc:2d:4e:11:f8:3c:6d:27:1c:c0:4b:f3:14:d8:df:
         0b:4c:04:48:12:e0:71:f2:92:d4:fc:1c:5a:f3:1c:c7:e4:1e:
         3a:81:f5:7a:0e:26:a0:58:db:e9:4e:a4:94:09:dd:36:21:01:
         7c:de:f0:a9:15:d3:52:23:2b:0d:c2:dd:f2:5a:af:10:7d:b6:
         29:1f:69:9e:f8:aa:eb:2e:86:4b:14:cd:37:c5:20:2f:b2:74:
         18:bf:ad:bb:ec:9a:bf:8b:9a:7f:01:16:3e:ba:2a:2a:88:91:
         c7:ca:2f:fb:3a:77:8c:38:57:89:42:fe:16:e4:f5:0f:65:de:
         29:f8:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org