Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa
File:                     323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa (raw, json)
Hash identifier:          yuGTMFXKjc0R5JEUp856m7WXLEwwPZwhbswMBJM8JsE=
Subject key identifier:   C6:83:1E:42:CE:9D:E2:E6:20:86:1B:8D:88:2A:B2:7D:F1:F5:4E:61
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       299DFBDF53F644BF30EE6863E5962379C7488066
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:14 +0000
ROA not before:           Thu 04 Apr 2024 07:09:14 +0000
ROA not after:            Thu 03 Apr 2025 07:14:14 +0000
asID:                     268248
IP address blocks:        2804:4e3c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9d:fb:df:53:f6:44:bf:30:ee:68:63:e5:96:23:79:c7:48:80:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:14 2024 GMT
            Not After : Apr  3 07:14:14 2025 GMT
        Subject: CN=C6831E42CE9DE2E620861B8D882AB27DF1F54E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:fe:95:c3:20:63:0f:f6:9e:be:7c:3f:a3:
                    a7:eb:8e:a7:58:89:9b:c7:67:c1:42:6b:e0:0c:4b:
                    fa:da:d5:10:41:55:b8:27:64:ea:98:f4:37:d9:86:
                    bf:52:4d:4f:62:21:ac:19:71:e9:b0:e9:53:27:53:
                    1c:04:ef:48:00:58:15:7d:f4:f2:39:62:2f:67:6a:
                    93:a4:d8:3a:07:b8:4f:61:e1:ee:50:68:60:3d:20:
                    07:17:cb:02:c3:9d:b5:25:f2:44:9e:0d:92:0f:43:
                    bd:a0:16:44:e9:32:fe:86:cd:bf:45:45:83:ce:20:
                    bb:62:74:1b:09:06:a3:66:4e:02:04:96:fe:b5:e9:
                    1b:c8:99:66:dd:af:57:47:73:01:6e:67:22:7a:32:
                    f8:45:2c:37:78:08:64:44:8a:27:6f:35:cd:e5:c2:
                    38:26:88:c8:12:fa:8c:0f:55:a1:32:7a:38:f6:de:
                    f4:79:e8:3c:d4:e3:2c:11:77:02:ad:8d:2b:bd:80:
                    a0:10:dd:f4:e3:74:c5:b0:df:51:8c:19:eb:75:80:
                    65:6f:40:09:11:b0:c4:ee:44:02:80:90:0e:0b:c0:
                    d8:b2:77:f5:19:0c:8b:18:d7:64:27:85:8a:04:ee:
                    32:79:c6:d6:f0:4d:7f:0b:28:ff:28:89:dd:c0:23:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:1E:42:CE:9D:E2:E6:20:86:1B:8D:88:2A:B2:7D:F1:F5:4E:61
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a633030303a3a2f33342d3334203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:c4:4c:21:32:85:da:20:5b:33:3b:e7:a4:47:4f:ac:19:
         43:24:64:49:bd:c4:40:9e:c7:33:d7:51:42:f2:e9:8e:a3:20:
         c9:a8:81:89:1b:92:db:0a:79:9f:d3:86:90:aa:dd:dc:15:7a:
         2d:41:2c:c5:85:84:b1:32:cf:e0:93:61:15:6f:af:0e:c8:a7:
         bf:d9:b6:03:0e:e4:74:df:af:90:c9:ba:68:46:96:44:1f:81:
         74:18:59:7c:28:af:45:b4:10:05:a8:f8:cc:83:bf:0c:8f:a1:
         82:d4:9a:3c:4e:7a:40:1c:3f:a2:a9:9e:08:fc:eb:18:00:50:
         eb:eb:dd:86:22:b9:04:c9:01:d8:dd:b2:87:33:80:62:0d:44:
         51:6e:10:12:f3:fe:53:7c:ad:93:01:33:62:a2:77:13:ce:5b:
         77:3d:52:01:74:58:e0:be:bc:1c:2b:dd:d5:b0:17:8c:67:e9:
         80:0e:ab:03:f1:80:f9:c9:af:e7:ac:3a:a2:a3:da:35:7d:45:
         61:a8:62:eb:d0:db:e4:19:0a:88:62:3b:51:25:81:34:cd:70:
         fc:93:0d:7d:04:15:26:95:a8:b5:3c:6b:9c:28:57:a5:ba:1f:
         19:cd:81:b1:1b:da:fa:86:0a:f9:12:ba:55:20:2a:b3:71:dd:
         58:6f:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org