Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3334203d3e20323635333937.roa
File:                     323830343a333337343a3a2f33322d3334203d3e20323635333937.roa (raw, json)
Hash identifier:          oBe048Yl7gZfH0QHB9ychcEj1u6iJZw01FSWv7iaEzM=
Subject key identifier:   89:B4:F3:7C:0C:C8:0C:CC:01:62:C5:14:4B:55:94:1F:A5:65:7E:A2
Certificate issuer:       /CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
Certificate serial:       299E774FAB88796C0079AACE6C3F0884A3761AD2
Authority key identifier: 08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3334203d3e20323635333937.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     265397
IP address blocks:        2804:3374::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9e:77:4f:ab:88:79:6c:00:79:aa:ce:6c:3f:08:84:a3:76:1a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=89B4F37C0CC80CCC0162C5144B55941FA5657EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:20:cc:61:38:2e:cb:d3:9c:a4:89:77:2b:
                    9e:65:94:19:eb:17:ce:51:c5:74:e8:4c:b1:1d:b8:
                    f9:a6:f5:bc:98:6e:a7:90:0e:c1:87:13:d5:fc:1a:
                    19:c7:46:c6:bc:55:a0:3d:35:ce:61:02:ac:70:0b:
                    df:c4:78:eb:26:45:e1:cc:53:65:d8:f7:29:5a:3e:
                    40:b7:80:23:3f:fc:67:65:eb:9b:42:16:07:cf:ee:
                    88:81:ba:ad:12:fe:09:34:c4:89:57:8b:ca:76:7c:
                    51:88:a0:e0:cf:a8:25:36:7b:52:bf:4e:00:e3:dc:
                    d4:59:bd:1e:56:1a:36:a1:f6:23:83:f7:5a:76:99:
                    08:ff:da:63:f4:6a:36:ca:00:6c:1a:5e:79:e1:44:
                    28:9e:f4:2a:bc:eb:ce:ac:79:2f:1c:63:28:3b:f7:
                    32:85:03:26:a9:e6:61:27:0f:3a:a2:21:b8:83:01:
                    3b:83:c2:63:28:7e:d9:d0:55:26:f9:86:0c:c4:28:
                    26:39:8f:82:2d:2a:b7:44:24:95:b8:d6:cd:e3:cb:
                    80:d3:e8:c0:91:53:54:df:5b:02:ac:58:bf:62:75:
                    df:e1:c2:c7:12:a8:ef:fc:5a:35:11:46:f3:4b:b0:
                    3f:8f:e6:3a:05:03:5f:76:98:99:27:e7:83:73:4f:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B4:F3:7C:0C:C8:0C:CC:01:62:C5:14:4B:55:94:1F:A5:65:7E:A2
            X509v3 Authority Key Identifier:
                keyid:08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3334203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3374::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:d3:e1:e6:1e:c6:37:5a:c3:22:35:a9:7e:8b:77:fd:f4:0e:
         cf:aa:fb:04:26:5a:81:71:96:e4:3a:42:8a:44:10:19:93:8b:
         3b:ef:79:53:f5:2d:89:6a:57:4b:49:30:9f:1c:9b:71:a8:8b:
         e0:38:da:db:29:66:76:73:67:29:87:62:44:f1:d5:8e:cf:a5:
         f8:78:c4:2b:91:2e:68:22:59:a5:41:ee:32:5f:f1:df:a6:c5:
         05:b6:58:65:08:16:63:9b:a4:f9:e4:76:72:95:54:e2:06:98:
         b7:9c:f0:64:a2:1f:ca:07:f5:a4:d3:9f:4a:d3:19:6f:ac:d9:
         f9:dd:98:f7:fe:b9:6e:b5:12:8a:ad:98:c5:0f:66:4c:b3:4f:
         fd:38:3e:9c:ad:59:87:94:8e:be:d5:75:f6:40:0c:2c:09:2c:
         49:35:d7:2b:5f:9a:6f:31:2e:c7:e4:6a:17:42:f7:6e:92:2c:
         81:02:8e:05:8b:cc:43:bf:c1:0b:30:df:f4:a0:3c:df:5f:4e:
         22:4f:52:95:f0:ac:cb:ed:bc:8c:ca:0a:71:ae:ba:6c:0c:32:
         a2:f6:b0:ef:8a:00:7b:23:2d:f4:e6:b4:37:6e:e5:87:27:b4:
         26:7f:31:68:3e:8a:c6:de:a6:d6:49:56:7e:fe:22:f0:eb:ba:
         32:ab:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org