Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa
File:                     323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa (raw, json)
Hash identifier:          ceCD1t8l2DucqujoXHpUsYwd7glmdW8HD1Cz+sgkPDc=
Subject key identifier:   01:7A:89:CF:BE:9E:43:E4:10:05:23:B0:07:35:B8:B7:6A:BC:2A:67
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       2A8E549E7023837AA8B5B25EB4C869ABE13FA4EA
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa
Signing time:             Thu 19 Oct 2023 11:28:06 +0000
ROA not before:           Thu 19 Oct 2023 11:23:06 +0000
ROA not after:            Thu 17 Oct 2024 11:28:06 +0000
asID:                     263482
IP address blocks:        2804:1288:1ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:54:9e:70:23:83:7a:a8:b5:b2:5e:b4:c8:69:ab:e1:3f:a4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 19 11:23:06 2023 GMT
            Not After : Oct 17 11:28:06 2024 GMT
        Subject: CN=017A89CFBE9E43E4100523B00735B8B76ABC2A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:e7:38:f2:4c:56:4f:1f:8b:8b:4b:0a:11:
                    6a:22:6e:68:8e:f8:cf:e0:68:ff:98:97:34:06:6b:
                    a3:a0:cf:3c:82:5b:fb:62:75:be:37:d7:89:0f:b9:
                    42:1e:57:d5:3b:ad:4e:12:35:c8:97:b1:4c:70:7a:
                    ff:ec:e7:b4:52:5a:85:e7:10:24:82:80:3f:61:53:
                    a2:ad:30:e9:be:57:49:4c:4d:82:e6:0a:60:da:be:
                    59:23:d5:f4:ad:22:be:c6:2b:62:66:7d:38:a5:70:
                    55:3f:c8:b7:c7:92:1d:08:23:13:52:ba:6d:dd:d4:
                    bb:81:83:38:2f:d7:af:51:e4:f1:05:51:f8:a6:c0:
                    87:e3:7b:b1:b4:44:d1:4b:16:f3:1c:9d:aa:a8:cb:
                    e9:64:6e:33:65:cb:ac:f1:53:5e:da:74:ff:fb:79:
                    e8:8b:fd:89:cc:28:7d:5d:8f:48:ae:b0:4a:3b:73:
                    c6:c3:a4:9d:0f:d6:38:6d:b5:0f:20:07:56:34:02:
                    8c:b7:8f:3e:66:8f:bf:e4:2a:11:bb:9d:f3:50:7e:
                    8f:7c:10:c5:0e:36:55:f6:ca:f0:29:8d:f9:86:eb:
                    e9:5b:50:fe:ac:42:2c:0b:21:01:d0:49:41:af:ea:
                    f2:86:18:ac:b9:b6:68:09:cd:03:76:aa:7f:8b:1b:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7A:89:CF:BE:9E:43:E4:10:05:23:B0:07:35:B8:B7:6A:BC:2A:67
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1288:1ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:c9:fa:59:b3:3b:56:ad:d8:70:4a:11:91:ff:61:74:35:
         11:bc:28:5a:6a:bd:99:74:58:94:be:17:d6:65:a2:a0:3f:85:
         1c:0a:b0:aa:55:a9:13:30:f7:df:dc:03:9e:f0:17:4b:51:5a:
         a3:47:d3:5f:11:37:e1:05:54:1f:26:73:e9:07:52:31:77:17:
         7c:75:27:3a:9b:5f:12:79:13:98:cc:21:6c:c6:8b:90:46:f3:
         62:98:d4:3f:f6:9e:50:ef:a9:7f:6a:e7:dd:47:03:73:b7:b3:
         95:8e:85:19:19:02:65:85:2b:fc:d5:42:75:81:c5:44:40:06:
         37:c1:ad:fb:29:e7:1a:ad:a2:2c:8e:a6:06:6e:de:ee:2e:25:
         f7:b5:6e:dd:47:e5:ae:99:66:41:0b:08:30:e0:da:c0:7e:eb:
         93:9e:fd:5a:98:b3:7f:fa:c4:5c:c9:c2:29:4d:30:e6:15:3d:
         4f:ed:ac:12:f0:e4:68:2a:b7:58:c3:12:c4:ff:20:ca:af:5b:
         9b:5d:14:aa:3d:a7:21:07:db:ac:5a:01:72:4b:da:7e:af:be:
         fc:57:8e:31:9a:87:fc:76:fb:9b:2d:26:1c:24:05:29:55:3a:
         cd:9d:69:91:03:f1:b6:46:8c:be:00:7f:dd:45:27:22:a0:1c:
         e4:cf:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org