Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a353030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a353030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          4mMD2ug6zTeatHmdGZpYgPFSu18PCHkf/M7FygJ1s38=
Subject key identifier:   10:AF:D5:9D:DA:0A:6F:1E:60:70:D9:20:3B:0E:78:54:3E:F8:71:8D
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       0E9C823CFFA05E21229BF8FEC4362F826BD43086
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a353030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 20:00:00 +0000
ROA not before:           Sat 04 Nov 2023 19:55:00 +0000
ROA not after:            Sat 02 Nov 2024 20:00:00 +0000
asID:                     264247
IP address blocks:        2804:24e4:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9c:82:3c:ff:a0:5e:21:22:9b:f8:fe:c4:36:2f:82:6b:d4:30:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 19:55:00 2023 GMT
            Not After : Nov  2 20:00:00 2024 GMT
        Subject: CN=10AFD59DDA0A6F1E6070D9203B0E78543EF8718D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:19:7e:f9:09:24:db:fb:46:0e:9e:ca:93:
                    7d:66:bf:f3:5b:82:b9:43:d7:68:33:7d:c5:77:52:
                    68:a0:3f:dc:be:45:6f:36:79:55:9a:f4:94:02:86:
                    1c:64:e0:43:e3:d5:53:0b:e9:b2:50:7f:83:f6:f7:
                    e3:b8:33:f8:44:8a:ae:6d:ea:df:53:c5:d6:0e:de:
                    18:85:f6:a9:69:f1:9b:be:c8:57:31:0e:87:31:fa:
                    bf:37:08:9d:5f:5d:45:a1:2f:23:5c:c8:23:28:99:
                    ef:ff:2f:fb:7f:05:1a:71:0e:36:ec:50:19:5a:57:
                    8f:d1:b1:4f:dd:92:25:15:fc:6c:92:57:be:53:45:
                    d7:2c:61:56:ab:4e:a7:7a:98:e0:70:13:07:08:1a:
                    7c:f0:bc:8f:f1:da:28:25:47:b4:32:95:2c:98:4e:
                    b3:5e:8a:c0:3e:35:47:02:c5:fb:25:34:bc:c0:0a:
                    10:d5:00:eb:7c:16:f7:26:6c:dd:ef:79:c7:15:d1:
                    95:0d:86:0b:ba:e7:ad:3c:3d:1a:3e:48:ff:8f:e1:
                    30:ed:3f:48:64:7d:5f:f6:31:40:e3:c3:82:35:bc:
                    01:54:35:8d:f2:7b:79:ad:e4:83:b5:5f:6b:26:f0:
                    ef:4b:60:df:34:59:96:4f:a2:85:49:a6:b3:d4:f2:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:D5:9D:DA:0A:6F:1E:60:70:D9:20:3B:0E:78:54:3E:F8:71:8D
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a353030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:91:87:c8:64:68:db:fd:d3:9f:b7:ef:3d:a8:13:7d:73:c0:
         ca:40:98:b8:97:0a:4b:9b:d3:07:54:0e:26:97:34:3f:22:ad:
         1b:86:32:f5:39:fc:79:51:33:3c:cd:5d:4c:65:e4:66:06:46:
         3e:4e:5e:bf:65:aa:3e:5d:ad:55:16:e1:b4:71:9a:56:2f:1d:
         2e:0a:77:bd:67:d9:83:c3:71:e5:72:fa:ec:13:d8:3b:6b:ef:
         c2:99:c3:2e:13:2b:64:eb:57:34:c9:e2:db:5b:c1:3b:c3:45:
         60:13:bb:51:e5:10:65:7c:36:a2:40:65:2d:42:7b:b5:35:fc:
         ef:10:5d:1e:78:8c:ea:8a:20:2d:1c:f1:4a:3d:c9:5d:6d:b6:
         d4:81:4a:0c:8d:28:89:80:db:fd:f9:53:38:c3:13:d0:91:e7:
         8a:68:18:b4:b6:2f:c0:6e:25:ba:bf:20:61:14:52:84:8a:a7:
         10:18:8f:29:60:e8:ab:06:59:09:93:2a:aa:69:20:19:6c:ee:
         e3:5f:df:51:8f:1a:3a:0e:57:f2:a8:4d:77:15:b4:cc:c4:61:
         1c:81:cb:1d:bc:70:8d:dc:0a:6d:96:c3:2b:b2:af:d7:79:d6:
         e0:ea:95:92:50:f1:d9:1a:87:65:bc:92:23:e3:53:6c:ca:56:
         f0:da:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org