Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a3a2f33332d3333203d3e20323638323438.roa
File:                     323830343a346533633a3a2f33332d3333203d3e20323638323438.roa (raw, json)
Hash identifier:          8U7L1pnwh1WLNUA/SIcbdQbXQx1xysKGlnZnCE4v00c=
Subject key identifier:   E6:26:1B:86:6B:AF:9E:6C:8E:B2:4B:47:4A:BA:01:52:53:7E:E8:6D
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       4C229CF9032253EF75B8FE176CA1FF955394F26D
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a3a2f33332d3333203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:29 +0000
ROA not before:           Mon 04 Mar 2024 14:51:29 +0000
ROA not after:            Mon 03 Mar 2025 14:56:29 +0000
asID:                     268248
IP address blocks:        2804:4e3c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:22:9c:f9:03:22:53:ef:75:b8:fe:17:6c:a1:ff:95:53:94:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:29 2024 GMT
            Not After : Mar  3 14:56:29 2025 GMT
        Subject: CN=E6261B866BAF9E6C8EB24B474ABA0152537EE86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:6f:64:8e:ad:ff:54:94:29:58:f4:2b:30:
                    0a:29:7a:de:28:23:5a:44:45:cc:a6:d2:a9:cb:9a:
                    0c:57:22:09:0e:bf:af:dc:00:63:44:d5:25:36:d1:
                    46:c3:19:1d:f4:68:e7:79:ab:19:b5:b1:99:f4:47:
                    18:14:3f:71:81:06:fd:93:34:43:ae:4c:6d:ef:c2:
                    b0:10:5a:5f:3b:59:48:92:f4:b4:f0:83:a6:c1:7a:
                    cb:7c:e2:1d:00:53:0f:a5:75:c5:6f:55:94:68:9c:
                    0d:67:06:0b:ea:d8:61:e3:7f:5d:2c:c6:bb:b1:73:
                    63:0b:27:27:3e:ea:b3:52:d1:d4:1e:45:60:52:c8:
                    ba:5e:3b:e1:b6:6f:5d:7c:b8:6d:b1:3c:f5:17:ec:
                    d9:6d:63:f9:26:cf:40:3b:f2:1a:27:5e:95:2e:1c:
                    f5:8d:0e:fe:05:b9:66:6c:ab:37:cc:d5:e6:d5:54:
                    36:55:13:51:3a:0d:d8:96:e8:a3:d3:90:4e:23:fa:
                    1f:9d:ab:e1:ec:f8:15:45:48:5d:9c:a2:9e:f5:e2:
                    b9:59:4b:a3:f3:ff:28:db:a4:91:01:8a:be:b2:5f:
                    91:b3:05:1e:f0:7e:db:80:77:58:04:52:7d:f2:ca:
                    9e:73:ea:11:de:9a:77:b1:9a:e9:14:c8:41:ff:61:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:26:1B:86:6B:AF:9E:6C:8E:B2:4B:47:4A:BA:01:52:53:7E:E8:6D
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a3a2f33332d3333203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:9b:c2:4f:2c:b5:63:c3:59:9d:78:c2:ae:b9:94:3f:02:90:
         63:f8:78:30:59:80:64:8f:fb:b4:e9:aa:97:6e:71:a4:db:84:
         42:e0:cc:62:d1:64:0a:cc:73:51:73:90:27:31:a8:0c:9d:10:
         ff:9b:aa:04:1b:a1:bc:ea:89:44:93:ef:b2:52:de:20:2c:22:
         2c:04:f4:1b:b5:b7:22:75:39:5a:e2:ee:b5:f9:1c:89:63:09:
         d0:75:f0:fd:9f:86:f6:a2:7a:45:92:cc:c6:aa:b3:45:c5:cd:
         58:ba:d6:50:fd:67:77:1d:8e:92:65:8a:42:e7:f1:dc:2e:ba:
         7d:1e:ac:98:b0:03:49:e9:b7:91:d5:cb:fe:62:54:d0:27:e9:
         1b:e5:77:e0:4c:f6:fb:59:02:9d:71:8d:bf:6d:ab:6a:2b:52:
         ec:4e:4e:6f:46:7e:3e:e0:e8:57:1d:eb:2a:d3:2c:dc:bf:1d:
         bf:96:16:a1:cd:f2:02:7c:29:e6:27:66:f7:26:e1:be:a1:82:
         b8:b9:51:d3:b3:f3:44:b0:01:0e:17:80:d7:bc:9f:6f:91:82:
         5f:8f:c9:40:fe:af:06:ef:da:af:cb:7a:ed:34:27:de:5a:e1:
         8f:3f:b1:3c:8a:ff:10:08:0b:92:df:d3:52:6a:44:92:ac:a5:
         bd:5d:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org