Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa
File:                     323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa (raw, json)
Hash identifier:          U+U4g5XPk/AMosMwOGsAb1uoCTgjgJh3FuJKYlmuswk=
Subject key identifier:   81:B9:F1:E0:0E:D8:FA:47:E9:72:70:E8:DC:9C:2D:90:BF:93:B9:86
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       5B02FB918B2141157CEF480CD8538BE3E3B8AF1A
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa
Signing time:             Fri 24 Nov 2023 07:10:05 +0000
ROA not before:           Fri 24 Nov 2023 07:05:05 +0000
ROA not after:            Fri 22 Nov 2024 07:10:05 +0000
asID:                     263482
IP address blocks:        2804:1288:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:02:fb:91:8b:21:41:15:7c:ef:48:0c:d8:53:8b:e3:e3:b8:af:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Nov 24 07:05:05 2023 GMT
            Not After : Nov 22 07:10:05 2024 GMT
        Subject: CN=81B9F1E00ED8FA47E97270E8DC9C2D90BF93B986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:97:8b:86:e7:02:5b:7c:5e:0e:31:fa:0a:
                    09:95:d2:d0:d9:5c:2f:6c:00:76:f9:ab:f7:2c:21:
                    70:3f:13:86:68:3d:d4:a1:09:be:b9:58:63:a7:87:
                    f2:28:4d:b3:e0:0d:28:0b:d7:61:7c:91:44:e3:3d:
                    b6:04:a6:d5:6e:fe:8f:a7:f0:34:6a:04:cd:46:52:
                    35:0f:15:c2:db:d3:f2:e5:4b:cb:0e:31:23:62:0f:
                    e0:66:99:7b:3d:db:06:c8:c9:47:3a:3c:11:0b:35:
                    1d:f7:da:89:98:97:a4:39:86:7d:6f:6b:be:6f:2a:
                    da:bc:2c:a7:62:0a:a9:b5:78:a7:b6:6f:66:c3:57:
                    1e:47:e2:72:9c:e1:e5:36:94:2c:42:2e:27:62:94:
                    97:c2:a4:93:cc:cc:c4:62:eb:da:ba:8b:fa:43:63:
                    69:53:f8:59:03:fa:15:b1:24:d0:76:50:b9:3e:78:
                    96:ed:53:db:bd:2e:6d:d5:6b:65:16:ea:b7:7c:58:
                    fe:61:56:f9:55:c4:f2:ed:1a:67:38:26:cc:0b:f9:
                    81:a5:7a:af:d0:62:c7:a6:0a:94:94:76:21:cb:cc:
                    c0:cb:fc:8c:a0:47:0f:93:96:1f:ba:7a:8a:47:f6:
                    00:b9:4d:8b:00:ea:53:cf:26:24:68:ce:74:47:e1:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:F1:E0:0E:D8:FA:47:E9:72:70:E8:DC:9C:2D:90:BF:93:B9:86
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1288:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:24:c0:1f:a0:80:af:bd:ef:44:0e:dc:74:86:ab:e9:1e:
         f3:29:56:fe:13:ac:d0:4b:0f:b7:47:cd:40:87:c1:1a:9d:25:
         8e:df:b6:0c:80:5f:65:da:dc:e5:9b:a8:4c:4d:bb:e5:f0:00:
         09:39:50:6b:ca:7d:0e:95:c1:58:e5:d3:91:b5:9c:f6:e2:e3:
         ca:07:10:df:c8:2b:bb:0c:24:29:b2:a4:c5:18:d3:58:f1:d6:
         58:56:8d:1b:7a:12:e4:f3:e0:8e:f0:79:be:27:69:ee:46:9a:
         f3:d7:aa:db:2c:c5:4d:69:21:10:1e:62:81:c6:37:f5:ef:3f:
         c8:45:7c:75:7c:ce:e0:e4:21:ca:53:a5:b5:72:de:e6:a8:42:
         c9:f9:4f:b5:6a:a0:e8:a5:4e:17:6e:3e:3c:b8:a2:8a:89:84:
         23:ba:a6:54:6f:c6:75:89:fd:c3:aa:ad:c0:d8:96:5b:e8:6c:
         bc:6c:72:5a:98:aa:8d:1d:bc:12:f9:a8:a5:bb:30:d0:c2:e8:
         c5:54:1b:cd:9f:6d:73:ff:33:87:f3:f5:87:dc:52:d0:f7:ce:
         b3:26:17:79:9d:45:fd:4c:1f:3e:f5:50:4b:a7:5f:29:e9:4a:
         e3:7e:f2:4d:47:1a:46:6e:36:bf:05:61:cb:8d:a2:b2:19:d0:
         a5:f4:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org