Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
File:                     323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (raw, json)
Hash identifier:          tqNs4spwilxsUWQA2h2bxKgLhaV/YWL9TyKrpLYZ/S0=
Subject key identifier:   38:DB:FF:FD:DD:D7:61:57:C8:51:EC:EE:B9:48:0C:8C:13:04:AA:10
Certificate issuer:       /CN=D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA
Certificate serial:       051702307DDFC2BA7B24420ACE8E10FB5D855CD1
Authority key identifier: D7:E9:D6:D8:5A:E2:DE:C0:38:FF:ED:C1:DF:D2:20:C8:92:88:A8:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
Signing time:             Fri 01 Dec 2023 06:08:07 +0000
ROA not before:           Fri 01 Dec 2023 06:03:07 +0000
ROA not after:            Fri 29 Nov 2024 06:08:07 +0000
asID:                     267142
IP address blocks:        2804:48c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:17:02:30:7d:df:c2:ba:7b:24:42:0a:ce:8e:10:fb:5d:85:5c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA
        Validity
            Not Before: Dec  1 06:03:07 2023 GMT
            Not After : Nov 29 06:08:07 2024 GMT
        Subject: CN=38DBFFFDDDD76157C851ECEEB9480C8C1304AA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:88:33:bd:df:61:b1:a6:a4:c3:fa:9d:07:
                    18:e9:d5:bb:3d:4e:8d:0c:09:05:1b:9b:81:11:69:
                    30:a2:59:17:cc:96:4e:d7:df:da:8a:c5:dc:04:84:
                    cf:b1:2c:da:d8:2e:4f:e6:b9:d7:79:96:4b:81:be:
                    fa:04:cf:53:ce:da:12:7e:56:a7:e1:2c:6f:31:59:
                    76:b5:11:8b:99:17:a3:5a:40:ca:40:0c:02:57:f1:
                    de:56:ea:2d:71:d9:7d:9d:09:5c:4c:30:df:9a:fc:
                    b0:07:32:da:59:78:ea:ad:08:8a:c3:42:5a:fb:76:
                    fc:65:ca:32:ba:9b:7d:97:06:58:a3:f8:fa:c7:28:
                    95:09:6c:0e:39:99:82:44:cb:db:d9:ff:25:9c:86:
                    66:8f:d2:7e:2b:5a:71:3e:4b:76:f5:1b:98:24:11:
                    23:9a:98:18:b2:d1:d4:c1:8a:37:19:a8:5e:3a:e5:
                    df:fd:a1:c1:c0:17:30:5e:8b:77:cd:af:8a:cf:be:
                    79:43:49:83:d7:31:af:49:cb:6e:47:ab:97:5d:e3:
                    65:25:6d:09:47:02:a2:e9:15:97:74:fb:e1:2c:54:
                    26:fc:cb:a7:74:c8:86:f8:f0:0b:dd:fa:e0:2c:65:
                    b4:29:c3:e5:4f:39:7a:b6:00:47:11:30:ca:08:2b:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:FF:FD:DD:D7:61:57:C8:51:EC:EE:B9:48:0C:8C:13:04:AA:10
            X509v3 Authority Key Identifier:
                keyid:D7:E9:D6:D8:5A:E2:DE:C0:38:FF:ED:C1:DF:D2:20:C8:92:88:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:00:39:f3:f4:77:f3:0e:a6:65:8e:80:20:65:1b:e6:c7:8e:
         8b:61:39:d4:34:66:17:be:79:2f:20:6c:84:da:ee:91:1c:6c:
         d7:ff:40:7d:c9:0b:c5:af:1f:5f:14:2b:d9:0f:cc:37:80:42:
         71:5a:02:b4:63:ec:22:d4:e9:65:f1:63:f5:3c:1c:00:51:f4:
         80:81:95:5c:5f:40:e7:b4:c3:94:02:a4:d1:32:2b:cd:31:36:
         dd:2f:bd:5d:b2:e8:ec:83:d8:c9:8f:81:70:e1:4d:48:10:2f:
         d7:b7:bf:01:2e:17:fc:14:17:01:cb:92:ce:d7:91:90:d1:ed:
         b7:c2:a0:f9:b4:2c:ab:e5:93:01:2f:18:23:a5:5d:02:94:16:
         93:4d:f3:93:bb:08:e7:e0:8e:7f:0f:f9:a9:1b:9d:7c:93:cf:
         c1:d2:58:f0:34:53:57:84:9b:5a:d1:fa:e3:a1:4a:f5:5f:0c:
         81:ab:a5:55:41:68:fd:ad:96:73:b0:41:bf:0b:b2:7d:1c:6d:
         e7:2d:68:9e:e5:6b:5a:43:9b:e2:2c:d7:f9:84:a2:5d:bf:ab:
         09:d1:2a:fb:18:b7:4a:6c:79:dd:6e:28:a8:f5:f8:d9:61:9d:
         b3:0d:7c:6e:99:6e:da:55:f5:a8:83:29:42:27:4d:a8:0f:65:
         6b:d7:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org