Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/323830343a336163633a3a2f33322d3334203d3e20323636313130.roa
File:                     323830343a336163633a3a2f33322d3334203d3e20323636313130.roa (raw, json)
Hash identifier:          FPB2XtaSc6Kk/aRwGnYlAoGI0ZgMsB5SipVjv+Do2W4=
Subject key identifier:   12:58:5A:BD:39:3F:CF:4A:FA:90:EB:3E:3F:5B:BA:34:A9:B6:6E:F9
Certificate issuer:       /CN=2B388AC45AD4E0C291BBD140A577D7E912E67CF0
Certificate serial:       278C123077D94BE91C73A2629017F6E80103262E
Authority key identifier: 2B:38:8A:C4:5A:D4:E0:C2:91:BB:D1:40:A5:77:D7:E9:12:E6:7C:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/323830343a336163633a3a2f33322d3334203d3e20323636313130.roa
Signing time:             Thu 28 Sep 2023 13:37:42 +0000
ROA not before:           Thu 28 Sep 2023 13:32:42 +0000
ROA not after:            Thu 26 Sep 2024 13:37:42 +0000
asID:                     266110
IP address blocks:        2804:3acc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8c:12:30:77:d9:4b:e9:1c:73:a2:62:90:17:f6:e8:01:03:26:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B388AC45AD4E0C291BBD140A577D7E912E67CF0
        Validity
            Not Before: Sep 28 13:32:42 2023 GMT
            Not After : Sep 26 13:37:42 2024 GMT
        Subject: CN=12585ABD393FCF4AFA90EB3E3F5BBA34A9B66EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:15:46:dc:2f:7b:e0:75:2d:1c:2a:dc:53:
                    7e:c3:d2:f7:68:35:d5:5f:be:1b:31:ac:15:0a:c5:
                    fb:5c:a6:7a:ac:3b:5e:2c:4b:e8:5b:57:8d:10:e2:
                    b1:3a:68:dd:91:b3:a9:07:e9:bd:5b:55:a1:65:81:
                    d5:d7:b8:00:f5:25:62:b4:a0:00:b7:1d:65:d6:56:
                    37:b5:eb:bf:0a:e5:c7:07:f8:e2:dd:c4:34:c4:67:
                    2a:fe:f4:0b:f6:21:12:b8:8a:f2:7f:c8:be:67:c6:
                    e1:c0:c2:6a:c8:1f:ae:1b:3c:bc:91:a8:9f:a9:f7:
                    bb:24:ba:3e:92:d0:10:35:3f:f7:3a:c1:32:9e:36:
                    6d:77:1f:36:df:25:3e:83:ed:3f:1b:27:ff:90:0d:
                    72:6c:8c:b1:48:f7:ec:e8:41:88:38:08:3f:42:4c:
                    a7:3d:e9:4b:ff:5b:96:84:9f:73:b5:e6:5f:58:dd:
                    38:5e:3d:18:80:18:64:62:67:bf:0f:59:ec:a8:0e:
                    fd:db:b7:c3:8e:76:e6:36:4b:88:f6:5a:8c:58:82:
                    18:7d:25:3f:a2:78:41:12:4a:d0:2b:a0:f8:99:61:
                    e8:6d:6e:8e:d8:3a:af:08:91:cf:da:57:a7:d1:6a:
                    b2:1a:78:b8:c2:fa:42:22:61:6e:02:cb:ef:67:f4:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:5A:BD:39:3F:CF:4A:FA:90:EB:3E:3F:5B:BA:34:A9:B6:6E:F9
            X509v3 Authority Key Identifier:
                keyid:2B:38:8A:C4:5A:D4:E0:C2:91:BB:D1:40:A5:77:D7:E9:12:E6:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/323830343a336163633a3a2f33322d3334203d3e20323636313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:26:cb:9c:1e:50:1c:3d:21:2d:b9:df:83:93:ed:57:36:76:
         98:77:c6:eb:54:42:1f:72:52:b1:ce:73:af:0e:4b:d6:d8:91:
         81:ed:71:cd:e7:38:10:e0:2e:d6:00:02:ce:66:3d:e1:5c:98:
         93:2f:ac:df:13:6d:50:b3:55:b6:dc:0d:b2:7c:7e:6b:7b:57:
         03:81:e3:06:0f:74:61:18:d9:b5:8e:a5:e0:78:17:f9:fe:71:
         54:ac:cb:c8:64:85:cd:39:d1:bb:e8:44:f2:2a:3b:cc:44:b7:
         e5:89:e8:59:a1:b8:3f:1d:b8:9f:12:82:cb:7f:59:09:17:30:
         df:59:d5:c9:91:f8:4c:4c:28:aa:b1:6d:16:91:be:14:78:8f:
         b0:0b:0b:0b:9f:a2:c5:c0:b5:e7:2d:30:e2:65:43:28:a3:b7:
         9c:c9:b9:4e:0d:3e:f1:09:38:1d:e5:8c:0f:99:48:42:39:52:
         fa:59:84:d4:25:5e:84:56:9b:e2:f5:65:5f:fa:46:0e:09:74:
         80:77:3e:16:06:74:80:ab:a2:c6:a2:ae:ae:20:75:2a:38:81:
         cd:75:aa:5a:80:3b:f9:b9:66:79:74:bc:13:1b:ad:d4:75:50:
         71:ee:7f:88:b0:c1:59:5c:34:a8:f6:51:3d:21:a6:d7:2b:35:
         c9:26:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org