Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          QwbRYAPWQuAEGHT+eO+W/Xihg8pNkMpuPTLO2wpnSXA=
Subject key identifier:   91:AA:BF:47:E3:92:A5:91:35:02:9C:A7:56:FF:B0:C7:D1:6D:1F:23
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       504B3C8DB12A3E4D14D23282D9A3F1382C1A7079
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:02 +0000
ROA not before:           Sat 04 Nov 2023 20:55:02 +0000
ROA not after:            Sat 02 Nov 2024 21:00:02 +0000
asID:                     264247
IP address blocks:        2804:24e4:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:3c:8d:b1:2a:3e:4d:14:d2:32:82:d9:a3:f1:38:2c:1a:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:02 2023 GMT
            Not After : Nov  2 21:00:02 2024 GMT
        Subject: CN=91AABF47E392A59135029CA756FFB0C7D16D1F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:0f:b0:f6:d2:53:68:c1:6c:ca:d3:4b:4b:
                    e8:d2:d3:82:0d:48:d2:60:1e:5c:f4:8a:56:b8:05:
                    19:d4:e6:81:c6:cb:10:5d:90:95:8e:50:9d:a1:c5:
                    b1:07:d2:07:b5:41:2d:37:8a:7d:d1:d7:50:a1:78:
                    a8:e1:24:5a:84:a6:55:d8:87:a0:0c:17:43:a5:5b:
                    2e:91:00:b2:ed:0d:4e:0c:4e:9d:16:64:18:53:8e:
                    70:5f:77:34:7d:0e:5f:06:c5:15:d7:44:b0:be:89:
                    a1:35:98:cd:fc:f3:3f:41:9f:6d:a4:bb:5f:c0:7f:
                    a9:83:e2:8e:2f:9f:be:58:71:1d:33:39:50:b7:04:
                    29:ec:c3:76:f9:28:93:6e:0e:c1:ab:ff:47:5b:38:
                    9a:c6:2e:d8:5e:7c:07:fc:fa:0d:42:d3:00:47:78:
                    82:f7:03:48:6c:eb:a3:9c:97:74:45:92:a8:8a:80:
                    04:2c:e6:34:94:2a:8a:d2:4b:a6:1e:98:f9:54:7e:
                    01:d0:e0:47:f4:e1:07:46:98:d7:3f:1b:dd:ad:ea:
                    6d:76:c8:63:33:1f:f2:18:ed:34:1e:e9:04:cd:0d:
                    db:4d:62:e7:97:f6:17:37:e5:41:5a:3e:ab:77:46:
                    eb:28:d3:37:dc:3c:93:d5:05:fe:c3:56:29:57:b8:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AA:BF:47:E3:92:A5:91:35:02:9C:A7:56:FF:B0:C7:D1:6D:1F:23
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:61:55:9f:d1:2d:2c:d7:fc:2e:4b:80:ea:ff:97:56:aa:43:
         a7:38:0d:6d:aa:35:d7:b6:e6:4e:d0:da:77:45:9d:64:15:9f:
         fc:b2:2e:d1:74:c1:ad:25:ef:33:94:59:1d:2f:e4:0a:ba:0d:
         48:19:5c:25:57:9f:4a:df:9e:e9:52:e2:74:69:52:e0:8b:e6:
         c7:6d:21:65:27:cd:ef:8b:db:c9:36:f9:7b:ef:c8:77:ca:9d:
         9b:87:e3:68:3b:d1:e4:96:87:91:87:d5:c6:b7:d8:f2:e9:85:
         7a:0e:dd:33:91:ee:21:88:86:7d:4d:1b:0a:0b:29:26:5d:de:
         e8:e8:45:1c:a4:42:09:4a:5f:9a:72:bd:ea:05:80:0c:b0:e4:
         1d:c8:bd:c5:a3:e6:75:c1:56:ed:b9:8b:b4:17:4d:ad:0f:ca:
         64:a5:34:50:79:f8:4e:24:bc:61:90:a0:fa:cc:46:77:80:ed:
         f8:46:de:83:cd:da:f9:57:7b:79:5d:23:17:ad:2e:7e:46:b6:
         3d:bb:cf:10:ef:a7:33:32:30:91:82:eb:48:bf:1b:a2:5c:98:
         82:8a:dc:fd:8d:dd:0d:4e:8a:19:f4:02:61:1c:84:06:96:16:
         a4:24:2d:0f:65:6f:02:68:2b:02:2e:7e:29:dc:57:ad:8e:ec:
         54:c9:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org