Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a3a2f33332d3333203d3e20323632393432.roa
File:                     323830343a6533383a3a2f33332d3333203d3e20323632393432.roa (raw, json)
Hash identifier:          4BcqWn2aRNS86jvXHk9gZNKHDAfvPMv/fPEUaZOrTPM=
Subject key identifier:   97:09:76:30:D2:82:0E:C2:8F:76:EC:4C:18:F7:45:54:94:5F:99:82
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       571BA9C34B10B9778A89F12CD61D495CA1EA78D1
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a3a2f33332d3333203d3e20323632393432.roa
Signing time:             Fri 24 Nov 2023 14:04:48 +0000
ROA not before:           Fri 24 Nov 2023 13:59:48 +0000
ROA not after:            Fri 22 Nov 2024 14:04:48 +0000
asID:                     262942
IP address blocks:        2804:e38::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1b:a9:c3:4b:10:b9:77:8a:89:f1:2c:d6:1d:49:5c:a1:ea:78:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Nov 24 13:59:48 2023 GMT
            Not After : Nov 22 14:04:48 2024 GMT
        Subject: CN=97097630D2820EC28F76EC4C18F74554945F9982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:49:5c:9f:e8:2f:89:24:9f:49:e5:c2:7f:
                    f3:be:17:e4:4d:28:c7:e6:c5:05:9c:60:1c:8e:a7:
                    b3:6b:8b:10:eb:66:37:0c:68:37:51:7c:11:9e:36:
                    7f:39:e6:b2:66:f8:43:9a:f1:b1:6d:04:69:88:4e:
                    42:7f:91:0f:a5:05:14:ea:c3:9a:3d:a7:d2:43:6b:
                    8c:72:e8:44:a5:6b:30:04:02:ff:e0:63:39:79:4a:
                    07:e1:66:69:52:fe:d6:72:b9:16:ca:41:65:17:f4:
                    5f:ad:21:cc:ae:07:8b:a0:62:2f:14:b3:b7:76:ae:
                    39:69:15:a9:f0:b3:ce:5b:9d:c7:17:c6:12:0b:4d:
                    8c:01:07:e2:dc:9e:82:54:40:d4:52:fe:a4:ad:81:
                    8c:dc:95:f5:03:d8:65:b3:29:e8:c0:41:72:c8:91:
                    1a:be:b3:43:ea:5b:cf:75:9b:9e:a6:17:9b:e6:c2:
                    a1:bc:5c:1f:cb:50:c3:eb:ed:1b:0f:24:5d:82:0b:
                    a4:13:31:50:23:5f:30:82:4b:6c:87:b5:60:d2:cf:
                    3e:ec:60:15:8a:7a:14:19:88:0f:94:6b:53:39:04:
                    f5:61:fc:a8:80:22:da:4c:0f:5c:f1:47:a2:68:5a:
                    fe:46:74:b5:fc:fb:b9:c4:2a:51:af:99:01:96:2b:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:09:76:30:D2:82:0E:C2:8F:76:EC:4C:18:F7:45:54:94:5F:99:82
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a3a2f33332d3333203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38::/33

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:c6:e1:f3:53:61:b8:96:b0:ff:c1:9a:a1:7f:9c:6e:9e:
         e0:ae:93:98:3c:3c:0c:d9:56:77:5b:7b:3d:73:0b:44:a7:ce:
         35:64:b7:8c:ea:5c:3f:c0:c2:e9:74:74:17:4b:53:e8:fc:75:
         3f:59:b7:03:e2:98:65:d0:87:bd:38:15:23:cc:1f:8f:a7:69:
         34:e2:11:c5:b9:66:a1:e2:e7:4b:eb:50:f8:c4:e9:03:e5:c0:
         5d:d6:b6:b8:56:81:36:27:d9:98:04:60:cc:66:bd:9c:40:5c:
         51:f5:e7:ab:d9:7d:b8:28:64:d0:05:26:7e:85:17:1c:9a:dc:
         38:8e:b8:47:43:65:68:3e:5a:c7:c1:91:9c:a4:62:1f:cf:9d:
         ef:6a:a1:2b:9e:2a:fe:62:4a:15:b5:6a:85:73:2b:d4:1b:82:
         84:a9:c1:25:6a:7f:64:87:82:ab:e6:1e:c9:3e:d5:53:04:96:
         ee:d6:0a:25:3f:72:c2:d8:82:e7:4d:1a:b1:af:6a:1a:e2:26:
         ab:60:16:ef:cf:4c:8e:cb:68:04:4f:96:31:b3:c2:a3:57:45:
         94:57:50:e8:c4:bb:8c:1d:06:7d:6c:e0:eb:6f:6c:d1:56:38:
         64:a9:24:db:0a:27:b4:66:eb:c2:9e:61:0c:97:fb:f3:bd:cb:
         38:78:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org