Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a383030303a3a2f33342d3334203d3e20323633313434.roa
File:                     323830343a313736383a383030303a3a2f33342d3334203d3e20323633313434.roa (raw, json)
Hash identifier:          75scDi+8/NFztCiQO15+04cFMoeFbHN8qYjZ90Bk9F8=
Subject key identifier:   D8:E3:1D:C3:78:A5:76:FD:7C:29:EC:A7:74:88:1C:97:A3:0B:40:F1
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       0C643E5874DCB3CF3C7CB87E2B87CE15AB60620C
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a383030303a3a2f33342d3334203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:45 +0000
ROA not before:           Tue 05 Sep 2023 12:02:45 +0000
ROA not after:            Tue 03 Sep 2024 12:07:45 +0000
asID:                     263144
IP address blocks:        2804:1768:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:64:3e:58:74:dc:b3:cf:3c:7c:b8:7e:2b:87:ce:15:ab:60:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:45 2023 GMT
            Not After : Sep  3 12:07:45 2024 GMT
        Subject: CN=D8E31DC378A576FD7C29ECA774881C97A30B40F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:f8:6f:3f:04:e4:f3:b6:3b:be:33:5b:3a:
                    64:da:0a:0b:bd:66:55:fb:61:fe:2e:ab:3e:b7:20:
                    c9:74:fb:78:df:ef:10:21:39:b0:c8:9a:f5:4f:30:
                    cc:e6:80:c4:77:0a:64:95:05:a4:68:09:09:e9:93:
                    41:50:03:f8:ea:2e:12:4c:92:37:d2:80:24:89:69:
                    65:a2:73:e6:c1:58:f2:1a:e5:84:5a:0a:55:83:8f:
                    eb:80:27:48:d8:5f:11:76:1a:96:08:d4:e7:ed:fa:
                    3e:8d:a5:a7:86:c4:c8:18:0c:82:cf:ef:78:66:25:
                    c4:49:94:94:86:b9:da:64:cc:78:ae:04:a3:4c:0d:
                    96:01:7b:63:e5:6a:8f:87:b8:f1:57:97:cb:4d:83:
                    20:16:c5:3c:8d:19:1a:f7:0c:3c:37:c0:a9:6a:43:
                    de:90:7c:2c:0e:62:83:0a:8f:18:a0:dd:98:0d:63:
                    8d:39:db:a0:97:89:3a:7a:7b:76:42:d4:74:5e:ed:
                    e3:1e:a1:9d:9f:ca:68:5f:a1:00:b1:c6:51:84:1d:
                    ee:1f:13:71:3d:75:e7:9f:6f:2b:11:31:fe:f6:3b:
                    73:5d:37:a1:da:bb:df:3b:d6:0b:f4:c3:8d:df:d9:
                    cd:62:bd:99:e0:b7:59:13:e8:0b:59:a5:a0:c3:96:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E3:1D:C3:78:A5:76:FD:7C:29:EC:A7:74:88:1C:97:A3:0B:40:F1
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a383030303a3a2f33342d3334203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:84:19:46:16:ad:34:6d:ed:8b:ff:00:7b:cc:d0:c6:7d:
         c9:8a:e8:12:47:3c:4d:e8:c0:41:95:e3:db:4a:23:34:39:82:
         5a:13:19:0c:f7:d1:9d:4d:01:5c:05:cf:f8:b9:a4:f7:f7:9d:
         40:b5:16:51:ed:36:be:f7:f7:bf:87:71:ea:ab:30:8e:17:a0:
         c8:57:f5:08:35:ef:3f:5e:8c:6d:b2:21:4a:83:0e:6d:06:63:
         ea:68:56:2a:51:d1:40:c2:16:b6:a0:c4:b0:f6:32:52:d2:f2:
         3f:ad:12:8d:ea:03:b9:0c:37:ec:c6:5b:9f:87:89:79:0c:e7:
         ea:96:78:b5:2e:d8:99:16:cb:af:96:d7:7a:42:47:60:cd:0c:
         ac:1f:da:3b:16:a3:e2:51:63:e9:53:54:04:9f:df:a6:05:ed:
         68:13:c8:86:66:9a:7e:2a:81:8d:3b:9d:e1:14:cb:4f:fa:bd:
         49:6e:98:f1:74:8e:af:37:a8:f6:94:e2:1b:45:69:ae:cc:47:
         0d:11:c1:ff:2b:4b:65:a9:14:d3:0f:35:96:1e:84:d3:6e:f6:
         de:9a:e1:9a:ae:23:c2:d7:81:bd:5d:0a:35:75:31:47:7e:0a:
         c3:af:93:a6:40:dd:10:87:ae:4d:1d:05:b7:4b:e9:c5:ec:c7:
         86:9b:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org