Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/323830343a333137383a3a2f33332d3333203d3e20323635303137.roa
File:                     323830343a333137383a3a2f33332d3333203d3e20323635303137.roa (raw, json)
Hash identifier:          116t2GVaYCN78QB4ZxKOji3qjXGWv7KhBJ2BhU+vPgE=
Subject key identifier:   0E:6A:14:21:3E:ED:F9:97:A0:24:41:C3:29:47:62:23:DD:85:FA:6A
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       60F44EC25D23ED0C9A0065B88B9E4D4EB49442C4
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/323830343a333137383a3a2f33332d3333203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:53 +0000
ROA not before:           Wed 03 Apr 2024 22:05:53 +0000
ROA not after:            Wed 02 Apr 2025 22:10:53 +0000
asID:                     265017
IP address blocks:        2804:3178::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f4:4e:c2:5d:23:ed:0c:9a:00:65:b8:8b:9e:4d:4e:b4:94:42:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:53 2024 GMT
            Not After : Apr  2 22:10:53 2025 GMT
        Subject: CN=0E6A14213EEDF997A02441C329476223DD85FA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:a2:1b:04:4c:f3:5e:e5:45:9c:34:a1:63:
                    d4:66:52:8a:ff:e9:4d:92:81:41:e6:3f:4d:39:6f:
                    dc:1d:de:e6:99:0c:ec:53:cc:d5:be:0e:06:99:9d:
                    51:0c:b7:cf:e7:a7:86:7f:01:ff:52:51:92:41:84:
                    bc:d7:fb:6b:08:3a:dc:bf:74:44:42:31:ac:b1:1d:
                    b6:49:32:0f:32:16:2e:49:d6:b5:7f:f1:56:57:ac:
                    f6:16:e9:53:c8:75:8f:5f:73:c4:56:dd:eb:82:8a:
                    d2:4f:72:51:d4:a1:14:5d:87:43:10:af:ef:c0:60:
                    be:f1:a9:2c:9f:fe:40:4a:bd:b6:54:e0:1c:47:4a:
                    42:e8:2e:3f:c0:a7:c8:64:05:c2:71:54:12:c2:5d:
                    c5:b1:8c:c3:b9:85:39:c2:dd:0c:3d:95:a9:e2:99:
                    90:e0:48:30:72:8f:5d:fb:7f:83:12:3f:05:e0:ca:
                    0f:be:75:90:37:3a:52:49:81:77:da:ef:92:72:e3:
                    27:6c:85:d6:10:8a:39:f6:e3:1d:01:08:a8:09:58:
                    2e:1f:93:22:f4:d1:20:2e:48:3c:41:4e:5b:8f:f5:
                    ef:0e:a6:70:d3:16:3d:9b:6e:e4:35:d8:d6:d4:13:
                    55:3e:63:76:60:32:b0:7d:9f:b1:d4:f4:63:ee:f6:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6A:14:21:3E:ED:F9:97:A0:24:41:C3:29:47:62:23:DD:85:FA:6A
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/323830343a333137383a3a2f33332d3333203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3178::/33

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:63:73:bd:a6:d5:65:aa:bc:31:2f:90:0b:e0:04:73:71:
         7b:98:00:3f:b2:0f:ff:4b:b2:c1:2d:21:37:07:37:0d:f8:29:
         22:eb:46:0d:51:72:d3:88:88:dd:40:72:68:7d:d8:1f:6a:a7:
         93:a1:73:95:6c:89:93:54:b2:eb:78:ed:3b:91:4b:ef:ac:dc:
         63:9a:40:80:5e:dd:89:4a:38:2b:05:df:26:21:b5:6c:35:cc:
         4d:18:21:aa:f4:39:ac:1b:01:a6:05:eb:d4:8a:f9:5d:fe:cb:
         5a:9f:64:1e:ab:48:92:f8:22:5c:82:95:72:0d:64:7e:4f:58:
         e3:d3:f7:22:05:e1:0b:0d:fe:93:3f:28:88:e6:88:f2:03:16:
         40:54:64:52:fe:e2:9f:33:30:e2:3b:7e:c7:bb:3f:12:b6:d6:
         d9:a1:85:69:d7:97:1c:3d:56:87:12:15:27:3e:0e:06:2c:49:
         a5:76:a9:6a:5a:a6:ed:b1:09:fe:d1:fc:5d:d7:9a:69:7c:90:
         fe:2e:e4:43:6d:31:f0:79:8f:52:2b:08:d6:e1:54:1b:2d:a9:
         52:c0:72:6d:38:68:6f:c1:15:e6:6d:04:0a:75:ab:4d:24:00:
         e5:9f:16:1d:50:eb:f3:7c:74:e4:be:8d:d5:c7:1a:ef:16:59:
         73:c0:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org