Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          Z4d2gfk7gxG/mRcsKjooaPJTrce4jcSTr7lktNSGrKo=
Subject key identifier:   D7:02:0B:A3:BA:CE:12:C6:12:3E:D8:2D:DE:95:EA:6F:2A:37:AD:C7
Certificate issuer:       /CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
Certificate serial:       667C72CB56842944AA9CC9F9825993DA527A9078
Authority key identifier: 96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Wed 27 Dec 2023 23:38:12 +0000
ROA not before:           Wed 27 Dec 2023 23:33:12 +0000
ROA not after:            Wed 25 Dec 2024 23:38:12 +0000
asID:                     265919
IP address blocks:        2804:3fd8:197::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7c:72:cb:56:84:29:44:aa:9c:c9:f9:82:59:93:da:52:7a:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
        Validity
            Not Before: Dec 27 23:33:12 2023 GMT
            Not After : Dec 25 23:38:12 2024 GMT
        Subject: CN=D7020BA3BACE12C6123ED82DDE95EA6F2A37ADC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:95:3b:3f:53:48:da:9d:f0:cf:3e:83:e7:
                    e6:a2:5c:dc:ef:c6:80:ea:ed:a5:20:3f:fa:41:1e:
                    b5:57:7a:bb:2a:9c:39:3e:c6:09:a0:95:c5:d9:00:
                    c4:d4:22:64:46:69:fe:1d:5d:9c:17:17:b8:08:a3:
                    24:1b:db:43:96:1a:bb:4c:09:fe:0e:6e:8c:cb:f3:
                    f4:d6:10:da:30:8d:f5:2a:27:46:28:8c:b8:41:61:
                    99:68:53:07:33:69:d3:be:71:5b:8d:51:63:6f:26:
                    4e:39:3c:53:bb:04:7a:ea:5e:42:cc:e6:29:f7:06:
                    6c:0a:a0:23:34:f5:fe:7e:e4:27:bb:41:04:e3:f5:
                    3b:f6:8e:67:0f:3e:5c:27:5a:87:48:76:aa:11:2e:
                    3e:03:74:a4:a3:db:f9:02:60:b9:e7:66:1b:88:58:
                    47:d4:31:05:72:7b:46:3a:de:a9:c3:e3:14:78:77:
                    61:b1:8c:b6:ef:5d:2f:1e:57:97:34:c9:84:26:26:
                    5e:08:c2:17:05:c3:b1:23:42:15:0a:51:9d:b0:cf:
                    47:b8:07:ec:26:c6:3e:7c:44:1b:94:8d:f6:ab:0d:
                    d1:c2:58:fd:30:f7:60:5d:01:5c:35:17:75:00:31:
                    bc:da:44:fd:8a:5e:36:9e:27:a7:52:6b:ac:54:37:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:0B:A3:BA:CE:12:C6:12:3E:D8:2D:DE:95:EA:6F:2A:37:AD:C7
            X509v3 Authority Key Identifier:
                keyid:96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:197::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:c5:0e:44:99:88:c8:17:40:64:b0:67:96:ee:37:af:e0:
         6d:ba:77:4a:36:45:35:71:ff:09:9f:bc:bf:5d:23:77:d3:5e:
         8a:0a:7e:31:0d:1e:db:3b:e6:ab:34:36:e5:1e:0c:0e:6f:48:
         0a:53:54:4e:03:1e:3d:9b:37:2a:fc:85:6a:d4:68:5b:b3:54:
         4d:2a:db:6a:a2:5b:f8:de:6f:6b:6a:a3:f2:18:7c:b9:21:cb:
         82:08:66:88:37:27:62:d7:ba:19:ad:c3:6d:71:1b:30:17:95:
         0d:9c:8d:49:02:e4:66:74:f5:a2:e6:eb:b1:fa:9e:c7:e2:93:
         29:c4:ac:a3:7c:fd:5e:e8:e0:3a:c0:92:5d:31:3e:d0:77:1c:
         20:39:0a:ea:f0:65:a3:15:eb:48:40:90:5c:53:bf:8c:8d:a7:
         cf:9e:02:ab:6e:a5:a5:09:60:be:24:ba:92:6b:ca:34:75:c5:
         4b:43:c4:97:38:d7:c0:15:fd:32:6c:f9:8d:55:5f:0f:58:f8:
         b9:98:3a:18:79:3e:c0:3e:31:cc:32:04:f9:7d:04:78:9c:2f:
         97:93:58:4d:3a:43:ad:c9:17:d7:c4:54:6e:74:1e:75:ce:f8:
         71:e6:24:80:c8:cc:13:bf:83:ca:93:8a:a5:78:9f:c8:96:3c:
         16:e6:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org