Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33332d3333203d3e20323635323037.roa (raw, json)
Hash identifier:          4PRcDmzeughgcTlAWMwp3CGabvCzkMiC3i0FSupN938=
Subject key identifier:   B2:3C:E7:41:35:1B:74:41:8E:76:A0:41:5E:49:C5:BE:4D:D5:02:FC
Certificate issuer:       /CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
Certificate serial:       5930F3ECBAE9077312CEF54AD18653100CCEC439
Authority key identifier: 61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa
Signing time:             Fri 30 Jun 2023 13:06:46 +0000
ROA not before:           Fri 30 Jun 2023 13:01:46 +0000
ROA not after:            Fri 28 Jun 2024 13:06:46 +0000
asID:                     265207
IP address blocks:        2804:2c44::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:30:f3:ec:ba:e9:07:73:12:ce:f5:4a:d1:86:53:10:0c:ce:c4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
        Validity
            Not Before: Jun 30 13:01:46 2023 GMT
            Not After : Jun 28 13:06:46 2024 GMT
        Subject: CN=B23CE741351B74418E76A0415E49C5BE4DD502FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:c7:3c:41:9c:e7:c2:7f:68:86:a3:d9:d1:
                    9b:15:cb:26:6e:b7:86:03:bb:3e:fc:4e:8f:32:67:
                    e6:9d:7c:bd:ba:b7:02:e2:47:08:36:7e:78:ef:3d:
                    d8:34:6c:ed:8a:85:71:34:58:55:71:ff:93:8f:11:
                    92:bb:ec:ed:aa:2c:73:b9:9b:d1:a6:05:12:2d:af:
                    0b:2c:cf:2e:35:44:a6:f9:c3:eb:c4:b4:a1:2a:82:
                    3f:eb:95:3e:27:5b:97:02:97:1c:2c:bc:8a:05:d5:
                    b6:62:63:f5:98:01:f1:6d:87:36:df:1b:20:6e:3c:
                    ef:a0:00:1a:9e:51:7b:fd:ee:b5:45:de:bf:1d:d0:
                    d1:c7:8f:37:50:b1:40:d4:a2:6c:db:0c:85:ac:f0:
                    f9:9b:cd:e8:86:15:c4:9b:5a:d7:a0:6d:df:4a:fd:
                    bd:e3:3c:44:68:eb:4b:7b:7b:4a:0d:c8:36:0f:2f:
                    63:b7:f8:03:c8:73:da:e1:89:b7:a4:5a:9b:28:39:
                    f2:58:1b:bb:73:37:4f:92:6d:2f:07:74:56:a1:96:
                    b0:ec:0a:9e:8d:74:06:72:43:43:82:fa:04:11:ff:
                    e1:45:cb:09:3b:8f:06:2b:53:66:69:a2:c9:12:89:
                    73:86:f0:3e:0d:51:f3:8c:1e:e7:cd:21:06:ae:9d:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:E7:41:35:1B:74:41:8E:76:A0:41:5E:49:C5:BE:4D:D5:02:FC
            X509v3 Authority Key Identifier:
                keyid:61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:a5:a4:1c:da:fb:18:95:24:88:0b:03:d8:f3:b2:d3:71:
         64:0e:78:c0:0a:c4:f1:03:9c:9d:55:3a:41:3d:06:57:c7:e4:
         8c:68:e5:89:44:be:fe:a9:f0:e7:22:3c:33:e7:c9:f2:68:52:
         4a:2a:53:72:e6:4e:de:f1:bd:f8:b2:86:35:29:ff:85:2e:0d:
         ac:38:66:90:a7:ef:7f:fd:f4:7c:c0:b9:e5:0e:a6:23:ce:7f:
         a4:30:26:65:19:e4:db:c9:fb:dc:25:c4:1e:09:79:86:b7:ec:
         bb:1d:22:53:0e:e5:ec:12:d9:cf:a2:b9:68:42:0b:22:7b:a5:
         95:f0:b9:37:e8:56:18:b6:93:fc:f9:9b:0f:b4:bb:81:49:b3:
         38:b6:4d:8d:6d:c7:d4:16:7b:5f:f6:bd:84:17:46:de:77:a3:
         82:cf:bc:5c:37:50:4d:e2:be:f7:b9:f2:e3:e1:66:3d:c8:93:
         2f:f4:0e:cc:5f:73:d6:60:67:4a:40:b9:04:02:c0:de:c3:49:
         47:25:21:c3:f4:6d:be:24:c9:c6:44:2a:7d:ae:23:13:3a:69:
         db:d7:40:61:7e:c6:e8:35:ef:90:5b:17:02:65:b1:9a:da:16:
         0a:18:b0:1a:f9:1a:ac:d9:a8:af:48:82:e9:62:db:85:6a:41:
         54:eb:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org