Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33322d3438203d3e20323636323637.roa
File:                     323830343a336435303a3a2f33322d3438203d3e20323636323637.roa (raw, json)
Hash identifier:          oe+Y8dnNT0V7pzErD5zkqHDlrwvNtcP+R0HqZtHS6kQ=
Subject key identifier:   E2:75:6B:5A:7A:47:A1:29:4D:44:F9:1D:80:EE:81:1E:C4:CA:24:38
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       27FE05F4E7401B07EC10BF48543F13C9EB3921FE
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33322d3438203d3e20323636323637.roa
Signing time:             Mon 04 Mar 2024 15:09:18 +0000
ROA not before:           Mon 04 Mar 2024 15:04:18 +0000
ROA not after:            Mon 03 Mar 2025 15:09:18 +0000
asID:                     266267
IP address blocks:        2804:3d50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fe:05:f4:e7:40:1b:07:ec:10:bf:48:54:3f:13:c9:eb:39:21:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Mar  4 15:04:18 2024 GMT
            Not After : Mar  3 15:09:18 2025 GMT
        Subject: CN=E2756B5A7A47A1294D44F91D80EE811EC4CA2438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:b8:02:2f:6f:61:72:32:61:41:02:03:93:
                    40:ab:d7:54:fc:86:b3:93:60:ab:fb:1a:79:75:07:
                    f2:e9:8a:67:b6:87:bb:b9:9f:9b:a5:7e:7b:78:54:
                    56:38:87:71:62:eb:5f:6a:96:ef:5d:d5:ea:5e:9c:
                    1c:99:d1:ec:bd:c4:8c:38:21:42:03:b5:b0:45:56:
                    54:18:d8:31:58:dc:d8:5d:99:e1:e6:d6:c9:ce:dd:
                    b6:ad:23:0e:e1:68:2a:af:14:47:2d:ab:d4:e4:97:
                    40:76:8b:9d:6f:68:51:05:5a:67:cc:49:33:88:bd:
                    ff:4c:37:f9:ff:db:c5:6a:02:37:98:0c:9a:e7:49:
                    93:29:7e:0a:f5:58:d5:35:70:d8:67:ec:d8:c4:2f:
                    7d:a7:52:31:55:39:14:f1:57:b8:3f:e0:26:b6:4a:
                    ae:cf:ba:d8:09:30:15:c2:cc:0f:c0:eb:97:e7:79:
                    08:74:47:5b:ea:e6:9c:12:ee:72:9d:88:79:2d:9e:
                    48:88:d3:4e:58:c0:79:98:77:91:d5:0f:40:c5:27:
                    c1:0e:9b:b7:42:ae:8a:fa:6b:18:c3:bf:1c:99:83:
                    59:ac:1a:2e:bd:96:64:f8:b9:ad:70:b7:73:8a:9a:
                    d9:a6:a1:a7:00:0e:3a:d1:b9:e0:ae:89:cd:52:9b:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:75:6B:5A:7A:47:A1:29:4D:44:F9:1D:80:EE:81:1E:C4:CA:24:38
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33322d3438203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:eb:de:30:af:de:72:15:cd:e0:ed:52:de:db:5d:19:00:
         7d:fd:7e:92:13:5e:df:85:ac:21:38:f9:de:b5:87:a9:7e:78:
         ed:87:ea:aa:1b:99:95:dd:db:4f:8f:fe:65:8d:2f:4d:d9:c3:
         f9:93:11:f8:ad:2c:c0:13:43:7f:c5:7d:96:13:a0:c9:16:d8:
         82:6c:38:91:56:01:04:8d:61:9f:43:ec:9d:95:3d:5e:27:19:
         bb:28:30:af:b5:1c:e8:84:7b:54:91:05:c9:72:7d:23:bd:ec:
         bc:4b:d2:86:2b:66:96:5d:8c:3d:0f:54:bf:1b:3b:ee:7f:3a:
         2b:e7:3e:b0:10:f8:0a:b2:84:ef:7f:7a:58:bb:1d:36:6f:a1:
         59:4d:69:9c:19:9f:c0:d8:df:16:b6:86:15:6e:1f:90:9c:c7:
         7b:a9:58:95:6e:09:61:40:5e:6e:b7:8e:0e:f6:13:ac:f9:7c:
         2f:45:1d:91:18:a4:6d:9d:79:47:9c:10:38:96:7a:ce:5d:99:
         44:95:2c:62:eb:89:22:ae:9e:d1:39:74:74:e7:b6:a7:c3:04:
         19:70:5b:25:81:2a:60:68:4f:53:cc:56:f8:ee:5c:37:dc:b5:
         a1:72:c4:67:48:5b:75:73:b5:0f:ef:ec:7e:fc:89:65:3d:07:
         ab:e6:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org