Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          KxU7HdeZTvVqt7i3Y5dvZB0ox6nA7/WK1faBgj5lh2s=
Subject key identifier:   56:D1:13:B5:81:B7:48:9D:87:EC:36:59:07:AD:93:10:C6:DE:41:48
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       4F122D24DE0B03E96BA8278E133999A6BA9FB1C0
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:04 +0000
ROA not before:           Sat 04 Nov 2023 20:55:04 +0000
ROA not after:            Sat 02 Nov 2024 21:00:04 +0000
asID:                     264247
IP address blocks:        2804:24e4:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:12:2d:24:de:0b:03:e9:6b:a8:27:8e:13:39:99:a6:ba:9f:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:04 2023 GMT
            Not After : Nov  2 21:00:04 2024 GMT
        Subject: CN=56D113B581B7489D87EC365907AD9310C6DE4148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:71:8e:23:40:d6:d4:ef:81:80:bc:21:52:
                    54:d0:08:67:09:50:58:d0:44:be:02:57:2d:a2:75:
                    93:f4:cf:d6:90:eb:11:42:e9:3d:29:27:12:b7:5e:
                    be:bf:1f:bf:34:0b:01:ba:37:86:26:dc:ea:9d:f2:
                    16:07:b7:37:92:19:78:ec:95:2a:c8:1f:ca:78:05:
                    54:56:39:89:46:14:df:8e:8a:19:fe:0d:ae:d3:8e:
                    1a:65:7e:db:03:08:b7:1e:fb:5b:45:bc:c8:4e:9f:
                    33:7f:be:e2:3f:be:33:93:b5:1d:00:21:de:6c:29:
                    31:39:5f:c4:0e:3a:08:40:3d:67:da:33:25:d7:a7:
                    5a:3c:b1:b8:11:b6:50:86:f3:cd:82:7a:a1:91:5c:
                    3f:6c:5c:0d:8e:0f:da:49:ce:b7:cc:0b:a0:dc:ed:
                    54:5a:00:c1:f7:95:16:19:5b:95:f1:3d:2d:d5:a9:
                    ce:ee:f3:fa:3a:21:8b:cd:3f:cf:12:33:d5:2f:8e:
                    87:66:bc:b3:1b:10:c7:3f:b4:31:a0:2d:47:03:2f:
                    0b:fc:bf:29:19:59:38:a7:40:4c:b5:c0:fe:2b:ee:
                    a2:90:69:b2:89:2f:20:22:73:97:98:16:9e:99:b4:
                    d2:e2:53:a6:c1:58:90:52:2f:ca:8f:91:f6:17:07:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:13:B5:81:B7:48:9D:87:EC:36:59:07:AD:93:10:C6:DE:41:48
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:26:cd:a1:28:80:e4:32:25:6f:ad:ee:82:c1:44:51:07:c0:
         9e:de:65:79:61:59:d9:08:c4:24:ce:0e:56:e7:6d:ac:1e:b6:
         9a:68:dd:d1:88:86:87:99:aa:c6:c6:c0:04:56:f8:c3:9a:d3:
         c6:07:03:f0:b2:9a:5a:9f:6a:9d:2d:aa:48:95:48:f6:43:f7:
         69:86:7c:b2:88:ec:4a:76:dc:92:47:df:0b:ce:59:08:ed:b4:
         a9:51:0f:6c:7c:a3:9c:ad:07:f8:6b:67:c9:f8:87:05:aa:be:
         ba:3c:3f:04:fc:8b:39:19:dc:f3:81:83:64:a0:4f:9d:cd:b6:
         b4:64:8b:14:1a:3b:06:ea:d4:98:34:76:38:9c:06:41:19:92:
         fa:b2:64:ab:4f:0b:ea:5f:b4:ce:3f:9f:81:61:a9:84:82:cc:
         f9:69:a7:5f:47:a9:9a:30:cc:db:6e:cf:f5:92:b3:c7:71:88:
         60:95:c0:3e:c9:03:f9:8a:6d:69:db:a9:ea:5f:70:b7:4d:d2:
         e3:83:d0:97:12:8e:39:23:d2:59:4b:64:07:38:df:b7:38:0b:
         53:84:d1:34:7b:78:0e:14:73:88:36:a2:76:26:12:de:b6:c4:
         81:6f:54:09:64:f0:21:68:79:e2:06:d3:b8:1f:1f:fc:66:85:
         01:4e:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org