Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa
File:                     323830343a346263633a3a2f33332d3333203d3e20323637333330.roa (raw, json)
Hash identifier:          EVvqQRrvqf2bDBf9mM5rP/02CKynRCoLEmdWqtxszWI=
Subject key identifier:   8A:C0:02:63:D3:01:4C:32:E3:3A:BD:7B:28:55:60:D8:64:6E:F5:3E
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       2E4A18B6A40FE83D52F034A552A6A89713D49AFB
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:57 +0000
ROA not before:           Wed 03 Apr 2024 21:46:57 +0000
ROA not after:            Wed 02 Apr 2025 21:51:57 +0000
asID:                     267330
IP address blocks:        2804:4bcc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4a:18:b6:a4:0f:e8:3d:52:f0:34:a5:52:a6:a8:97:13:d4:9a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:57 2024 GMT
            Not After : Apr  2 21:51:57 2025 GMT
        Subject: CN=8AC00263D3014C32E33ABD7B285560D8646EF53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:83:e5:1b:76:72:47:cd:3a:1e:8f:f5:50:
                    22:0a:5e:8d:5f:d0:85:07:81:61:11:94:7c:59:c8:
                    7c:a4:af:f8:67:c2:8d:14:ca:80:78:ad:cf:5a:19:
                    e5:66:d0:eb:fa:3d:14:8d:0b:11:95:87:dc:8b:34:
                    fb:16:3c:d5:18:15:fe:c1:da:d7:89:ad:59:b2:28:
                    22:fb:64:55:9d:ad:ee:af:30:55:1e:1e:ec:1c:58:
                    5b:bf:d9:c8:e7:31:71:64:57:2a:6f:4a:ce:03:26:
                    7e:7c:da:99:1e:54:16:09:51:ea:03:cd:79:2a:7e:
                    ba:c6:01:3b:9f:1d:e3:95:7c:36:9a:6b:7a:ee:55:
                    54:8e:f1:54:c9:be:44:99:65:7b:ee:95:a7:88:47:
                    c1:87:9e:cd:d4:7e:07:af:51:be:99:a3:fe:07:d6:
                    4d:8a:53:64:5f:fc:a8:13:1a:ce:96:66:00:18:0a:
                    d0:37:60:99:f8:4d:c5:b0:6c:a3:64:ba:f9:3d:24:
                    91:aa:e5:da:92:b3:d6:dc:92:b6:7f:c8:36:fd:76:
                    b3:cc:84:13:c1:92:14:46:b8:ea:bb:8d:d4:e8:cd:
                    c2:c2:7a:ab:b5:3f:8f:fa:50:a5:f8:0b:11:5d:d6:
                    ed:76:39:cf:a1:01:d4:43:20:ed:29:c0:da:a8:1a:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C0:02:63:D3:01:4C:32:E3:3A:BD:7B:28:55:60:D8:64:6E:F5:3E
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:25:74:bc:97:71:65:06:96:8c:56:01:14:68:22:09:9d:
         1b:88:93:07:73:7b:97:ca:47:45:ec:eb:57:a6:67:67:d0:67:
         51:aa:c6:4e:ab:9b:44:03:35:d7:2c:bb:1f:d6:55:a5:6e:7c:
         88:4a:cb:54:2d:4c:9b:81:a6:df:82:04:97:fb:d3:5b:f5:55:
         9a:c8:3b:cb:b6:09:d3:3f:15:b2:15:15:c6:65:35:68:4c:b0:
         37:81:45:61:9d:5b:11:79:8e:32:5d:55:45:5d:bc:ee:4a:4b:
         64:b9:bf:c0:ee:3d:55:2d:84:cd:b7:ec:4e:ad:58:e1:63:47:
         2d:72:ab:b0:4d:32:d8:ae:73:52:47:f9:06:2f:d3:de:85:12:
         cb:87:4e:36:38:db:d6:75:dd:64:19:ea:b2:3d:92:c3:81:de:
         44:39:3f:61:6b:82:8c:dc:e4:16:05:9c:d0:02:7b:90:57:0e:
         79:62:cd:8e:a0:70:3c:33:03:29:6e:db:28:6f:13:87:a6:cf:
         f2:af:ec:57:72:5d:4d:38:15:cc:46:d1:d2:df:0a:59:78:da:
         e0:16:1b:c7:76:d5:f8:12:e9:37:93:16:c2:c2:38:6e:29:8d:
         63:24:29:e4:07:0f:4c:2f:02:db:6a:d9:bf:b2:8b:46:c7:c1:
         1f:32:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org