Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a3a2f33332d3333203d3e20323638323438.roa
File:                     323830343a346533633a3a2f33332d3333203d3e20323638323438.roa (raw, json)
Hash identifier:          GByLNgO8UqllbNzRWJ7tRBzspt2Sv2tKN8yFGaQlJec=
Subject key identifier:   61:56:4D:60:9A:B5:ED:A4:09:68:45:42:B1:66:FB:CD:9E:F7:5D:15
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       212017517AEE643A2F79BF21D1430BB6749B5068
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a3a2f33332d3333203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:14 +0000
ROA not before:           Thu 04 Apr 2024 07:09:14 +0000
ROA not after:            Thu 03 Apr 2025 07:14:14 +0000
asID:                     268248
IP address blocks:        2804:4e3c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:20:17:51:7a:ee:64:3a:2f:79:bf:21:d1:43:0b:b6:74:9b:50:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:14 2024 GMT
            Not After : Apr  3 07:14:14 2025 GMT
        Subject: CN=61564D609AB5EDA409684542B166FBCD9EF75D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:c8:2f:93:d3:d3:d1:fa:45:48:4e:97:fa:
                    37:a8:27:4b:be:94:5d:d3:46:16:37:54:ec:04:84:
                    cf:20:15:79:a3:78:6e:1e:8f:8f:5d:c4:82:c1:cf:
                    ce:a2:12:55:33:86:9b:26:f0:bd:6e:21:a6:50:c6:
                    ca:b0:a1:1d:77:19:bd:df:28:67:01:9a:5e:2b:c1:
                    50:37:01:11:48:8a:d0:29:52:91:90:d1:c6:b0:51:
                    b3:bf:0f:10:f3:14:ef:0e:f0:0e:da:9c:18:11:d6:
                    19:24:29:f7:54:8a:bb:b4:c2:9f:4c:92:cf:66:6d:
                    47:a0:b1:c8:18:1c:c2:30:06:71:ba:b0:de:88:3b:
                    85:a1:70:71:d4:b5:73:13:24:c7:a2:ee:c9:77:21:
                    46:4e:27:93:9a:bb:02:43:18:ff:5d:b7:dc:fa:a2:
                    a4:1b:7d:47:a2:31:d6:5e:8c:80:8f:8a:d0:13:6f:
                    3d:1b:89:7d:c9:91:6f:e6:22:3f:cd:53:86:8e:49:
                    b0:45:01:81:87:ea:4a:73:24:f2:bc:10:97:71:39:
                    18:44:a0:9e:6d:4d:34:92:0c:a0:e7:4f:89:2b:3a:
                    5d:7c:99:7a:01:2a:06:88:63:9d:9b:bc:9e:2a:b3:
                    1a:3f:ee:76:d5:56:48:6a:26:27:2b:79:2a:d1:8b:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:4D:60:9A:B5:ED:A4:09:68:45:42:B1:66:FB:CD:9E:F7:5D:15
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a3a2f33332d3333203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:ee:3a:c4:6c:d1:3f:95:8d:f7:f0:f3:f6:dc:6f:fe:fc:3c:
         46:72:69:48:bf:14:46:44:a9:30:b0:00:65:ea:a5:c6:eb:55:
         ee:86:55:57:6b:a2:43:ed:14:5f:ac:bc:14:ba:68:57:9e:52:
         31:c5:2f:fb:3b:d4:aa:1a:01:bf:f2:b3:a7:7b:8a:78:f8:15:
         66:12:cd:3b:76:46:88:2d:05:3d:3f:60:4c:a7:b0:07:4f:00:
         e3:31:a9:dd:15:d3:60:e0:25:03:8e:e9:99:a9:aa:cc:95:0a:
         dc:64:22:05:e5:f3:36:63:82:66:10:cc:46:fe:3a:d0:70:83:
         2f:02:84:2e:bb:84:75:80:ed:20:e3:cb:6b:0d:13:85:15:4b:
         68:ca:55:4b:64:70:19:b8:28:a0:96:73:48:72:c7:32:5e:7d:
         59:39:48:5e:14:ed:f4:50:d7:54:56:89:c0:09:98:15:ed:79:
         c4:14:71:27:e0:eb:6f:95:87:2d:08:63:63:53:77:22:58:3e:
         c4:97:61:16:a8:b5:09:32:aa:f9:8a:7f:ad:55:9b:57:86:21:
         f7:9a:61:fa:e5:11:86:a9:6f:c4:1b:e7:83:01:e5:3c:8b:59:
         be:59:34:7e:22:5c:05:00:4b:cc:39:66:f6:fd:07:23:80:27:
         f8:e8:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org