Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33342d3334203d3e20323636323637.roa
File:                     323830343a336435303a3a2f33342d3334203d3e20323636323637.roa (raw, json)
Hash identifier:          kmG+YokC9CI9JbNisl+HkWPDQPJqo+b6vnO2BYDAAPs=
Subject key identifier:   71:B3:30:58:1A:37:65:94:74:BD:D6:BD:8E:FC:65:2A:3D:23:C1:BD
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       70D110997D9D7CBB1BC483142DBAC5C6189B3424
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33342d3334203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:37:45 +0000
ROA not before:           Thu 03 Aug 2023 17:32:45 +0000
ROA not after:            Thu 01 Aug 2024 17:37:45 +0000
asID:                     266267
IP address blocks:        2804:3d50::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d1:10:99:7d:9d:7c:bb:1b:c4:83:14:2d:ba:c5:c6:18:9b:34:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:32:45 2023 GMT
            Not After : Aug  1 17:37:45 2024 GMT
        Subject: CN=71B330581A37659474BDD6BD8EFC652A3D23C1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:13:3b:d8:24:6a:db:ff:6d:83:de:03:fb:
                    c6:d3:fc:d7:48:73:11:57:8d:19:0a:90:ed:d9:5f:
                    1f:84:0b:60:6c:08:9d:5d:4b:88:2f:61:6b:e2:9e:
                    81:cd:bc:6a:10:12:c5:2e:e9:30:f5:54:88:9b:78:
                    dd:50:bf:40:2a:49:ed:b9:c2:90:e4:59:b5:02:06:
                    44:70:7e:dc:c6:d2:ac:ee:4e:b3:d3:e7:79:e0:54:
                    5e:20:cc:0c:89:c8:7f:7c:e9:bf:99:14:cf:7d:69:
                    c5:54:6e:80:32:b7:33:98:1b:3e:1f:37:01:3a:a1:
                    51:12:45:bc:35:b0:0a:e3:31:2d:d3:1a:05:76:35:
                    fb:90:6c:3e:a1:f4:51:fa:a2:aa:b0:9a:c6:fb:d6:
                    87:c0:8b:e6:71:10:e6:d1:1d:5e:c2:70:74:d9:51:
                    45:43:73:f3:2d:de:da:74:e9:b3:22:d2:8b:95:30:
                    3c:dd:27:83:52:8f:3a:3e:92:f8:98:f3:c5:3f:c6:
                    58:68:32:aa:9e:74:f8:40:d3:91:29:a7:03:1a:c7:
                    d8:94:a7:4e:bd:dc:73:49:97:46:91:50:2f:13:b1:
                    05:23:02:45:49:4b:d0:a2:bf:6c:05:92:1f:89:8c:
                    f0:1e:0e:29:2a:84:da:5d:41:3e:e2:45:25:cf:4d:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:30:58:1A:37:65:94:74:BD:D6:BD:8E:FC:65:2A:3D:23:C1:BD
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33342d3334203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d50::/34

    Signature Algorithm: sha256WithRSAEncryption
         c8:13:fd:61:6f:48:9d:4c:4a:83:0c:ed:1e:06:b6:e5:c1:40:
         c7:08:cd:f8:1a:96:8b:b1:ba:ac:90:ee:e3:42:24:47:2e:16:
         6d:b0:38:c7:b3:24:94:7f:dc:d8:34:12:58:0f:07:4b:6a:fa:
         f6:1b:f9:37:bd:18:4c:7d:51:41:0b:0e:ad:57:84:4f:3b:7b:
         dc:0c:a4:9a:5e:9b:57:82:75:b8:96:57:c7:94:f5:ae:a2:1a:
         02:79:80:83:12:8c:48:bf:5f:d0:20:0b:20:7e:56:41:7b:6f:
         7e:4a:86:89:34:8b:49:03:55:5f:2b:10:64:b0:35:b4:4a:58:
         4c:5b:bc:e7:17:07:bb:00:04:c4:03:fb:72:6c:6f:e5:bd:39:
         65:6b:27:ef:5c:da:72:49:db:db:f4:f9:06:69:4a:18:bc:c4:
         12:b9:8c:fd:ab:5e:61:76:bf:52:11:ca:15:24:14:9c:33:b9:
         57:91:b2:6c:42:97:e0:8f:d0:41:f2:a9:7f:c9:e9:d2:58:1b:
         55:81:68:47:f1:2f:73:52:20:3d:03:b5:21:1b:61:6c:a5:36:
         a1:20:e4:25:b3:9b:c1:9a:19:85:37:44:16:07:4e:76:20:e7:
         10:a6:6b:42:ef:d5:43:64:15:f4:8d:c1:9b:48:13:e2:11:85:
         5a:e4:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org