Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d313238203d3e20323636343338.roa
File:                     323830343a333764343a3a2f33322d313238203d3e20323636343338.roa (raw, json)
Hash identifier:          L+GyIZkfz5zh5GpY6ZPa9C8IfWkChcNXXOj6EBlxAx8=
Subject key identifier:   42:4D:D9:F9:0D:F1:11:FE:61:F5:38:2E:9F:61:59:FD:12:42:59:F0
Certificate issuer:       /CN=DCE4F1B056921195E48958A04C7D8F04210F5397
Certificate serial:       02F9927856554D2EE0838F0ADD73DE1F467D17F4
Authority key identifier: DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d313238203d3e20323636343338.roa
Signing time:             Tue 21 Nov 2023 22:55:17 +0000
ROA not before:           Tue 21 Nov 2023 22:50:17 +0000
ROA not after:            Tue 19 Nov 2024 22:55:17 +0000
asID:                     266438
IP address blocks:        2804:37d4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f9:92:78:56:55:4d:2e:e0:83:8f:0a:dd:73:de:1f:46:7d:17:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE4F1B056921195E48958A04C7D8F04210F5397
        Validity
            Not Before: Nov 21 22:50:17 2023 GMT
            Not After : Nov 19 22:55:17 2024 GMT
        Subject: CN=424DD9F90DF111FE61F5382E9F6159FD124259F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:6c:14:07:49:df:72:55:f5:a1:63:3d:86:
                    af:83:e6:20:65:69:da:96:45:6b:d3:8b:77:fa:e3:
                    46:04:1f:80:a2:92:14:6c:4d:78:94:0a:6a:eb:09:
                    43:1f:fc:b9:78:ba:1e:6a:25:bd:3f:6f:c1:56:12:
                    c3:61:f8:f6:02:6b:8e:ce:3a:62:4c:d8:55:55:54:
                    a2:7d:d5:5a:57:41:dd:d9:7f:ba:95:ef:26:fa:72:
                    e0:a4:33:75:ff:31:ab:f1:b8:72:e2:8c:ac:02:4a:
                    aa:10:34:c7:9a:f0:fd:33:c5:d4:b4:b8:5c:ec:ba:
                    59:d8:1c:76:9f:6a:5c:5c:bd:7d:74:60:64:80:8a:
                    bf:ca:1b:aa:1d:c4:0a:12:a4:76:ac:29:5a:4f:1f:
                    9f:4f:4a:dc:3c:aa:83:ac:96:9e:c5:ca:66:52:ff:
                    11:18:27:95:8a:c1:09:e2:fd:3c:f9:99:b7:0a:27:
                    d9:b4:21:0d:51:0f:db:73:b7:b4:0b:9a:d7:e2:38:
                    a9:8a:92:82:84:bb:96:40:12:a7:56:de:60:24:94:
                    6f:b3:7d:59:0c:a1:9f:96:40:8f:47:a1:76:c2:f2:
                    7f:b6:39:59:3a:a3:10:ff:fe:e2:23:be:02:23:f1:
                    33:ca:79:a0:e4:e8:8e:d3:6c:16:ba:7c:95:a2:c0:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4D:D9:F9:0D:F1:11:FE:61:F5:38:2E:9F:61:59:FD:12:42:59:F0
            X509v3 Authority Key Identifier:
                keyid:DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d313238203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:84:6a:ac:70:d4:ee:12:de:76:f9:17:7f:2a:f9:59:b1:b2:
         88:d8:70:1d:e8:62:f2:7b:7a:cb:e2:97:57:9f:e5:13:8b:31:
         55:e3:61:4f:9a:4c:0e:65:8d:4a:75:6f:9b:41:dd:20:3b:e9:
         bd:2f:34:cf:e0:fd:9e:28:80:c1:c1:31:58:4b:72:61:2c:a5:
         65:97:06:ce:4b:3c:f7:d3:50:dd:85:23:c1:1c:50:e2:08:47:
         87:66:9c:bb:ce:0a:ad:f6:61:72:a5:11:c4:d8:35:ad:86:20:
         a1:81:27:1f:b7:a3:e4:d7:37:3e:ee:15:3b:7a:96:9b:f7:81:
         b5:5c:0e:37:41:8c:71:9a:e4:e0:5f:65:78:c6:1e:6e:e6:4f:
         a6:2e:21:9f:b2:a2:7f:95:43:f8:e1:f2:4b:5b:82:df:96:43:
         3e:8a:ad:1e:0d:4d:d0:44:07:fe:73:0b:58:ae:b9:47:76:04:
         7b:3d:80:d3:2b:d8:18:b7:cb:20:75:27:a9:a3:65:6f:91:8f:
         ae:a2:b0:d4:65:67:e0:e7:82:55:38:73:23:09:eb:b2:c4:be:
         c9:a6:b0:70:46:0f:0e:27:ab:54:0e:41:cc:9f:6b:af:2f:52:
         1f:89:f7:ff:76:4e:94:1a:14:35:dc:f4:6b:d1:95:6d:1d:2c:
         c9:86:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org