Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/323830343a3764303a3a2f33322d3438203d3e20323632333234.roa
File:                     323830343a3764303a3a2f33322d3438203d3e20323632333234.roa (raw, json)
Hash identifier:          aEbb8I+kLknFPBkzOinDXK0DYoLqPt4PX7d9x5hei8E=
Subject key identifier:   98:3B:D4:EE:29:42:AB:7A:28:BD:57:0D:83:C8:44:22:99:CE:B0:C0
Certificate issuer:       /CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
Certificate serial:       5D35A86D22C9FD23E741397077FB24D112AE0B46
Authority key identifier: E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/323830343a3764303a3a2f33322d3438203d3e20323632333234.roa
Signing time:             Wed 10 Apr 2024 13:00:02 +0000
ROA not before:           Wed 10 Apr 2024 12:55:02 +0000
ROA not after:            Wed 09 Apr 2025 13:00:02 +0000
asID:                     262324
IP address blocks:        2804:7d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:35:a8:6d:22:c9:fd:23:e7:41:39:70:77:fb:24:d1:12:ae:0b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
        Validity
            Not Before: Apr 10 12:55:02 2024 GMT
            Not After : Apr  9 13:00:02 2025 GMT
        Subject: CN=983BD4EE2942AB7A28BD570D83C8442299CEB0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:08:dc:92:e3:35:be:04:21:b1:81:c1:3f:
                    57:26:61:41:27:8b:78:30:ee:f6:c2:b4:41:1e:4b:
                    67:73:5d:dc:f6:c7:d5:4b:3d:ff:65:e6:fc:a1:63:
                    b8:a6:5f:c3:21:0a:6b:30:a3:a6:48:25:bc:d5:3b:
                    7c:a8:49:e3:a8:f9:1a:db:cb:14:8a:33:69:3a:55:
                    c3:1e:c7:5e:01:86:62:d3:15:bb:ba:57:af:47:3e:
                    d7:6a:34:4c:e3:bb:a8:be:7e:87:96:33:63:23:36:
                    22:80:40:30:86:41:ba:d1:65:eb:fc:c7:93:c5:f6:
                    ab:af:42:5c:8e:d5:d7:cf:75:10:2f:8b:1c:b5:af:
                    ff:d6:b2:0e:1c:ab:76:96:14:bb:32:88:e5:d4:0f:
                    4e:bf:e1:ba:a7:d1:6e:51:66:ff:af:f6:4c:3c:9e:
                    7d:b7:97:44:5b:16:5b:08:d8:8f:4a:74:40:69:25:
                    9d:ce:56:d2:a7:c6:6f:a1:d9:dc:78:d3:e9:13:01:
                    68:81:d5:d0:87:0d:69:0f:1c:33:1d:7b:13:43:84:
                    9b:83:da:f6:55:66:83:9d:05:da:b0:e2:93:e4:5c:
                    01:c2:dd:75:7c:4d:f2:1e:e3:d0:8c:26:dc:91:52:
                    36:64:a6:10:62:fb:e7:49:1e:f8:70:6f:c1:c5:e8:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:D4:EE:29:42:AB:7A:28:BD:57:0D:83:C8:44:22:99:CE:B0:C0
            X509v3 Authority Key Identifier:
                keyid:E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/323830343a3764303a3a2f33322d3438203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:b3:9b:e4:3b:d7:4d:ac:42:af:da:51:ba:f4:3a:91:13:
         9d:22:c6:ea:68:8c:35:a8:95:74:b8:d1:03:e1:6b:e5:06:63:
         7c:04:98:d8:7a:a0:3d:25:e4:16:ce:2d:bb:21:af:0f:3a:c2:
         01:84:67:9a:61:94:ab:7e:ee:44:c4:57:82:70:27:53:47:54:
         9c:68:0a:e1:3c:aa:07:59:69:f4:b8:b4:a2:79:ae:ac:2c:bc:
         ef:1e:fc:7c:ac:b4:44:1c:7f:0f:73:e0:2a:b8:9d:19:e6:b5:
         99:ee:0e:3b:7a:60:77:77:2a:31:cf:b6:1b:db:93:c0:cb:8a:
         a3:fb:a8:4e:1b:09:f6:98:11:4f:e4:31:6d:0a:76:41:7c:c7:
         aa:d4:d7:bf:3b:25:0b:47:ff:00:60:ae:3f:b4:c2:50:3e:96:
         d3:eb:bd:75:40:17:78:ad:72:9a:fa:33:8d:fe:cc:03:65:1e:
         4c:92:1c:b3:9b:ee:9c:05:b2:eb:53:58:fe:86:05:3c:89:63:
         0c:8f:49:99:9f:1b:ca:16:9e:84:85:e7:8c:35:3c:f6:a2:c8:
         ef:29:dc:04:ac:de:2f:a0:e2:9f:86:61:57:42:4e:93:9d:00:
         52:2d:db:e2:79:f1:0a:a5:15:62:b5:13:61:bb:60:5f:7f:01:
         23:af:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org