Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          uRRbt8PZaXjpWBxZagGB1B2sq7Uky8FDAFZINls9DaU=
Subject key identifier:   1A:18:AB:6D:5D:2E:7E:E7:A9:FD:57:D9:D2:B3:B6:2F:F8:7A:33:73
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       73708DD811B9CBC3DE2CD1BED9227F7BFC306BA7
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:04 +0000
ROA not before:           Sat 04 Nov 2023 20:55:04 +0000
ROA not after:            Sat 02 Nov 2024 21:00:04 +0000
asID:                     264247
IP address blocks:        2804:24e4:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:70:8d:d8:11:b9:cb:c3:de:2c:d1:be:d9:22:7f:7b:fc:30:6b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:04 2023 GMT
            Not After : Nov  2 21:00:04 2024 GMT
        Subject: CN=1A18AB6D5D2E7EE7A9FD57D9D2B3B62FF87A3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:04:8a:c7:41:0e:38:08:51:fa:44:df:0a:
                    17:88:d2:ce:a4:53:57:0e:d2:ad:49:3c:86:25:2c:
                    19:3b:ec:be:99:59:e1:57:fb:66:26:f6:a9:f9:47:
                    a6:9e:fb:60:ad:02:33:3c:02:03:85:09:e3:2f:16:
                    e0:ee:61:04:8f:98:1b:71:4d:6b:db:c3:28:05:9b:
                    23:06:d4:f7:83:33:2f:71:d4:77:9f:e4:1f:b4:f5:
                    fb:b3:91:fc:42:28:bc:3d:84:44:b1:0d:ad:20:f0:
                    d6:c5:73:53:a4:e4:2c:e6:f0:e7:5b:71:cc:b1:e7:
                    99:ee:7d:3b:97:01:fc:2a:b9:fa:84:49:2e:47:bd:
                    27:25:b2:31:9a:c9:65:87:79:d3:c4:c4:f9:e3:45:
                    59:b2:06:01:d1:9c:9c:45:8a:f9:ef:d2:d0:06:bf:
                    8b:47:b4:c6:7c:75:44:6f:0a:d1:ae:64:99:5c:01:
                    40:c3:05:86:13:1a:c3:31:33:d5:42:4b:53:99:0e:
                    a7:b1:0d:bc:c5:01:2d:d4:09:bf:3f:60:1d:2a:fb:
                    68:0d:fe:b3:9a:a8:6e:36:c4:5f:70:6f:85:cd:7e:
                    83:39:72:a6:8d:5b:89:2a:2c:2c:fd:bd:57:5c:04:
                    ee:4e:8f:9a:24:82:c6:43:a0:84:5f:97:8a:f5:dd:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:AB:6D:5D:2E:7E:E7:A9:FD:57:D9:D2:B3:B6:2F:F8:7A:33:73
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:12:cb:9c:d0:f8:f8:10:ca:eb:d0:48:fc:1d:71:32:1f:
         67:03:75:95:7c:be:26:7c:db:1b:c3:22:6d:95:69:94:19:d5:
         71:5f:52:29:fe:6f:27:0b:9c:93:6e:08:69:7c:71:d3:d8:ea:
         14:26:8d:06:7f:4b:a3:ae:cf:f9:72:00:7f:8e:40:71:a4:b7:
         78:e5:25:aa:e0:2e:cb:1a:4c:4a:0a:76:9b:ce:dc:b1:2d:1f:
         37:ef:12:53:7f:b6:80:2f:6e:cc:99:c5:71:ed:d4:bb:b7:84:
         82:69:b0:1a:5d:e9:6a:26:65:96:b0:c1:ab:82:b7:46:03:74:
         99:0d:24:e0:14:98:21:41:a5:70:d4:94:ce:d7:08:7c:0f:40:
         ed:3c:4c:af:de:fe:3b:8e:ba:fd:80:ea:3a:f6:bb:c2:87:66:
         51:69:fc:9d:59:e9:6c:4b:34:f9:3c:ed:9e:0a:5e:ee:dc:34:
         32:8f:af:d7:0c:a4:a3:d4:4c:b5:c6:b7:bf:e1:a2:55:d5:1a:
         33:49:1c:33:3c:30:77:35:94:fc:54:6e:b7:ed:ca:be:74:2b:
         6a:99:a1:5d:a8:59:af:f1:77:bf:23:01:bc:42:8e:14:72:56:
         b7:22:8d:b4:9b:a2:fc:c8:a9:8b:34:54:02:c0:5f:8c:8c:4d:
         1d:d8:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org