Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33332d3333203d3e20323633313434.roa (raw, json)
Hash identifier:          SHzKtE78UlMG49qkei5tC80wJlUqj2GQo0nPio0Old4=
Subject key identifier:   4F:8E:84:EA:01:E9:E6:C8:11:75:16:48:F6:89:BA:89:F3:F9:33:B0
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       7F52C2449CFD2F02F7F8D66CFAF3C012C5652C1C
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:36 +0000
ROA not before:           Tue 05 Sep 2023 12:02:36 +0000
ROA not after:            Tue 03 Sep 2024 12:07:36 +0000
asID:                     263144
IP address blocks:        2804:1768::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:52:c2:44:9c:fd:2f:02:f7:f8:d6:6c:fa:f3:c0:12:c5:65:2c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:36 2023 GMT
            Not After : Sep  3 12:07:36 2024 GMT
        Subject: CN=4F8E84EA01E9E6C811751648F689BA89F3F933B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:84:ec:30:21:44:48:08:8b:12:a2:6d:74:
                    37:f9:11:98:0f:fb:ac:4a:61:6a:01:55:d2:b9:7e:
                    81:c6:81:17:73:0d:3b:02:7b:e3:43:09:c3:fb:a8:
                    cf:5f:e0:7e:e6:53:c1:d1:84:78:de:2d:6b:d1:b1:
                    27:5b:b3:db:68:b0:f0:ae:e5:fd:af:5e:48:0a:49:
                    7b:7d:a0:bc:e5:4d:f0:43:15:fa:84:46:e8:b0:a5:
                    c5:91:26:ad:41:7e:51:8d:c1:07:a9:15:71:28:01:
                    d6:f4:08:1a:76:2b:33:83:2b:29:44:92:0f:0d:b4:
                    d3:17:e0:dc:4c:b8:36:3e:8a:c8:ae:41:76:03:85:
                    1e:3f:70:d3:59:47:d8:a7:5a:57:3e:23:d2:0c:5a:
                    3b:49:35:28:bb:12:f9:36:6e:73:47:8e:42:82:ed:
                    91:de:37:cd:55:07:98:62:5c:f5:66:ac:5b:b7:e0:
                    f2:d8:3b:6f:12:23:62:b3:ab:e4:c3:27:87:b5:63:
                    46:95:6a:95:09:ce:82:70:42:ed:9e:14:1a:30:1c:
                    df:d1:f4:03:99:20:9b:2a:3d:38:60:3c:26:02:b6:
                    94:2e:e8:de:cc:24:d7:c6:70:b3:cc:7b:e6:fa:f7:
                    bf:f5:86:19:fd:52:4f:7f:b5:74:d0:d2:f3:88:8b:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:84:EA:01:E9:E6:C8:11:75:16:48:F6:89:BA:89:F3:F9:33:B0
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:f7:ad:6f:67:9a:74:e7:c8:ed:b4:a1:93:f8:a1:ee:5c:bb:
         a8:de:19:24:10:c2:0b:8b:3e:70:4f:f3:80:ac:f5:a7:32:db:
         88:7a:f5:64:e7:01:16:6b:af:46:91:3a:7b:b6:6f:51:ba:1c:
         07:b6:0d:f0:23:e2:f7:20:99:5d:7b:e4:8d:fd:d0:a4:ec:9d:
         e9:d3:98:78:17:cb:3a:a3:48:a7:75:eb:38:af:dd:71:c3:87:
         61:ac:62:5c:a5:60:cd:50:f7:f5:e6:c8:c3:e2:57:ec:e3:ac:
         a1:e9:4b:84:6f:98:ea:74:1c:5c:eb:35:78:ce:1a:cb:68:0d:
         e8:24:d0:26:fb:f3:d2:c1:9a:fc:70:5e:f6:94:d5:f4:32:df:
         d2:17:ef:8a:e6:85:3f:fa:5f:62:3a:9f:f1:ec:01:53:53:15:
         87:87:20:1c:ee:c5:bc:12:c1:3d:fa:35:8e:b0:f4:20:59:fb:
         d3:b4:8d:ce:c6:90:cc:97:49:20:ac:8d:08:1d:e6:19:c5:2d:
         7c:94:83:e3:67:a1:3b:c2:dc:c4:d7:4c:a1:03:69:94:41:0f:
         21:d6:b9:7b:9f:ee:09:47:a8:32:72:e9:3e:e4:04:fc:ca:5e:
         c9:12:09:c8:bd:bc:23:cc:9f:3d:7a:6c:83:19:3f:16:13:ab:
         e6:0e:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org