Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa
File:                     323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (raw, json)
Hash identifier:          v8cBf9mLh7xI5BnszxaH/1wJ+lWcaKM7ATsZR58jqtU=
Subject key identifier:   DC:97:07:C6:B0:A2:C5:B9:DB:38:DE:F1:9C:88:33:CD:F2:27:23:08
Certificate issuer:       /CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
Certificate serial:       323CD38F62C81B3C419EB881712BE0F092F97DE2
Authority key identifier: 14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa
Signing time:             Tue 09 Jan 2024 12:23:44 +0000
ROA not before:           Tue 09 Jan 2024 12:18:44 +0000
ROA not after:            Tue 07 Jan 2025 12:23:44 +0000
asID:                     264386
IP address blocks:        2804:1db0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:d3:8f:62:c8:1b:3c:41:9e:b8:81:71:2b:e0:f0:92:f9:7d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
        Validity
            Not Before: Jan  9 12:18:44 2024 GMT
            Not After : Jan  7 12:23:44 2025 GMT
        Subject: CN=DC9707C6B0A2C5B9DB38DEF19C8833CDF2272308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:30:da:09:e3:c6:01:ec:10:9c:cd:81:bb:f9:
                    29:a5:a8:00:8e:e7:9b:2f:ec:ee:85:65:56:91:c6:
                    b3:91:01:cb:fb:8a:9f:7d:5a:2b:f4:bb:43:29:d9:
                    ec:8b:6f:fd:7d:c3:6c:c3:e6:a1:68:36:db:23:99:
                    1b:2a:1d:82:7c:a9:e8:f0:7c:ca:71:54:50:a7:b8:
                    a7:d4:ef:33:98:d2:12:6e:94:43:6f:c9:40:01:99:
                    83:7e:47:c6:89:cb:ba:bd:d3:73:f4:51:d5:af:00:
                    95:59:44:86:86:7b:97:7b:53:f2:36:a0:0b:68:25:
                    5a:e2:8e:20:2d:f3:1d:39:72:e9:e1:f9:30:9b:01:
                    4b:56:b3:02:37:93:81:1f:8f:7a:87:d2:f4:3d:07:
                    e9:b4:b3:48:74:30:97:c9:2d:5a:d5:8f:11:c3:4d:
                    2c:33:de:28:c6:84:83:e1:43:57:55:4e:1e:90:4e:
                    96:5b:25:91:50:78:d0:ca:d9:c0:33:de:25:d2:44:
                    96:08:51:fd:70:8e:1c:a6:93:5f:3b:08:93:8b:8d:
                    f4:c2:23:8d:44:0f:7f:e2:1a:33:fb:b0:1e:aa:8a:
                    92:a8:b3:39:3a:b4:67:81:e6:39:1b:7f:de:8a:eb:
                    ba:92:cf:12:27:fb:cd:b9:f4:f6:9b:a9:4b:49:9c:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:07:C6:B0:A2:C5:B9:DB:38:DE:F1:9C:88:33:CD:F2:27:23:08
            X509v3 Authority Key Identifier:
                keyid:14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:03:00:b3:2c:05:5b:5d:78:b7:11:79:d3:78:24:d0:41:
         06:05:85:c1:a8:a0:3a:9c:c5:33:b5:7e:c4:17:9c:2c:1c:bc:
         f9:3d:fd:79:2c:31:4a:5e:a6:4a:e2:3b:ff:88:96:d7:83:de:
         df:7f:fa:30:18:95:6d:27:da:a6:21:b5:e1:39:1e:40:98:c1:
         3b:b2:41:e7:e2:91:49:24:4f:2e:48:85:c1:8e:26:54:32:a8:
         e3:9c:47:f7:58:59:12:e2:f7:3c:13:b7:1b:44:52:5e:a9:72:
         0e:7d:e3:01:b1:e8:64:ea:bd:f8:27:d1:7e:0b:4d:08:e6:20:
         2a:4a:fb:45:05:48:fa:2f:a5:62:30:2d:bb:3f:4a:cc:ec:a6:
         53:56:1b:3e:a1:9f:97:f1:5b:f4:ac:05:e9:c5:34:98:4e:4d:
         4a:7a:99:33:c6:21:49:10:9b:09:70:74:05:f9:3d:cd:13:a7:
         7a:82:b5:2b:a5:de:13:48:8a:e0:4f:3e:f5:a6:98:a5:18:6b:
         25:e0:14:b4:e0:45:5b:c4:d1:35:ee:c8:6d:dc:0b:ca:28:c5:
         b9:f6:de:58:74:33:9f:c9:8f:1d:ea:f5:7b:76:75:84:a4:e7:
         26:d4:98:1a:c0:ad:80:8f:7a:4f:14:d3:26:ac:66:4f:73:72:
         d0:88:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org