Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          yORIZdnwl7LB7fuzP+d30tAN03+0aTPSWc8fe+SZwtA=
Subject key identifier:   B8:EE:BD:BA:66:A7:61:EF:EA:92:F0:7A:E6:1D:31:4E:CE:67:6E:2A
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       6E204C3D82A41A84A2B12DAFC13113673ED4DEAC
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:13 +0000
ROA not before:           Mon 11 Dec 2023 14:00:13 +0000
ROA not after:            Mon 09 Dec 2024 14:05:13 +0000
asID:                     264137
IP address blocks:        2804:2304:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:20:4c:3d:82:a4:1a:84:a2:b1:2d:af:c1:31:13:67:3e:d4:de:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:13 2023 GMT
            Not After : Dec  9 14:05:13 2024 GMT
        Subject: CN=B8EEBDBA66A761EFEA92F07AE61D314ECE676E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:fe:ce:4c:b7:1f:18:81:f4:97:2c:ea:0f:
                    0e:fa:f4:9c:74:19:ef:e4:2f:0f:59:f3:57:5e:c1:
                    46:91:3c:47:75:33:c5:f3:9a:fb:a8:b0:bf:c2:b2:
                    9e:b9:27:08:a5:c0:de:e4:fe:a8:8e:04:1e:a1:82:
                    b2:6b:8b:02:48:e5:43:08:08:e3:d6:9e:16:a7:4e:
                    6b:82:2c:a4:3e:cb:43:7b:e2:c0:bb:8d:e1:2a:28:
                    a1:c4:b6:ad:0f:9f:84:40:94:36:de:f3:c3:51:b2:
                    c6:8a:f0:84:cb:75:58:97:3f:d5:59:a0:30:de:06:
                    1f:ba:a1:68:1f:a6:71:c0:05:1b:ad:71:fe:7f:1e:
                    1e:9d:b4:4d:48:ed:59:d6:cf:e9:12:18:70:fb:85:
                    8b:9a:e1:0f:fa:f6:e0:95:23:37:35:3d:14:9c:75:
                    57:cc:cc:bb:e7:0d:ae:ba:e9:2f:b5:bb:25:cf:29:
                    78:23:ba:92:05:9e:5e:61:9d:20:75:c0:d3:65:20:
                    a0:0c:08:b5:bc:b5:2a:47:6c:e4:5d:18:3c:f6:96:
                    b2:74:0c:b3:ff:82:2a:e3:cc:88:51:9f:96:43:c1:
                    0f:a4:7e:b9:cf:fe:d9:f2:78:3b:80:db:59:ed:8b:
                    62:03:5e:49:7b:fd:86:73:2f:9f:d9:20:9a:45:eb:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:BD:BA:66:A7:61:EF:EA:92:F0:7A:E6:1D:31:4E:CE:67:6E:2A
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:00:a4:f9:52:49:dd:ae:8e:e2:2b:0d:c4:c1:2e:da:d3:
         ef:e7:53:87:64:c1:31:83:96:c4:70:c9:54:1a:81:b8:ce:96:
         69:4c:50:ed:83:a2:24:e8:75:4b:40:76:7d:7d:48:4e:7d:84:
         44:9c:d2:a0:3a:e0:3b:a3:8b:9c:b8:46:4a:2b:0c:8f:50:5c:
         64:44:31:44:df:a0:42:62:30:c6:cc:3f:43:7c:a7:34:57:00:
         18:67:19:ab:4e:2d:d3:38:96:36:d1:90:40:37:51:af:6f:c2:
         35:14:72:55:45:da:70:dd:24:e3:68:a3:be:7f:f5:c9:3b:aa:
         7d:1d:41:f8:b6:4e:80:46:48:d8:75:e1:94:9e:5c:cd:83:92:
         ea:dd:ce:36:e4:bd:e1:a5:d4:9e:63:0c:e8:40:7c:bb:42:07:
         60:dd:f4:f2:4d:4c:8a:b3:6d:24:78:3f:b9:89:26:22:d0:36:
         32:18:a5:6d:fd:8f:4e:d0:d9:66:f5:3e:89:76:e5:e1:c6:72:
         7d:8a:f3:e2:7e:72:31:14:2e:14:eb:89:38:1b:5f:39:cc:c6:
         cf:9a:dc:f4:56:ea:db:0d:1b:c1:23:57:f4:fa:be:00:2b:3b:
         b3:a8:14:fb:16:da:ac:36:c4:39:bd:f5:fc:c8:fb:3d:ce:5f:
         e5:1e:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org