Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/323830343a313036633a3a2f33322d3438203d3e20323633363335.roa
File:                     323830343a313036633a3a2f33322d3438203d3e20323633363335.roa (raw, json)
Hash identifier:          BK+A6BE7lOGKKBUXIHLhLOJT352HrvwGki6b/D9cHgw=
Subject key identifier:   5C:94:9D:50:86:85:29:91:91:C4:46:0C:A8:51:6B:B8:CA:43:01:A0
Certificate issuer:       /CN=8DC4B85108F4A684A65E90F0550453A66C62D87D
Certificate serial:       75C5D06D75D822FEEE7E38E6CB6E946F38B6B4DE
Authority key identifier: 8D:C4:B8:51:08:F4:A6:84:A6:5E:90:F0:55:04:53:A6:6C:62:D8:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/323830343a313036633a3a2f33322d3438203d3e20323633363335.roa
Signing time:             Sat 22 Jul 2023 00:00:00 +0000
ROA not before:           Fri 21 Jul 2023 23:55:00 +0000
ROA not after:            Sat 20 Jul 2024 00:00:00 +0000
asID:                     263635
IP address blocks:        2804:106c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c5:d0:6d:75:d8:22:fe:ee:7e:38:e6:cb:6e:94:6f:38:b6:b4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC4B85108F4A684A65E90F0550453A66C62D87D
        Validity
            Not Before: Jul 21 23:55:00 2023 GMT
            Not After : Jul 20 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:f2:c2:9c:ab:dd:c0:17:dc:2b:e9:4f:49:
                    52:97:30:7d:8b:61:09:8c:a3:47:01:c6:31:ba:34:
                    10:0b:1e:d4:c9:32:7c:48:fa:c2:11:fe:2e:0c:2d:
                    63:e2:e7:3f:d8:48:b1:04:79:30:97:e2:51:bf:5f:
                    0b:96:35:85:c7:43:61:63:ab:38:c2:14:40:6f:b7:
                    ab:a8:96:93:d5:b4:2d:7a:0b:76:72:08:68:8f:04:
                    cc:91:d6:67:4c:96:d1:05:8d:7a:17:16:54:0b:5a:
                    63:20:c9:c0:6b:9b:ea:29:49:79:44:00:34:dc:b2:
                    37:fd:7a:a0:76:31:f1:dc:fa:5f:0b:bc:15:67:95:
                    0a:02:ca:f5:93:97:d7:a1:24:4b:25:d7:eb:6d:b4:
                    73:6f:4f:cc:72:b8:42:fd:40:45:f6:39:b5:0d:d7:
                    cb:52:1a:62:45:6a:8e:8b:fe:8e:45:ce:33:84:23:
                    b9:70:05:aa:50:4e:69:45:98:17:4c:13:de:64:2f:
                    37:f2:b1:f7:c2:b5:fd:38:bf:cb:b0:d3:da:a6:83:
                    80:c6:f9:1b:8d:af:bb:c7:75:a9:f0:6d:0c:98:64:
                    7a:e4:d9:70:7d:87:d6:4d:b3:b8:e3:d5:97:79:18:
                    2b:24:a0:46:fa:08:00:a9:b0:cd:f4:7b:80:b7:09:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:9D:50:86:85:29:91:91:C4:46:0C:A8:51:6B:B8:CA:43:01:A0
            X509v3 Authority Key Identifier:
                keyid:8D:C4:B8:51:08:F4:A6:84:A6:5E:90:F0:55:04:53:A6:6C:62:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/323830343a313036633a3a2f33322d3438203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:106c::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:25:24:99:79:6b:4c:4c:36:05:81:06:2b:19:df:c4:29:4e:
         a0:f3:ac:e7:2a:04:72:ea:0f:4a:01:ad:24:07:56:dd:77:64:
         b6:bc:e2:2b:93:48:c2:1e:df:5a:77:54:c7:6b:de:ee:e0:1c:
         9e:e2:ab:47:e8:32:40:f6:e4:1c:28:a3:80:fd:d6:68:d7:5b:
         e5:1f:b7:b2:b3:86:c1:28:ba:0e:20:f2:64:cf:2e:52:47:d7:
         9e:fc:1a:8f:ac:93:30:b0:ab:cf:c2:b1:b6:ff:aa:6c:12:60:
         50:76:13:39:02:7d:a3:a3:8f:05:b6:d8:05:2f:e8:44:c9:52:
         94:39:e6:bb:70:47:9f:8d:ee:64:e8:3a:6d:54:ba:e7:60:fb:
         29:cd:28:cb:1f:b2:97:ff:38:50:5a:e3:6c:ec:7a:28:ae:85:
         8f:e2:c3:ae:3c:5c:a0:29:5c:f5:63:88:48:83:be:25:df:8c:
         0a:af:c7:6c:33:d6:ab:0b:9a:d1:41:60:0a:29:eb:9a:97:d8:
         77:ec:f3:e4:51:66:77:7e:b3:8d:b3:dd:c7:61:07:3d:a2:39:
         6a:5f:aa:87:0a:bb:ec:2d:e3:0d:d8:86:dd:51:04:f2:a0:1e:
         96:c9:0d:32:d6:3b:be:4a:43:27:53:4a:18:dc:da:1d:a2:34:
         7f:d4:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org