Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a3a2f33332d3333203d3e20323632353337.roa
File:                     323830343a3563303a3a2f33332d3333203d3e20323632353337.roa (raw, json)
Hash identifier:          iieNUqVaY+JELRs0WFvCbkUAbAjueuZlChds7VBeY8I=
Subject key identifier:   62:AC:0F:15:93:05:54:34:88:A2:2B:5B:96:3F:33:8B:96:95:4F:22
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       151357B378AEB26D786DAAD94AA5B7BD9DB24F03
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a3a2f33332d3333203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:37 +0000
ROA not before:           Fri 06 Oct 2023 18:47:37 +0000
ROA not after:            Fri 04 Oct 2024 18:52:37 +0000
asID:                     262537
IP address blocks:        2804:5c0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:13:57:b3:78:ae:b2:6d:78:6d:aa:d9:4a:a5:b7:bd:9d:b2:4f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:37 2023 GMT
            Not After : Oct  4 18:52:37 2024 GMT
        Subject: CN=62AC0F159305543488A22B5B963F338B96954F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:53:c1:c0:ac:13:5f:36:1b:df:e3:90:a2:
                    c3:6b:1e:b1:96:b6:5e:db:16:94:9f:29:ae:b9:30:
                    70:96:ba:15:e9:b0:98:1c:3a:eb:49:39:5a:4b:dc:
                    c2:bb:34:c1:c4:0d:a9:06:c3:94:ca:c6:67:46:ea:
                    94:66:84:94:8b:1c:e8:91:3a:c0:38:e3:b8:3c:1e:
                    fe:97:cc:14:90:70:1e:26:40:b5:c3:04:0b:5f:39:
                    24:61:b5:aa:7b:b2:5b:bc:44:5b:c7:c9:a0:bc:5b:
                    74:7a:e8:53:ba:4c:93:2f:4f:f1:5b:74:0f:d5:49:
                    bd:d9:b0:4e:12:70:38:31:a6:e0:91:8b:aa:b0:f6:
                    38:a6:39:77:ac:61:07:e8:d3:92:cd:f0:6a:c8:7c:
                    20:d0:8c:0e:85:18:09:ce:b8:71:24:08:28:4b:5b:
                    f1:32:f3:f0:b3:30:02:c6:d8:10:af:27:17:de:07:
                    8e:dc:6c:65:61:a2:11:ca:cf:9d:46:4a:dd:b2:07:
                    05:b3:a7:e5:18:1a:50:30:d3:69:8d:5c:7c:f0:ca:
                    34:df:5c:06:10:7b:02:9e:69:b6:2e:31:49:d3:45:
                    d5:02:47:b8:33:fe:d9:a8:d5:d4:24:83:2a:d3:a8:
                    a9:8a:95:6f:3f:e6:a7:7e:fd:e3:bb:ee:e2:bf:2c:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:0F:15:93:05:54:34:88:A2:2B:5B:96:3F:33:8B:96:95:4F:22
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a3a2f33332d3333203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:64:04:0e:88:05:f3:3a:62:74:33:93:eb:f6:50:66:ac:90:
         c2:05:a0:6a:7c:07:91:06:f8:6c:d1:62:22:fc:27:31:97:23:
         d3:38:a3:f0:a9:38:72:a7:18:db:60:ca:d9:ca:92:37:bc:00:
         da:d8:a2:7f:cb:2d:09:da:e9:20:58:9d:ad:55:cc:cd:a1:dc:
         ef:05:49:c4:dc:58:4a:1b:79:eb:c1:d1:47:fe:6d:0e:06:49:
         a3:fd:9d:71:55:af:c0:db:40:81:5f:6f:c4:db:91:28:c4:cd:
         08:82:41:e3:88:c7:55:bb:1d:c0:13:e2:e9:6c:7b:7f:47:1b:
         79:b2:25:4d:eb:b9:d5:32:b7:a0:98:76:26:db:3d:52:4e:da:
         b0:fa:45:e8:67:cd:3f:45:0d:97:76:c0:c6:be:d4:2b:5c:f5:
         f6:86:c2:03:16:ef:31:99:dd:ae:7a:9f:f6:90:7b:84:f5:bd:
         6a:e3:51:f4:c0:2a:25:ac:92:7a:0c:da:82:11:c2:78:fe:36:
         e1:a9:2a:bf:fa:a3:a1:ef:7f:e1:e9:cb:ab:e2:75:4b:60:2b:
         84:98:35:8f:5e:b9:cf:b2:d3:11:f7:74:8f:01:f2:b7:d8:9c:
         9a:be:04:4e:40:13:bc:65:20:12:f4:1d:7e:a1:3a:aa:c0:45:
         94:f7:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org