Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa
File:                     323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa (raw, json)
Hash identifier:          8bFmFqYzadOoTXS/a9CUm8xE7efH0V/D886oI4h6b/o=
Subject key identifier:   32:4C:EA:55:DC:61:67:A3:5C:CD:B3:B3:EF:DF:15:BD:5A:C8:72:CA
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       401AD8A7EADC1EFF7E2FEE1DE5069FFD2FF05DBC
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:37 +0000
ROA not before:           Mon 04 Mar 2024 14:51:37 +0000
ROA not after:            Mon 03 Mar 2025 14:56:37 +0000
asID:                     268248
IP address blocks:        2804:4e3c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1a:d8:a7:ea:dc:1e:ff:7e:2f:ee:1d:e5:06:9f:fd:2f:f0:5d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:37 2024 GMT
            Not After : Mar  3 14:56:37 2025 GMT
        Subject: CN=324CEA55DC6167A35CCDB3B3EFDF15BD5AC872CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:f8:9a:1f:9d:ff:55:32:a8:68:fa:c3:f6:
                    d1:ec:80:15:94:e0:01:52:5a:45:c6:68:e7:fb:70:
                    bd:23:17:34:c8:af:ca:eb:29:eb:e2:7b:9a:0a:6f:
                    33:00:94:a2:cc:2a:2d:50:c2:59:b1:3d:d1:b7:c1:
                    54:86:11:1b:f3:77:90:6f:80:18:67:dc:91:cc:cc:
                    be:5b:18:a7:b6:f6:83:4c:86:aa:f5:96:c0:21:9e:
                    ad:2e:c3:2d:29:9a:63:7c:12:1e:23:f7:b1:16:69:
                    a8:34:2a:fa:4b:55:ef:44:72:01:92:50:5b:ac:aa:
                    c5:75:d3:a4:66:c3:a0:2c:a1:05:c0:f2:fc:f0:0a:
                    74:49:e9:ff:62:fd:fd:c7:b8:86:1f:c1:56:e5:ff:
                    b4:82:4f:e1:c6:82:39:f4:aa:7b:d0:eb:c6:3e:1e:
                    07:48:2d:94:4c:fa:06:5d:cf:cb:fc:3d:03:5c:c5:
                    54:1d:1d:43:7c:62:00:ad:2a:ed:c3:00:3a:e3:f9:
                    da:38:21:27:79:af:2b:38:83:d0:e0:cb:5a:d5:da:
                    21:72:36:b5:c5:48:70:b9:a4:80:ef:94:d5:e3:24:
                    16:f3:ad:78:36:ac:be:97:e5:36:51:85:94:8a:3e:
                    3c:6c:5f:dd:f6:ac:f2:8d:0e:ee:f4:a2:82:2c:64:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4C:EA:55:DC:61:67:A3:5C:CD:B3:B3:EF:DF:15:BD:5A:C8:72:CA
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:60:c2:53:97:9f:90:9a:e8:d5:40:38:f6:f4:01:03:21:
         f3:f2:10:c9:08:30:eb:c2:b3:a5:c6:0a:0b:20:d9:f0:04:29:
         36:95:0a:6c:5b:4c:8e:13:76:0b:5c:f2:c6:6e:c6:ea:a3:d1:
         8b:e7:54:2c:ec:3a:d8:d1:5e:3c:5c:8f:d1:79:f9:56:94:d9:
         fd:77:a5:f5:68:61:3c:bb:0b:9d:c7:de:91:48:82:2e:46:98:
         3c:d9:f1:4c:a9:59:3d:48:d4:d0:7d:11:33:f5:f7:e7:3a:d7:
         7c:bb:f8:21:e4:f1:b0:54:53:9a:8b:34:26:23:89:51:99:98:
         6c:d6:fa:e3:46:e2:71:27:dd:d7:2d:20:f8:98:09:e3:07:99:
         82:5e:1f:fe:47:75:fd:29:c6:7b:0b:61:7f:4d:e7:73:41:54:
         61:fb:23:d4:99:51:7e:f7:72:24:c8:7b:71:33:46:fb:f4:3e:
         bf:0b:55:cb:a3:91:39:7b:d5:ae:df:19:94:a1:b7:e0:1b:19:
         c9:8e:67:a2:b1:d5:0d:0b:89:e4:75:87:84:9d:c4:46:b4:56:
         cd:68:2c:48:59:9a:d1:16:42:9b:a6:da:0e:6e:2a:84:6b:87:
         4f:7b:00:64:2e:72:3c:53:e0:e3:20:45:05:d3:81:9a:e2:4c:
         55:da:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org