Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33342d3334203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33342d3334203d3e20323633313434.roa (raw, json)
Hash identifier:          cD+PH1Ll4LcDj26BdiEfk7bCbomeBHiyGvnELuG+BLQ=
Subject key identifier:   FD:6C:15:5A:46:1A:DA:E0:8D:6F:1A:06:3B:26:63:5F:C8:80:8F:5C
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       3E8FCFF3A6F98D38C7C9A7FA2FDEADFBF5CFE004
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33342d3334203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:38 +0000
ROA not before:           Tue 05 Sep 2023 12:02:38 +0000
ROA not after:            Tue 03 Sep 2024 12:07:38 +0000
asID:                     263144
IP address blocks:        2804:1768::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8f:cf:f3:a6:f9:8d:38:c7:c9:a7:fa:2f:de:ad:fb:f5:cf:e0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:38 2023 GMT
            Not After : Sep  3 12:07:38 2024 GMT
        Subject: CN=FD6C155A461ADAE08D6F1A063B26635FC8808F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:52:05:d2:7c:95:49:77:83:c2:5d:00:56:
                    a5:4c:c9:8f:2b:02:a2:d6:0b:d8:70:46:ce:ae:24:
                    45:06:cc:88:9c:35:56:e1:ae:8e:65:ff:2a:79:03:
                    3a:f1:c8:7a:88:b7:5c:b8:05:24:d0:14:98:fe:80:
                    d4:56:10:9a:a6:c7:cf:93:4f:ee:d3:e0:a9:80:5e:
                    b2:d9:10:0e:72:65:64:e9:2a:84:48:9b:ba:8f:59:
                    be:f3:3b:20:03:78:59:66:38:86:23:98:fc:37:55:
                    8c:22:bd:a6:76:f0:3b:f8:0c:d9:72:3c:f5:a8:28:
                    79:3a:b8:40:81:29:05:18:27:52:0c:09:dc:72:17:
                    2c:f9:30:80:27:1a:31:be:23:cf:fc:21:c3:12:fe:
                    28:04:41:74:4d:71:22:c2:2e:76:16:e9:b1:a6:31:
                    dc:02:65:5e:47:2c:70:6c:8e:83:92:c3:bf:e4:0e:
                    32:ee:63:c3:fc:8d:57:5f:bc:23:cb:16:e6:24:f5:
                    eb:f5:dc:02:33:19:24:48:99:f4:0e:f3:a2:9a:a1:
                    71:55:26:4d:73:54:43:d6:6e:c2:93:f5:e7:81:30:
                    7e:4e:cb:42:84:42:e5:72:fe:ad:a6:6c:dd:1e:e2:
                    9d:2f:49:41:e8:fc:c2:0d:f3:a0:e2:38:71:5c:32:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:15:5A:46:1A:DA:E0:8D:6F:1A:06:3B:26:63:5F:C8:80:8F:5C
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33342d3334203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:cc:62:66:69:bd:25:e6:af:f7:a9:80:4f:0e:a3:61:0c:
         42:e2:13:c4:97:c6:1f:6c:ea:fc:ab:a7:59:b3:58:6a:0c:e7:
         b7:48:92:ea:d8:f8:17:d9:08:80:43:63:69:30:67:12:fa:04:
         0f:51:7a:19:34:3a:d4:91:21:a5:cc:41:da:a5:fb:e0:1d:2c:
         3d:42:b9:a1:e3:7a:24:97:9e:f0:2a:1c:52:57:58:fa:76:80:
         6a:81:b4:f4:2d:13:56:b4:0f:b5:c3:b8:c0:64:cf:ae:86:36:
         56:14:49:db:a4:07:12:01:df:08:b8:62:ef:30:b6:7d:a2:c6:
         b1:54:d7:9d:60:f6:3d:38:a7:a4:c0:05:7c:82:58:70:7a:54:
         40:d7:1e:cc:7b:fb:ee:db:8d:cc:66:2a:3d:50:e5:39:a5:bd:
         da:56:36:46:d6:8f:f1:32:23:07:38:75:07:97:1c:f1:9f:03:
         e7:7a:d5:44:8d:4b:87:61:2e:db:54:c1:bf:58:26:e9:c5:2e:
         41:95:66:3e:87:c4:bc:36:6d:48:cf:40:ca:45:55:2e:52:ab:
         f0:d3:dd:9a:61:92:1e:4f:67:2b:a3:17:24:1c:08:d1:c9:2d:
         97:12:d5:bd:83:da:56:de:91:f3:f4:98:65:8a:8f:62:25:31:
         91:b0:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org