Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a3a2f33322d3332203d3e20323638323438.roa
File:                     323830343a346533633a3a2f33322d3332203d3e20323638323438.roa (raw, json)
Hash identifier:          jYfKgete+zOdo21VWBV55rEkYoADgxSUEveH57hFgH4=
Subject key identifier:   1C:AF:43:28:8D:4E:B0:37:B8:C4:65:98:A1:F3:95:B6:27:4D:AE:ED
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       63C08006129C421E2380DBD1F577F9F58BCFD812
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a3a2f33322d3332203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:27 +0000
ROA not before:           Mon 04 Mar 2024 14:51:27 +0000
ROA not after:            Mon 03 Mar 2025 14:56:27 +0000
asID:                     268248
IP address blocks:        2804:4e3c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:80:06:12:9c:42:1e:23:80:db:d1:f5:77:f9:f5:8b:cf:d8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:27 2024 GMT
            Not After : Mar  3 14:56:27 2025 GMT
        Subject: CN=1CAF43288D4EB037B8C46598A1F395B6274DAEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:0e:09:57:6d:fd:6c:07:cb:c5:da:78:ed:
                    51:c0:31:f1:1f:a1:24:0b:06:5f:a3:61:db:3c:7d:
                    af:e0:a8:41:90:c5:1c:18:5f:3f:94:d2:ae:9a:fa:
                    41:9a:8a:ff:68:4b:0e:fd:d9:c1:1f:9d:a6:28:25:
                    64:05:e8:c6:35:40:0b:da:c6:ac:a5:0e:f3:d9:70:
                    48:da:a8:8e:c6:a4:b2:29:9e:f7:ca:4c:0a:93:c0:
                    ab:82:ac:fe:84:06:37:5d:82:fe:55:d5:86:11:c5:
                    b3:96:b7:30:26:9d:ed:d0:1a:36:c4:ac:7e:b4:98:
                    41:4c:d0:6c:fa:3e:dc:b7:93:ac:7a:2b:e8:73:f5:
                    92:29:5d:75:5b:5f:d6:d5:17:e5:09:e2:10:d6:91:
                    16:29:50:57:27:c8:74:22:5c:2f:57:8e:a5:d0:14:
                    e6:f7:88:50:55:6d:3a:d5:28:2b:65:ff:70:14:81:
                    a7:26:b9:2d:2c:0e:26:8e:67:2e:9f:8f:19:50:54:
                    44:eb:1c:6f:e8:fc:63:b4:4d:ef:38:61:24:2d:e2:
                    64:93:b5:e2:62:8a:a3:e9:01:81:3d:fa:ae:27:37:
                    6c:4c:2d:d8:50:8c:18:32:7d:73:6f:30:84:99:65:
                    da:2b:a2:db:90:87:8d:d5:a3:0f:06:24:33:5e:38:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AF:43:28:8D:4E:B0:37:B8:C4:65:98:A1:F3:95:B6:27:4D:AE:ED
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a3a2f33322d3332203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:6b:aa:c5:3b:fa:80:30:9d:47:3d:ff:14:c9:83:a8:08:d9:
         44:f4:ab:dc:b4:5f:55:c3:22:8e:cc:49:af:d2:37:e9:62:4d:
         4f:13:82:e6:b4:96:d2:d6:8c:15:0a:3c:12:64:d3:f6:8e:19:
         d4:78:20:66:f8:f2:de:bc:fd:81:ba:0b:2a:64:89:6c:ee:4f:
         77:42:1d:54:d8:63:21:20:a6:63:0a:c3:74:b6:f6:4e:fc:54:
         3f:9b:58:7f:5a:fa:00:a9:3e:b7:90:1e:b7:1a:21:d4:fd:10:
         82:cb:6b:b6:ac:26:87:eb:f9:ee:34:c4:7b:56:99:16:c1:a5:
         69:0e:15:b3:34:d5:c1:28:8b:ad:04:9d:a8:0b:af:01:7a:b2:
         9b:eb:42:a1:21:a6:d2:9e:bf:ea:c3:91:14:5f:ef:5d:b1:12:
         50:3e:0a:40:4b:1b:6d:20:e3:2f:22:ba:cb:e4:9b:9d:63:2f:
         a1:05:c6:5c:e2:9f:00:28:b5:d6:24:35:36:0d:75:4e:8c:00:
         33:a0:bf:6d:54:31:6a:75:bd:d1:72:d3:d3:33:e0:26:a8:2d:
         e8:c0:b1:0a:53:67:e1:fe:75:35:21:0c:dc:e4:f4:30:97:03:
         62:c3:8e:49:e6:60:07:87:aa:ac:02:12:2d:f5:bf:cb:49:66:
         4a:2c:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org