Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/323830343a313534303a3a2f33322d3334203d3e20323633333830.roa
File:                     323830343a313534303a3a2f33322d3334203d3e20323633333830.roa (raw, json)
Hash identifier:          zarXXAFGzZdx8k2F0S23R/LBGWbZKZPw9g4dkniNJqg=
Subject key identifier:   4D:CB:4C:E9:EB:14:20:AD:28:64:A7:F1:64:D0:77:D1:45:8A:1E:FD
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       438C65E3D6A349F0D99CC22C8A7A9F529155B544
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/323830343a313534303a3a2f33322d3334203d3e20323633333830.roa
Signing time:             Mon 26 Jun 2023 16:00:00 +0000
ROA not before:           Mon 26 Jun 2023 15:55:00 +0000
ROA not after:            Mon 24 Jun 2024 16:00:00 +0000
asID:                     263380
IP address blocks:        2804:1540::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8c:65:e3:d6:a3:49:f0:d9:9c:c2:2c:8a:7a:9f:52:91:55:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Jun 26 15:55:00 2023 GMT
            Not After : Jun 24 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:92:8f:ad:c1:91:67:4d:d0:b7:87:27:08:
                    a6:30:fa:fe:9d:cf:92:bf:e3:bd:f6:86:41:9a:4f:
                    b1:7d:76:ea:8a:4c:4b:60:79:cb:58:af:56:a1:e7:
                    a2:17:b5:2b:77:bc:d1:a4:b1:11:23:fd:7d:30:51:
                    b5:f7:ba:49:f6:f9:e7:f9:ed:e8:33:03:8a:15:1e:
                    29:47:bf:ab:4d:1c:34:d7:47:8f:f7:cf:06:bf:c1:
                    7f:08:4a:d2:dd:28:80:82:05:4f:54:dd:71:52:d7:
                    9c:72:7f:3f:5a:31:13:cc:ce:26:b2:ce:21:52:f4:
                    e9:f7:87:5b:38:34:75:a1:1d:80:5d:b3:9e:02:09:
                    a2:7f:e2:c1:1f:ca:af:54:61:c5:43:55:53:e1:27:
                    21:f9:e7:17:62:d9:38:eb:78:fd:e7:ee:a1:96:e1:
                    0f:34:c7:be:a7:84:34:0d:b2:11:3e:fb:cf:d9:2e:
                    27:d7:5e:3a:fc:4d:24:ab:7a:75:dc:c9:1d:c6:7c:
                    16:ef:f4:c8:e0:f7:7f:58:e9:9a:7e:e3:8c:47:cc:
                    ec:a4:6c:7e:85:e0:8d:87:85:e8:6d:91:43:b5:51:
                    12:e9:13:4c:d8:16:f9:56:c3:e2:c6:27:b0:38:30:
                    32:1d:f3:28:b0:4f:ee:f2:05:5f:7e:f8:33:1d:75:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:4C:E9:EB:14:20:AD:28:64:A7:F1:64:D0:77:D1:45:8A:1E:FD
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/323830343a313534303a3a2f33322d3334203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1540::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:25:c8:dc:c0:52:29:01:53:14:e2:67:f7:2b:92:f0:ec:
         09:30:54:15:93:90:27:2f:d0:63:00:e4:75:01:52:d9:11:00:
         42:9d:fa:6d:39:ad:7e:77:6c:dc:95:60:e6:c5:dd:93:d2:20:
         b3:f3:34:36:9f:c8:80:4f:a6:29:8a:64:ab:f0:d9:c6:a7:0c:
         8b:2e:b7:bc:5f:e1:e3:db:10:e0:52:95:5c:a1:73:7d:ee:c5:
         75:26:97:b0:e7:68:49:ed:83:c4:ae:0e:b8:23:bd:cb:f6:aa:
         26:24:9c:ed:97:9d:a2:c7:95:5c:11:01:25:82:11:0c:b8:85:
         e8:29:66:b7:11:0c:78:34:71:1a:83:ca:6e:c2:1e:5a:7b:81:
         36:5a:43:42:66:20:61:55:77:46:47:db:28:dc:7b:af:1f:f1:
         08:41:ef:14:97:02:cf:10:48:65:7a:d6:f9:77:2c:16:11:ca:
         b5:55:91:6d:b5:28:3f:a6:5c:94:90:c3:71:b9:0b:05:22:58:
         47:d5:8f:2e:82:ad:f9:be:19:90:66:28:82:b7:86:c2:f3:08:
         8c:a9:e8:4a:c5:87:7a:ab:2e:f3:34:16:d9:65:2d:23:00:a5:
         74:fc:34:ae:ab:15:20:e9:d1:69:ac:9b:94:22:02:d8:92:c8:
         e8:d4:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org