Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa
File:                     323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa (raw, json)
Hash identifier:          D1B+9cq/HGZNgkW0x6W37MypIQI1hpMVwd2gOZKvo7g=
Subject key identifier:   42:0C:AE:5C:D7:C5:45:5A:C4:F2:5A:D7:BE:48:DE:2F:A3:A9:30:45
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       07D6CFA5E88F568F6E185D0E5457809C2C4C24AA
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:33 +0000
ROA not before:           Mon 04 Mar 2024 14:51:33 +0000
ROA not after:            Mon 03 Mar 2025 14:56:33 +0000
asID:                     268248
IP address blocks:        2804:4e3c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d6:cf:a5:e8:8f:56:8f:6e:18:5d:0e:54:57:80:9c:2c:4c:24:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:33 2024 GMT
            Not After : Mar  3 14:56:33 2025 GMT
        Subject: CN=420CAE5CD7C5455AC4F25AD7BE48DE2FA3A93045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:85:1f:38:b9:67:68:1a:62:64:9f:c6:60:
                    d5:26:db:a1:a1:b2:28:7e:c6:6d:bc:6d:95:a2:88:
                    06:44:7e:a5:81:93:d5:2a:27:ef:ec:9d:c0:80:5a:
                    03:31:5d:b5:97:35:64:ea:b2:14:ef:a1:c2:85:c3:
                    dd:81:16:37:59:8d:f9:64:eb:57:a2:7d:9d:fd:5c:
                    2d:33:b1:00:9c:d6:de:f1:73:2b:03:a1:42:cc:14:
                    bb:b7:73:f7:a5:9b:b2:6f:5a:b3:4c:cf:ad:c8:0e:
                    fa:2c:66:24:0b:ce:94:75:aa:57:6e:fc:53:ab:1f:
                    6c:d0:42:25:74:7e:83:45:83:31:67:95:22:e6:47:
                    c0:ad:34:ee:f4:32:8b:7c:e1:46:7a:b7:13:6c:cd:
                    4f:03:ab:00:0d:3c:4a:67:a2:07:7f:54:69:36:73:
                    a6:46:ed:76:0f:c8:3b:31:2c:f1:b6:95:a9:9d:6d:
                    17:5a:cb:db:6e:6a:60:fc:88:58:09:1d:40:cf:59:
                    e8:70:7c:1b:0a:75:e2:e2:36:29:4b:ac:4e:88:9c:
                    57:bd:ed:0d:56:e5:4c:18:5d:e7:62:23:b5:50:70:
                    c3:4b:f9:a5:ce:a4:9e:0e:3c:69:8c:9d:b7:71:fb:
                    83:14:75:08:b4:52:47:eb:0c:33:68:4e:ba:c3:79:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:AE:5C:D7:C5:45:5A:C4:F2:5A:D7:BE:48:DE:2F:A3:A9:30:45
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:87:27:94:f3:a2:d2:18:4a:10:a4:16:7e:4a:b5:77:cc:
         ce:2e:12:b3:ac:9a:ae:ad:f7:9f:7d:4a:65:a5:23:75:65:42:
         82:fc:2e:ca:fc:10:47:ab:b6:1c:8e:76:06:78:f8:c9:dc:4f:
         ad:f2:df:82:8d:18:6f:24:60:47:76:76:5d:a9:01:3e:07:2e:
         22:8b:26:82:a4:e6:5b:6e:9d:f2:67:3f:ec:50:1b:99:23:93:
         ce:86:d2:66:a8:74:c4:62:89:99:5d:28:2c:16:7a:7b:ce:ad:
         18:38:e5:f4:67:05:c1:ea:af:19:04:fb:17:bb:8e:18:bc:62:
         3b:f4:de:34:e8:72:f8:0b:10:7a:5e:f8:5b:e6:f9:47:02:c7:
         83:20:66:69:a0:d8:72:93:db:55:37:d1:2c:7c:c9:f1:db:82:
         78:ab:5f:4d:cd:2a:de:16:e5:ce:8a:0a:e2:c2:d5:7b:a9:6e:
         14:7d:ce:51:63:80:a5:c2:7a:d2:61:d7:bd:2d:56:40:9a:55:
         56:ef:a1:9f:c0:2b:e8:fe:ae:23:06:75:93:6a:3f:5e:65:f3:
         df:86:bb:76:cd:b6:8d:64:35:c4:23:15:90:8e:db:06:ae:aa:
         0e:2d:0f:49:e8:8a:d9:08:6e:ff:a5:04:8f:68:5a:7b:84:38:
         da:e1:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org