Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
File:                     323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (raw, json)
Hash identifier:          ABnjYBZaklLDjTeqFHrjkPoftB15bDD4VqJVCGHcbSU=
Subject key identifier:   7F:80:E1:96:65:19:15:82:BD:F8:1F:27:9B:D2:F0:AF:14:75:F9:5B
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       2136E49F0FF73764254C6F9ED73EB932A7E668FA
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:00 +0000
ROA not before:           Sat 04 Nov 2023 20:55:00 +0000
ROA not after:            Sat 02 Nov 2024 21:00:00 +0000
asID:                     264247
IP address blocks:        2804:24e4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:36:e4:9f:0f:f7:37:64:25:4c:6f:9e:d7:3e:b9:32:a7:e6:68:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:00 2023 GMT
            Not After : Nov  2 21:00:00 2024 GMT
        Subject: CN=7F80E19665191582BDF81F279BD2F0AF1475F95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:28:17:77:ed:fc:83:0a:f6:8b:7f:46:2d:
                    fa:e9:3f:0f:55:4d:6d:48:09:0e:ff:03:d4:e8:03:
                    f0:ac:7d:2e:dc:e3:70:6e:0e:dc:be:d7:bb:dd:b0:
                    38:0f:da:2e:7a:48:c7:a0:11:23:08:b4:65:95:51:
                    ba:8e:b1:0c:01:17:78:ec:c5:89:1e:b8:4a:53:4a:
                    d9:1e:02:ef:13:fa:2e:07:05:49:25:6a:06:d9:93:
                    18:81:28:9b:7b:76:dd:81:8f:cb:5e:48:e8:1a:9e:
                    a6:86:74:51:26:9e:71:f8:f1:cd:9d:f1:61:a4:45:
                    c3:1e:b4:db:29:77:da:50:a8:74:b9:f2:91:9f:b4:
                    ea:e2:27:18:f9:4e:ff:86:8e:c7:da:97:5c:c6:61:
                    83:56:36:83:c0:f0:9b:e4:a0:ef:55:26:3c:fc:38:
                    3a:5d:8a:82:2e:df:4f:67:05:0b:d1:0a:79:4c:aa:
                    12:f6:cd:a8:29:18:45:c8:a7:03:3f:ff:ea:9b:2d:
                    98:54:f0:b7:b3:00:73:3d:70:b8:9a:29:82:e7:6e:
                    a3:9e:d5:96:78:7b:21:94:81:ea:bf:95:20:46:43:
                    9b:05:a6:ac:87:a9:b4:bb:04:45:ee:e4:0e:38:90:
                    58:05:f9:fe:58:1e:84:1d:8b:ab:a7:ee:bf:5f:7d:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:E1:96:65:19:15:82:BD:F8:1F:27:9B:D2:F0:AF:14:75:F9:5B
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:df:f5:9c:53:79:92:10:dc:80:37:78:67:22:15:b7:b8:25:
         c2:3a:7b:ce:f0:3c:ce:fe:8b:02:d3:06:f6:47:0f:d3:12:fc:
         fe:84:4d:c6:d5:7f:10:d6:ad:09:3b:1a:c1:69:a3:78:cd:e1:
         87:18:b6:32:a6:53:82:4d:98:25:86:71:58:1e:2c:49:6e:21:
         85:c5:d0:1c:07:57:32:06:f8:c7:d9:97:a7:bb:01:0a:36:6e:
         b6:86:64:d1:01:ba:54:32:75:4a:3d:0f:cd:c2:21:f4:61:5e:
         45:d0:3c:23:27:d6:f0:fb:46:fa:e9:6c:c9:cb:a8:77:ef:10:
         9e:f2:7c:39:2a:97:f2:5f:7a:b2:f5:07:c8:2a:dc:09:dd:4d:
         df:3a:4d:5c:5c:71:ec:44:d6:82:65:f4:ee:23:a1:87:ab:a3:
         f2:0b:34:2b:a7:3d:f1:af:23:48:7f:fd:fa:46:04:6d:79:ae:
         63:ad:03:fc:b2:a9:a3:b0:6e:51:25:be:66:9a:a3:86:f6:e0:
         2a:6b:ea:db:c0:01:9b:43:c2:55:9d:d6:00:50:a9:11:8f:0b:
         c2:03:46:62:ff:be:f3:72:62:9e:bb:6a:ab:ba:aa:d6:5c:01:
         ee:23:a6:27:a8:e1:b8:a3:ba:b0:bb:81:e2:c1:42:7b:82:42:
         c5:c2:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org