Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a383030303a3a2f33332d3333203d3e20323635313532.roa
File:                     323830343a326236383a383030303a3a2f33332d3333203d3e20323635313532.roa (raw, json)
Hash identifier:          O8geYIlsDKw9jXQGz1Ebzi68Qz6/K5Z1bc13So8yt9A=
Subject key identifier:   3E:DE:EF:01:9B:BC:E1:2F:A7:7C:6E:2E:50:17:2D:48:2C:4C:CB:B9
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       524F5FE97EA77822A9987B42410623AD56EF4858
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a383030303a3a2f33332d3333203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:28 +0000
ROA not before:           Fri 17 Nov 2023 14:33:28 +0000
ROA not after:            Fri 15 Nov 2024 14:38:28 +0000
asID:                     265152
IP address blocks:        2804:2b68:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4f:5f:e9:7e:a7:78:22:a9:98:7b:42:41:06:23:ad:56:ef:48:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:28 2023 GMT
            Not After : Nov 15 14:38:28 2024 GMT
        Subject: CN=3EDEEF019BBCE12FA77C6E2E50172D482C4CCBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:6f:84:21:9b:09:87:06:7d:d6:fd:e8:4c:
                    b7:a1:07:1a:45:77:ba:74:17:0d:63:20:55:9b:c3:
                    de:2e:63:c0:88:2c:32:2c:a5:90:4b:c4:b8:d7:7a:
                    1f:d1:9a:5f:7a:b7:4f:b8:73:cb:15:aa:24:db:f3:
                    3b:a5:10:75:06:7c:8b:5e:54:72:97:be:49:4d:e6:
                    f6:44:c6:34:e0:06:4b:47:34:69:06:e9:01:55:45:
                    4b:b1:43:2e:75:84:1a:18:c0:20:08:61:f1:d5:6e:
                    1b:60:10:5a:66:6a:f9:ff:69:2c:e3:3b:f2:d3:db:
                    19:5e:ce:b2:8d:ea:b9:57:5e:23:f9:14:89:12:a8:
                    19:3b:ed:3a:6c:39:1d:72:5b:6c:58:94:3c:7e:7e:
                    6d:20:d6:a5:59:bc:25:fc:9e:3d:d4:b2:e6:e3:53:
                    46:50:11:a3:a4:64:b6:c8:84:2c:b3:47:d6:2e:b3:
                    32:21:99:e5:e8:a6:28:cb:ea:b4:bb:56:d9:87:33:
                    54:da:08:bb:ae:01:b5:ce:a8:5a:aa:f3:4e:14:2e:
                    33:b7:98:9b:56:e1:95:11:16:48:f7:d1:de:1c:66:
                    6c:95:3c:48:1c:76:bf:4b:81:43:1a:fa:5c:ec:f0:
                    fb:f5:b3:7c:06:e9:5a:3d:18:b2:04:96:33:91:bc:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DE:EF:01:9B:BC:E1:2F:A7:7C:6E:2E:50:17:2D:48:2C:4C:CB:B9
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a383030303a3a2f33332d3333203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b68:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:e6:be:7f:44:b0:4c:5f:52:9f:30:00:c0:d7:2d:d8:11:
         e4:bd:85:6d:13:45:33:01:70:86:1c:85:94:df:69:2e:4a:1d:
         df:dc:c6:09:b1:c8:b4:ce:0c:dc:93:06:6d:85:7f:c7:a4:0b:
         24:08:ad:a2:26:00:ee:3f:0b:94:df:e5:49:b6:7d:3a:fa:65:
         5c:66:b2:58:ef:4a:c4:ed:11:c7:fe:4e:80:dd:00:54:fc:93:
         4c:a6:1e:a0:1a:b5:8b:dc:a6:b9:00:1b:4c:90:d9:d4:c5:46:
         5a:07:67:62:b3:b8:49:f9:bc:c6:4b:c5:20:15:9f:ce:96:86:
         46:ce:42:8c:18:b8:50:65:ed:1a:41:8c:8a:26:48:33:f4:27:
         d1:37:d9:56:41:5d:2a:da:7f:f0:26:42:8d:3c:0c:f1:3e:e0:
         a6:8c:5d:f8:de:2b:08:12:9f:e2:57:55:39:ef:47:ef:d9:77:
         00:5b:7c:3a:d1:2b:24:0f:0a:94:ab:94:94:bd:48:2a:ed:8c:
         65:44:d2:9b:23:70:fc:83:d4:2a:94:6a:6c:9b:d9:76:42:de:
         7b:c4:f6:73:7c:eb:01:6b:a1:6b:07:a0:39:4c:ec:94:d6:a7:
         cd:fd:d4:7d:1e:8c:5d:db:05:14:cf:e6:b0:b8:15:ed:a9:72:
         80:c1:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org