Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/323830343a346533633a3a2f33342d3334203d3e20323638323438.roa
File:                     323830343a346533633a3a2f33342d3334203d3e20323638323438.roa (raw, json)
Hash identifier:          2/EETWWKgW/JXrIx2bzg/swr7LMHhb4uVgu5gms+BLs=
Subject key identifier:   E9:CF:C8:E8:AA:CB:8C:EA:11:F6:2E:CA:05:C5:E6:C2:A4:51:C5:88
Certificate issuer:       /CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
Certificate serial:       09CEEA4F98B9DAF1A88A73717BA6279188386989
Authority key identifier: E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/323830343a346533633a3a2f33342d3334203d3e20323638323438.roa
Signing time:             Wed 08 Mar 2023 17:52:53 +0000
ROA not before:           Wed 08 Mar 2023 17:47:53 +0000
ROA not after:            Wed 06 Mar 2024 17:52:53 +0000
asID:                     268248
IP address blocks:        2804:4e3c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:ea:4f:98:b9:da:f1:a8:8a:73:71:7b:a6:27:91:88:38:69:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
        Validity
            Not Before: Mar  8 17:47:53 2023 GMT
            Not After : Mar  6 17:52:53 2024 GMT
        Subject: CN=E9CFC8E8AACB8CEA11F62ECA05C5E6C2A451C588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:42:a0:b8:e9:c6:3e:d6:3d:f5:78:ae:36:
                    a2:34:68:07:ad:98:a2:ad:db:33:1a:9d:a2:ee:05:
                    ee:c1:c2:9f:3c:d4:18:f8:7a:c4:f2:33:ab:f4:8b:
                    02:b6:b4:4c:9d:74:39:67:61:52:0f:f5:a5:d1:38:
                    34:2d:c3:e0:2c:99:45:6a:de:6c:2d:c7:b0:ae:6c:
                    06:80:37:7c:c3:18:3d:05:bf:fb:74:45:ec:f9:f2:
                    51:36:8c:c3:08:b3:b8:67:7a:af:69:ea:76:2d:95:
                    b0:e8:81:38:73:ad:5e:14:b1:82:a6:66:b2:69:c8:
                    b2:a7:2b:71:95:4c:be:88:02:72:f3:39:cc:15:17:
                    58:7b:77:1a:4b:bc:fc:af:fa:65:08:a5:2e:68:47:
                    20:b5:f2:01:1c:94:5a:7e:50:5e:60:2d:26:05:19:
                    d6:a8:a9:29:d9:ac:aa:85:dc:57:01:86:aa:8a:90:
                    6c:76:49:3a:e4:a1:38:c2:28:64:5c:8e:8a:e6:0a:
                    0e:70:3c:3c:74:42:26:01:07:4d:24:0c:e5:5c:a7:
                    f8:cc:89:29:a1:64:e7:c0:93:4c:15:cd:ac:92:f3:
                    b1:b1:e7:e2:32:61:83:f4:e3:24:c3:ee:26:4f:11:
                    a5:2a:b9:b9:a5:45:55:aa:94:22:e5:38:7b:4c:bc:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:C8:E8:AA:CB:8C:EA:11:F6:2E:CA:05:C5:E6:C2:A4:51:C5:88
            X509v3 Authority Key Identifier:
                keyid:E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/323830343a346533633a3a2f33342d3334203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:88:7b:76:63:0d:a1:1a:af:ce:c1:9b:c7:a5:6d:6e:76:
         c9:4e:57:79:4c:d6:51:5b:d1:20:c9:13:2c:4a:38:9a:d1:dc:
         64:90:5a:00:f0:1b:b9:ed:47:33:89:2c:4d:47:55:7a:92:29:
         3f:54:8b:7b:31:f4:38:31:24:b6:dd:b7:b3:03:81:ec:8f:fb:
         e0:f8:bd:96:6b:ad:5d:40:bf:15:5f:f9:57:e8:da:7a:90:92:
         fb:98:c8:d0:59:18:f3:10:43:59:60:f0:c6:de:15:be:b3:0b:
         37:e5:e8:f5:f6:0f:9c:42:96:28:82:90:09:0a:8a:b2:c2:08:
         95:9b:52:29:e6:46:f0:c7:e7:08:af:4a:d0:b4:04:d0:c1:25:
         45:94:b7:49:71:3c:b8:d1:d1:01:50:9d:02:ac:9a:8a:53:36:
         e2:9e:b9:e0:0d:61:7c:ea:dd:b5:1f:6a:77:ba:71:26:70:21:
         1c:af:d6:3e:01:7e:dd:65:64:86:93:6d:15:1f:cd:b9:2d:ef:
         1b:4f:29:d3:f1:82:1e:52:eb:ca:9f:75:4d:d0:e7:73:cb:39:
         45:9d:95:a2:e8:cf:99:0a:7d:81:df:85:b2:62:af:39:4c:d4:
         46:25:c3:5e:42:e4:a8:cb:bc:c2:1c:9c:9d:3f:bb:2e:1d:4e:
         20:59:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org