Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a343030303a3a2f33342d3334203d3e20323638323438.roa
File:                     323830343a346533633a343030303a3a2f33342d3334203d3e20323638323438.roa (raw, json)
Hash identifier:          ncyPQPzr4OkjYUJDFzMlCjp88uVax5KMn7n5HjDKdtU=
Subject key identifier:   26:0E:5C:B1:04:36:DA:6D:E7:14:9C:74:65:A6:CB:93:3D:7E:9E:77
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       49F17690691B6E749A152DAA7999CFA6E9C25FE5
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a343030303a3a2f33342d3334203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:15 +0000
ROA not before:           Thu 04 Apr 2024 07:09:15 +0000
ROA not after:            Thu 03 Apr 2025 07:14:15 +0000
asID:                     268248
IP address blocks:        2804:4e3c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f1:76:90:69:1b:6e:74:9a:15:2d:aa:79:99:cf:a6:e9:c2:5f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:15 2024 GMT
            Not After : Apr  3 07:14:15 2025 GMT
        Subject: CN=260E5CB10436DA6DE7149C7465A6CB933D7E9E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:dd:92:aa:61:89:6d:80:05:46:e1:4b:7c:
                    d5:7a:66:d0:57:cf:92:cd:14:53:94:08:7f:eb:45:
                    6f:de:65:14:83:64:32:59:a6:74:9c:56:d3:d7:ef:
                    b9:ab:45:90:31:92:c6:14:04:50:08:1e:0e:cf:47:
                    1e:b9:96:0c:35:d9:be:8e:c6:db:54:18:4b:f9:07:
                    8e:70:2e:54:ff:b9:61:56:5c:65:a7:13:91:ad:fe:
                    a1:35:b1:8b:ac:67:0c:64:45:9c:28:f5:2e:89:7e:
                    a1:5d:f6:0f:37:f9:06:13:cb:df:35:1b:8b:5b:6b:
                    97:bb:fc:29:60:b3:3e:24:d6:9a:72:f1:c4:15:84:
                    ca:30:1a:bd:ea:77:48:e2:fc:58:74:33:73:33:d6:
                    41:db:49:5d:49:3f:6b:c7:f3:fe:67:ae:43:b8:73:
                    a0:3c:f0:ee:f0:b0:51:96:57:69:e7:28:6c:02:d2:
                    8d:29:fd:06:29:2a:60:da:2d:d8:55:da:06:3b:fa:
                    05:87:82:a1:d0:52:e2:06:34:97:f8:43:c9:4e:5c:
                    13:33:da:5b:25:12:4c:87:e2:19:68:c6:b8:1a:63:
                    b8:a7:b3:c4:3e:b9:6b:be:88:4e:6c:87:75:7a:b6:
                    60:20:cd:53:45:f3:a8:6d:54:86:fc:76:93:20:1d:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0E:5C:B1:04:36:DA:6D:E7:14:9C:74:65:A6:CB:93:3D:7E:9E:77
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a343030303a3a2f33342d3334203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:0a:ac:86:9e:8a:ab:7f:ea:7e:39:c9:91:70:0a:b7:28:
         7f:30:1e:0b:88:e3:41:f3:89:69:e0:10:f9:d5:82:fc:44:2c:
         67:bb:d5:19:0a:12:a9:bc:e7:3e:a7:5f:24:83:c5:61:db:e4:
         4e:fb:56:43:e2:66:c6:07:b5:36:46:f2:59:c4:a7:4a:84:8b:
         28:f6:50:12:54:f5:7f:49:0e:f2:97:2e:68:b3:c5:07:e8:27:
         16:c0:1b:2b:fe:83:d2:1d:bd:4f:54:67:96:b9:93:94:fc:92:
         e5:da:bf:36:3f:ea:08:d7:96:2f:e9:38:cb:79:ac:49:13:a2:
         7b:0f:14:0c:45:be:d4:e9:5f:fe:15:04:80:35:e0:7b:9a:01:
         61:1b:9d:9b:23:63:f7:26:52:53:9e:30:6a:38:7c:4d:c2:3d:
         38:88:be:64:af:b5:23:1b:b4:84:06:09:cd:a5:4f:14:67:a1:
         33:4a:d2:e3:d5:d7:6a:bd:fb:0f:84:be:0e:b7:01:ee:4d:55:
         bd:eb:d2:d4:69:43:64:11:ae:9a:95:73:00:bc:4e:1b:13:ed:
         1d:14:89:64:5d:1a:82:7f:88:9d:48:ea:2e:0b:e5:d5:45:b4:
         fd:6c:df:3b:0a:18:26:ed:a0:00:9c:43:d7:69:ba:82:97:49:
         98:00:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org