Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          jl4z83A5dKR3umHPCVUM97ee7uLoA7aKaq/8bZW8UH8=
Subject key identifier:   3B:7D:8E:AF:15:28:10:13:C7:CD:A8:98:AF:3F:48:C2:3C:25:6E:9B
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       7636059B9EA16041A73D0B49690936628BA0C57C
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:02 +0000
ROA not before:           Sat 04 Nov 2023 20:55:02 +0000
ROA not after:            Sat 02 Nov 2024 21:00:02 +0000
asID:                     264247
IP address blocks:        2804:24e4:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:36:05:9b:9e:a1:60:41:a7:3d:0b:49:69:09:36:62:8b:a0:c5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:02 2023 GMT
            Not After : Nov  2 21:00:02 2024 GMT
        Subject: CN=3B7D8EAF15281013C7CDA898AF3F48C23C256E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:9c:50:f0:ee:a3:08:38:2d:b2:bd:b2:63:
                    37:cb:24:19:70:0c:83:a5:e8:80:bc:02:d6:87:91:
                    cf:a6:f4:56:1a:4e:ec:37:6a:59:67:96:50:3f:66:
                    ae:3d:d8:e9:93:52:dd:6d:6b:b7:c4:64:5c:a0:04:
                    42:06:52:02:b8:34:cd:91:44:f2:dd:fd:03:6c:28:
                    24:ea:60:84:91:ce:85:f7:59:e6:d7:8f:41:88:37:
                    bb:9e:d9:95:cf:90:25:38:f9:1d:a4:4d:13:66:8d:
                    a8:1a:fe:ba:0d:97:b7:01:74:3c:30:16:4f:b1:26:
                    7b:d3:ab:90:f9:f3:6c:7a:72:39:d7:f0:9b:61:4d:
                    e8:ed:3b:aa:93:18:a8:3f:d3:79:09:44:e8:5e:2d:
                    33:95:ba:f0:5b:f1:6e:1a:9a:b7:25:fa:58:4a:a8:
                    a0:b0:09:a0:6b:ed:49:47:d7:bd:fc:e6:ab:8b:54:
                    d0:ad:38:7b:5e:02:e9:93:4f:01:49:4d:5d:9a:d4:
                    49:ce:ff:be:05:6b:38:15:7c:9b:e0:f1:3c:d0:65:
                    1e:20:02:aa:cf:f7:2a:b4:5d:2d:78:05:a5:ca:76:
                    c9:c1:c8:0e:00:6e:f4:36:4d:19:b4:ec:7c:f6:15:
                    78:a6:db:01:3e:d6:99:74:f7:5b:62:3d:30:ea:75:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7D:8E:AF:15:28:10:13:C7:CD:A8:98:AF:3F:48:C2:3C:25:6E:9B
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:49:15:12:05:67:f1:a4:cf:0b:c2:93:60:b3:8e:68:50:25:
         f3:29:29:94:43:9d:be:1b:bb:9e:a7:0e:0b:3f:b4:0a:62:94:
         20:df:9e:01:5c:c7:e0:fd:ac:89:e1:c5:07:72:01:22:a0:eb:
         3c:30:a6:57:7a:67:cc:9d:a5:76:10:2e:32:8c:1a:54:6c:7e:
         26:b8:da:49:43:71:2a:a9:07:30:54:58:49:9b:38:31:e6:fe:
         ab:2f:aa:4f:a6:62:5a:02:bc:8d:04:2e:ec:ad:02:8a:0d:e1:
         c2:cf:6c:5b:cb:b9:a7:fc:62:a1:bd:2e:e9:f8:47:20:d6:2a:
         68:45:ad:81:0f:01:9a:f0:a6:b2:19:3a:9b:86:6f:fd:f8:75:
         16:af:5f:4c:67:0e:06:04:7a:62:77:1d:13:32:e0:30:7e:6d:
         bb:42:82:3c:86:f8:13:4a:87:4c:ce:3c:74:74:1f:05:9e:9e:
         ec:67:31:7f:58:17:9e:9a:02:43:22:13:40:95:0d:3f:a1:35:
         c0:b4:b2:a4:7e:77:9a:36:68:62:da:56:84:00:74:fc:3c:ef:
         e4:c2:a7:ea:f7:92:fb:8c:87:88:a4:b1:b9:a2:f9:92:6e:af:
         86:b5:6d:01:97:5c:2f:76:06:03:8e:31:d3:fb:11:8d:f2:6a:
         4f:e1:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org