Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a343030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a343030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          57Pzj+jf7UG7tkZ0DsfJTrRiBiB8daKSLU8rJBbh1PA=
Subject key identifier:   58:14:DC:7D:77:C1:16:5D:6F:7F:1D:2F:57:90:07:0E:A0:F4:99:3A
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       226FE8D560C41BB165C8AB4D8047E0679C71CC37
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a343030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:06 +0000
ROA not before:           Mon 11 Dec 2023 14:00:06 +0000
ROA not after:            Mon 09 Dec 2024 14:05:06 +0000
asID:                     264137
IP address blocks:        2804:2304:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6f:e8:d5:60:c4:1b:b1:65:c8:ab:4d:80:47:e0:67:9c:71:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:06 2023 GMT
            Not After : Dec  9 14:05:06 2024 GMT
        Subject: CN=5814DC7D77C1165D6F7F1D2F5790070EA0F4993A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:69:75:59:b4:33:a5:a1:57:d2:80:99:ec:
                    0c:2e:17:31:22:a3:f2:89:8d:3f:c4:ab:07:4a:9e:
                    7a:33:3c:c5:91:45:05:72:9a:14:5b:fe:91:18:01:
                    c6:3f:8d:a0:ec:3c:8b:c9:5d:c0:19:11:e5:36:84:
                    ef:23:13:68:4f:0a:50:e1:23:d3:a4:a5:d1:a9:f3:
                    cb:3f:26:60:a4:5e:fa:78:3a:e6:ba:6f:26:ff:89:
                    69:93:37:2a:29:95:db:8f:08:f3:40:9e:83:cc:af:
                    c3:52:18:a8:d8:aa:71:31:7f:a7:d0:9b:3c:30:77:
                    c0:e6:3d:26:19:bf:9c:27:73:4f:ce:81:06:4f:cf:
                    9c:b7:f1:33:25:02:f1:3d:c8:c1:09:9b:5b:bf:c2:
                    3d:ef:11:e8:db:ab:29:99:a9:a4:d4:97:82:1a:04:
                    28:cc:02:ed:09:5a:90:0f:1b:54:82:0d:6f:89:e2:
                    97:37:11:2c:da:bd:9e:ad:c6:ee:89:e4:02:72:25:
                    64:a1:fb:2a:ff:fc:13:dd:56:b0:17:ba:1f:f4:da:
                    37:79:16:a2:0a:96:60:12:5e:cb:27:ce:1f:ab:91:
                    e4:f5:cd:2d:ea:97:36:58:39:9f:f9:aa:93:3f:75:
                    93:f4:08:0b:3e:ac:3f:c2:cf:d6:2f:71:0c:07:7a:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:DC:7D:77:C1:16:5D:6F:7F:1D:2F:57:90:07:0E:A0:F4:99:3A
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a343030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:b0:df:f2:9b:3d:1c:77:19:7a:53:5c:1e:42:a4:c1:9c:96:
         79:f9:2b:ae:44:b4:32:03:8a:cb:9b:14:fb:c4:0b:49:15:40:
         8f:e5:85:59:2d:da:a7:9e:19:db:1e:95:d3:cc:d9:56:e1:f9:
         fb:dd:97:15:b2:19:b9:05:03:73:f3:f5:fb:45:43:45:9a:0b:
         df:45:80:9d:e0:fa:98:40:0f:f5:bc:e6:4f:81:f7:66:99:e6:
         6b:19:5e:6d:95:24:df:08:02:c0:f6:13:24:91:54:c8:6f:8b:
         48:b2:83:1a:0e:59:31:6e:73:1a:cc:89:d6:0d:cb:f9:c3:24:
         ac:01:b2:92:b5:cd:e0:e6:3d:1b:96:65:b6:d6:5e:fa:41:1b:
         ff:09:80:61:1d:85:b9:70:03:0f:23:6d:e0:88:f0:0d:e9:8b:
         e5:94:c9:81:70:7e:6f:49:9e:a6:39:e1:27:c1:1c:d3:c8:1b:
         ce:e2:09:fc:b2:ca:be:a2:7d:17:9a:17:0a:5a:64:3a:1e:03:
         5f:4a:c4:e6:41:33:2d:bc:bf:98:ae:6e:9d:90:c4:40:27:dc:
         8f:31:9e:97:98:c4:60:84:7c:38:e6:17:b9:08:42:54:37:31:
         43:c4:e8:fe:b1:c0:d1:e3:7d:2c:f0:f7:e5:2d:51:5e:55:c4:
         6d:7c:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org