Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/323830343a353165343a3a2f33322d313238203d3e20323638343833.roa
File:                     323830343a353165343a3a2f33322d313238203d3e20323638343833.roa (raw, json)
Hash identifier:          c0nm6u3EAYZAW0UjikPwKvNc3VHNDsbEsmboOue29zg=
Subject key identifier:   E3:2B:CD:D1:C4:AF:0E:F8:11:79:38:68:69:F3:0E:36:44:F0:55:00
Certificate issuer:       /CN=DAE6F6304F53DFFBF05831AC165CA7EAFE56D529
Certificate serial:       7CEB32B8FF040C9DC1D1F69BF3B5F81FCEDFCBC0
Authority key identifier: DA:E6:F6:30:4F:53:DF:FB:F0:58:31:AC:16:5C:A7:EA:FE:56:D5:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/323830343a353165343a3a2f33322d313238203d3e20323638343833.roa
Signing time:             Mon 04 Sep 2023 20:20:20 +0000
ROA not before:           Mon 04 Sep 2023 20:15:20 +0000
ROA not after:            Mon 02 Sep 2024 20:20:20 +0000
asID:                     268483
IP address blocks:        2804:51e4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:32:b8:ff:04:0c:9d:c1:d1:f6:9b:f3:b5:f8:1f:ce:df:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAE6F6304F53DFFBF05831AC165CA7EAFE56D529
        Validity
            Not Before: Sep  4 20:15:20 2023 GMT
            Not After : Sep  2 20:20:20 2024 GMT
        Subject: CN=E32BCDD1C4AF0EF81179386869F30E3644F05500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:8e:f2:75:13:29:5f:c2:87:01:f9:b1:41:
                    92:cb:cb:c6:68:30:e0:71:99:85:06:25:2b:08:77:
                    f8:98:76:d3:1f:1e:c0:bf:c5:b0:59:3a:da:b8:4d:
                    bf:ce:80:a7:f9:f2:da:ca:74:ae:0a:de:4b:0e:5c:
                    0b:1a:ce:de:a6:a0:7e:d2:16:60:0d:ed:20:dd:1c:
                    ac:df:f0:91:63:e0:80:64:e8:bc:ad:ee:66:8c:45:
                    82:42:42:1c:6e:03:be:dc:f0:f1:58:29:99:5b:fa:
                    16:5f:34:cc:b6:e9:aa:48:42:b8:9d:3c:76:20:8f:
                    17:a7:55:e8:3d:e1:df:10:36:65:02:f9:e4:4b:c2:
                    53:87:54:ce:4b:53:45:e1:c9:40:cf:2f:27:3e:84:
                    61:62:93:72:41:98:05:47:7c:48:32:d0:95:15:72:
                    d9:b5:a2:b8:ce:3b:1a:8a:5e:1a:bf:6b:87:9b:77:
                    a5:f1:f7:1f:38:75:60:cd:56:c6:45:ed:cf:c1:06:
                    af:33:7d:c3:83:1f:1f:d8:3d:9f:99:db:f3:32:d9:
                    36:b1:08:dd:59:66:45:2a:9b:15:a2:16:5b:fc:8e:
                    ff:db:8b:e5:60:49:91:d7:1d:a2:0b:e4:2e:1a:80:
                    d0:6e:0b:9c:2a:a9:5a:8f:32:08:d9:8f:ed:4a:9d:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:CD:D1:C4:AF:0E:F8:11:79:38:68:69:F3:0E:36:44:F0:55:00
            X509v3 Authority Key Identifier:
                keyid:DA:E6:F6:30:4F:53:DF:FB:F0:58:31:AC:16:5C:A7:EA:FE:56:D5:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/323830343a353165343a3a2f33322d313238203d3e20323638343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:02:a3:53:53:54:94:83:e7:79:f2:8f:ee:fb:37:52:3d:65:
         cd:a1:1c:ac:72:c0:99:31:3b:f1:59:7a:1d:5c:27:6b:9b:ba:
         34:c3:3b:65:2f:a1:af:b0:b7:8e:6a:b6:14:aa:51:47:26:c6:
         08:7a:53:b8:47:9d:30:b6:e9:09:33:ef:a3:8c:61:a5:5c:f0:
         ae:26:12:f2:0d:8f:24:00:a8:2a:ab:77:ea:3e:97:38:54:e0:
         2a:52:9d:cd:b8:32:11:75:cb:15:ad:76:a2:e1:e8:06:54:4a:
         57:f7:bc:c1:0d:4c:d7:c4:a8:17:a1:a8:cf:19:ee:f1:4f:52:
         76:36:81:8f:ce:53:ad:e3:82:63:5b:24:87:da:4b:f0:14:1f:
         08:03:5d:93:c7:f6:08:6c:12:29:e2:fa:78:45:31:3a:ad:a7:
         63:b9:83:9f:51:bd:75:fd:c6:90:ea:cd:dc:dc:74:c3:1b:e4:
         72:5f:c7:cc:bf:c9:2a:ec:ba:e6:fc:b7:b3:ab:15:ea:0f:0f:
         b5:ba:ab:ea:fa:71:8b:28:e4:8e:f9:66:73:6e:c4:29:78:65:
         58:98:73:5c:5e:a9:10:8d:4a:44:b6:e6:e8:b2:0f:17:21:2e:
         dc:9a:0f:b5:6d:70:3c:b2:13:1c:96:b8:ac:e8:2e:79:4e:21:
         5c:7f:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org