Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a633030303a3a2f33342d3334203d3e20323636323637.roa
File:                     323830343a336435303a633030303a3a2f33342d3334203d3e20323636323637.roa (raw, json)
Hash identifier:          CtBVmU1tKk1+TpWaNwHdT6s++tndXiJPpO1xABnfd1A=
Subject key identifier:   2D:34:C8:81:B4:37:CC:E7:22:05:47:D6:E0:C2:B6:05:80:FF:F0:2F
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       3FBB1A1B087D86ACE932DF9C1A752A566C239C02
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a633030303a3a2f33342d3334203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:38:24 +0000
ROA not before:           Thu 03 Aug 2023 17:33:24 +0000
ROA not after:            Thu 01 Aug 2024 17:38:24 +0000
asID:                     266267
IP address blocks:        2804:3d50:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:1a:1b:08:7d:86:ac:e9:32:df:9c:1a:75:2a:56:6c:23:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:33:24 2023 GMT
            Not After : Aug  1 17:38:24 2024 GMT
        Subject: CN=2D34C881B437CCE7220547D6E0C2B60580FFF02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:02:e9:bd:34:c3:96:5a:d6:e3:76:95:a3:
                    93:5f:cf:59:da:5f:96:35:09:13:4e:fc:7c:7b:e1:
                    bf:d1:66:f2:6a:68:77:ff:3d:1d:be:5a:d5:ee:92:
                    df:12:22:01:db:53:8b:d9:d2:3f:68:39:74:ed:c7:
                    c4:0f:e7:b3:b2:e3:6d:c7:ce:96:e7:c0:d7:ba:4d:
                    31:c4:9f:6b:d8:38:be:c4:41:ea:b6:7b:e8:e7:8b:
                    f6:e5:27:a6:eb:15:6b:2c:49:6b:6e:ea:d1:c3:ed:
                    c7:86:d5:34:84:50:af:a6:e4:c8:eb:c4:2e:89:cd:
                    8c:ba:63:e4:d4:15:1d:c5:2b:0c:29:da:d4:34:5f:
                    cc:dc:ee:6a:44:92:b1:b7:ff:82:d0:33:29:1b:93:
                    95:53:03:1c:d0:16:d7:6f:0c:d3:c0:36:40:2b:32:
                    31:25:14:d4:ed:de:48:f5:d0:05:35:6f:be:86:a4:
                    ad:ca:23:34:a7:61:e1:78:d3:b5:a3:9e:48:f2:de:
                    43:d4:97:ee:f2:1a:0a:43:f7:cf:65:67:e7:fa:f0:
                    3b:0a:26:86:1d:8d:1d:70:25:0b:5f:71:a4:3b:38:
                    67:c7:be:fc:cb:94:f9:15:a6:7d:1b:07:1f:12:24:
                    05:b2:d5:5e:26:f4:76:66:73:f6:70:a8:5a:f7:fc:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:C8:81:B4:37:CC:E7:22:05:47:D6:E0:C2:B6:05:80:FF:F0:2F
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a633030303a3a2f33342d3334203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d50:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:e9:bb:19:3d:af:3f:eb:cd:53:34:f5:bd:a5:0f:cc:d2:34:
         8b:22:c2:58:b0:63:90:9c:dc:ed:4e:b4:fd:6c:a7:85:3e:43:
         46:e5:cb:15:6a:6a:ac:c5:cc:db:ec:6a:d1:5d:bb:8a:16:dc:
         37:21:52:c9:a1:54:52:0e:b7:4b:30:ff:86:f5:a0:19:3a:97:
         c2:7b:17:85:c9:cd:b1:b9:6b:3d:46:2c:3f:36:bb:ca:f0:ea:
         f0:74:fd:5f:50:46:6a:9f:5c:df:08:89:ab:36:59:c3:4b:8a:
         9a:f7:c9:83:3d:f6:eb:6d:d1:31:95:b4:dc:26:a9:6c:99:f0:
         1c:0c:1a:82:b8:41:80:fa:d2:f3:e4:30:a3:a6:0e:79:ad:4d:
         87:df:0d:c3:b3:b6:9a:a8:7a:ab:11:ef:44:0c:e9:64:9d:40:
         32:88:fa:1d:75:bd:b2:44:2d:b7:ef:e8:48:13:1a:69:91:56:
         d6:ef:5c:eb:ce:8e:4a:55:3b:f4:d0:d5:ae:47:02:07:f5:4e:
         f6:a5:b0:50:bd:74:33:fa:d3:57:0f:7d:ae:d6:77:9a:34:3a:
         9d:73:e9:b2:64:13:d2:ac:b8:78:65:be:d2:40:63:2f:4c:ac:
         c3:94:98:5e:4d:54:eb:35:8f:cd:0d:06:20:2d:94:a1:16:0a:
         c2:27:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org