Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/323830343a3161633a3a2f33322d3634203d3e203533313735.roa
File:                     323830343a3161633a3a2f33322d3634203d3e203533313735.roa (raw, json)
Hash identifier:          0UuAstj/yppJazinwlTjKCUF1ICjIbSoWWW99+PG0lY=
Subject key identifier:   3D:8C:FF:A8:87:BA:FD:C1:3E:89:BD:B3:38:C0:53:FD:B1:E6:78:67
Certificate issuer:       /CN=922C457336D084107DC613735F8A82716CB7D071
Certificate serial:       0A8947AF08ECCBAC010FB724BBCA8517CD4568E8
Authority key identifier: 92:2C:45:73:36:D0:84:10:7D:C6:13:73:5F:8A:82:71:6C:B7:D0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/922C457336D084107DC613735F8A82716CB7D071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/323830343a3161633a3a2f33322d3634203d3e203533313735.roa
Signing time:             Sat 16 Dec 2023 14:00:00 +0000
ROA not before:           Sat 16 Dec 2023 13:55:00 +0000
ROA not after:            Sat 14 Dec 2024 14:00:00 +0000
asID:                     53175
IP address blocks:        2804:1ac::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:89:47:af:08:ec:cb:ac:01:0f:b7:24:bb:ca:85:17:cd:45:68:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922C457336D084107DC613735F8A82716CB7D071
        Validity
            Not Before: Dec 16 13:55:00 2023 GMT
            Not After : Dec 14 14:00:00 2024 GMT
        Subject: CN=3D8CFFA887BAFDC13E89BDB338C053FDB1E67867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:fe:f6:ad:41:61:de:26:ed:c2:7f:d1:8d:
                    1c:84:fd:0c:ea:0f:31:5d:56:31:82:6d:0e:48:48:
                    47:cd:e9:00:c9:01:dc:30:69:9d:36:43:85:d8:a4:
                    1e:06:c3:25:c8:80:37:6b:50:13:d9:91:1a:b8:38:
                    ac:ad:85:0e:d9:43:94:9b:6b:ff:a2:b7:4c:d9:30:
                    3f:f9:35:98:ed:a5:06:ed:c6:b3:ff:2a:f3:fb:84:
                    2d:cf:2c:44:48:65:50:07:b8:ac:b1:25:0a:c4:d4:
                    01:9e:bb:e0:10:f5:bc:af:61:67:1a:10:f3:73:b3:
                    c9:47:61:15:92:fb:7e:a4:3d:6a:47:14:9b:84:f4:
                    36:1e:25:76:bd:a3:de:6e:4f:08:eb:c9:21:84:54:
                    fd:17:e5:83:2f:37:c6:4d:9c:a7:4f:4d:2e:78:26:
                    7f:12:31:50:cb:ab:47:85:12:96:79:e1:90:e1:3d:
                    1b:6a:a3:c7:e9:81:8e:d8:75:b3:ee:87:a8:e5:32:
                    a1:e0:b3:14:07:71:90:c6:9c:ec:fe:12:9b:2a:64:
                    6b:43:dc:31:46:93:1e:0c:82:fe:78:61:58:c3:44:
                    04:2d:ee:e7:2d:52:3f:70:15:fa:94:7c:be:49:ec:
                    41:04:26:48:01:42:07:09:4f:d4:62:50:6f:38:5d:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8C:FF:A8:87:BA:FD:C1:3E:89:BD:B3:38:C0:53:FD:B1:E6:78:67
            X509v3 Authority Key Identifier:
                keyid:92:2C:45:73:36:D0:84:10:7D:C6:13:73:5F:8A:82:71:6C:B7:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/922C457336D084107DC613735F8A82716CB7D071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/922C457336D084107DC613735F8A82716CB7D071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/323830343a3161633a3a2f33322d3634203d3e203533313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:4f:59:6b:66:f7:35:04:b9:82:0e:7e:e9:b7:fe:1c:05:
         b2:d7:72:0d:ea:9b:55:a5:53:58:de:d3:bb:c8:a6:ef:99:5c:
         21:79:dc:47:ab:6a:95:b6:32:34:05:d2:e2:5a:98:eb:61:e0:
         00:8c:2a:78:d7:dc:a9:3a:e9:b2:7e:50:6e:be:54:0b:f0:a3:
         c2:7a:f7:ed:b1:63:9f:12:21:27:ba:6b:0b:50:2c:96:f6:96:
         15:15:4a:24:d5:08:80:29:62:8d:c4:ea:6e:99:4c:02:59:6a:
         0a:b5:c8:65:8e:01:b2:67:6f:f0:d9:e5:fe:73:4c:85:cb:f3:
         b0:66:ec:c6:7e:48:44:5f:1a:ab:78:b1:d9:dc:1a:46:40:14:
         89:1e:ee:ac:b3:60:70:ca:92:2b:67:e0:b7:23:0b:9e:9a:16:
         37:0f:be:ad:45:86:cc:ed:7e:79:c8:e8:a1:32:45:84:54:c9:
         16:b6:62:06:1c:55:ce:cd:0a:41:9c:33:db:31:8d:c5:e9:a7:
         55:18:4f:da:5c:27:9b:43:30:54:cf:7c:93:63:50:c8:57:38:
         2c:52:8d:7e:81:ef:6d:b9:33:9a:92:3e:dc:97:c8:b2:fe:8a:
         37:95:cb:bd:a9:3f:9c:8c:61:d6:c9:78:09:d4:3a:ff:b5:2c:
         d7:fd:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org