Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a323030303a3a2f33382d3338203d3e203532393136.roa
File:                     323830343a326231303a323030303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier:          ZWKkA1Hfh6JgMeKABwqqyEzEvkWVOy2nUTDK+H50Dl0=
Subject key identifier:   DD:E5:D4:30:2A:46:50:F7:A2:EC:5F:C1:D1:6E:A6:01:27:88:B6:69
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       3638A658E1100C8DE454C620A5A65E4C6B361401
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a323030303a3a2f33382d3338203d3e203532393136.roa
Signing time:             Sun 01 Oct 2023 18:22:59 +0000
ROA not before:           Sun 01 Oct 2023 18:17:59 +0000
ROA not after:            Sun 29 Sep 2024 18:22:59 +0000
asID:                     52916
IP address blocks:        2804:2b10:2000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:a6:58:e1:10:0c:8d:e4:54:c6:20:a5:a6:5e:4c:6b:36:14:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Oct  1 18:17:59 2023 GMT
            Not After : Sep 29 18:22:59 2024 GMT
        Subject: CN=DDE5D4302A4650F7A2EC5FC1D16EA6012788B669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:f6:ea:74:5c:b4:d7:9f:9d:7d:f1:c1:e2:
                    58:52:cc:97:e2:ae:95:b5:83:66:b6:70:60:67:da:
                    a0:cd:ee:79:60:8c:7a:d8:e3:8f:49:5c:f5:88:c0:
                    61:2b:aa:e7:a2:1a:6b:54:d8:81:2c:7c:bd:74:a8:
                    01:3e:be:08:ae:f6:d7:60:0d:f4:0e:65:5f:78:f7:
                    d5:02:9a:b1:ae:d3:e5:37:69:06:9b:61:f5:73:fa:
                    71:26:0b:5c:c1:98:7e:d6:7b:e3:26:37:12:57:b8:
                    f1:bd:e8:26:43:88:9e:ab:87:99:28:cd:3c:b9:e0:
                    3d:0a:50:d3:c9:17:f6:5e:59:ee:c4:2a:9f:aa:ef:
                    b9:80:65:92:e0:13:73:e1:30:53:5a:3a:5a:0f:d6:
                    19:8c:f6:99:41:b7:1e:08:e2:d6:29:8f:5a:f0:35:
                    99:66:39:cb:c2:86:e6:94:a6:9b:fd:2d:b9:5e:9a:
                    56:fd:87:69:c0:09:a6:30:bf:8a:40:f7:7a:44:46:
                    9c:4e:eb:39:70:10:aa:9f:4a:12:77:d3:5a:fb:bc:
                    6e:9f:4e:af:14:c7:94:e2:36:71:7a:36:38:b3:c5:
                    84:77:39:34:0d:d5:6c:ea:d7:68:dd:67:ba:9a:9d:
                    59:15:cb:72:05:bc:25:73:7c:c2:c1:9d:08:a5:dd:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:D4:30:2A:46:50:F7:A2:EC:5F:C1:D1:6E:A6:01:27:88:B6:69
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a323030303a3a2f33382d3338203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:2000::/38

    Signature Algorithm: sha256WithRSAEncryption
         97:3d:43:35:08:0d:cc:64:16:c7:53:00:76:74:4c:d0:07:12:
         51:c1:af:7a:31:54:cc:7b:17:28:a1:2b:9b:f6:68:d7:63:1e:
         79:5f:a5:31:1b:1b:7c:ad:08:f4:cd:a7:06:67:08:ac:f9:91:
         9f:00:a0:a1:2f:26:5b:2f:1f:af:81:85:3f:df:e5:f0:c7:e8:
         3f:7e:ff:1b:55:54:40:3c:c0:6c:4c:09:38:51:51:65:94:d8:
         34:e7:31:31:8b:e7:8b:73:2a:72:a8:dd:d2:5e:01:f1:da:b4:
         49:fb:b7:7f:a7:25:ed:b0:4d:ba:9e:c2:01:dd:26:2c:7a:6b:
         4a:fe:34:9e:b9:e8:94:56:69:67:d6:fb:f5:88:ae:00:89:d2:
         9f:5e:37:10:ac:08:9a:82:55:0d:64:24:16:90:57:fd:15:7c:
         a8:93:a1:a2:17:32:31:68:2d:9a:52:c9:c2:e5:4b:d3:b6:7b:
         e1:ae:a2:3a:cd:19:b6:b0:f4:a6:eb:b2:2b:f7:f5:90:78:e5:
         0d:ea:70:c4:66:c3:0b:08:bb:86:d8:e8:c7:42:26:44:7a:8e:
         bc:e5:c9:52:bc:96:0d:92:06:16:ad:ff:d3:8d:16:18:a7:cd:
         df:71:7c:69:b4:f3:21:7f:4e:7e:35:4f:de:bc:0e:96:a0:a4:
         88:00:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org