Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          PSYRsrEgf1BDsU4urqT3Qwl2DItN2NFgHxqqilYE5H4=
Subject key identifier:   FF:D8:BE:77:D4:EB:0D:CB:68:F3:2F:EE:D8:4B:84:AD:AC:04:B2:92
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       6A27A386D7F62D50D2645A620EF23408853888E0
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 20:00:00 +0000
ROA not before:           Sat 04 Nov 2023 19:55:00 +0000
ROA not after:            Sat 02 Nov 2024 20:00:00 +0000
asID:                     264247
IP address blocks:        2804:24e4:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:27:a3:86:d7:f6:2d:50:d2:64:5a:62:0e:f2:34:08:85:38:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 19:55:00 2023 GMT
            Not After : Nov  2 20:00:00 2024 GMT
        Subject: CN=FFD8BE77D4EB0DCB68F32FEED84B84ADAC04B292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:c1:eb:89:50:1b:73:1f:a8:ed:e0:ac:e0:
                    68:38:fd:2d:cd:40:57:fd:cf:e8:02:c6:c6:d3:ae:
                    79:2c:a0:9f:bc:75:d9:c7:2d:41:2a:03:01:4f:56:
                    d6:5c:3c:8d:46:22:34:07:d9:2d:9d:0e:c0:c6:db:
                    c3:56:e7:94:98:71:99:22:f9:7d:0b:d9:e0:50:78:
                    85:96:d4:cf:84:f8:fe:75:13:e5:e5:6b:03:ad:d8:
                    af:66:5c:2d:92:39:aa:df:60:71:c1:5b:81:93:55:
                    bb:48:06:51:c0:db:e6:b2:ab:1b:56:1f:46:7d:04:
                    20:b3:a3:f5:ec:0f:d4:cb:85:ac:d0:d4:18:ba:44:
                    fb:3b:7e:1c:10:04:72:2d:15:d1:1a:2b:1a:d8:cf:
                    8c:c7:81:a9:2b:e0:c1:bb:98:89:b6:45:ac:b5:84:
                    94:e8:d8:24:1e:38:e1:f7:2f:70:73:38:62:e6:5c:
                    74:9b:d1:98:24:a3:fe:3c:3b:51:f3:ce:af:5b:99:
                    ce:19:e2:b0:48:8e:22:36:cb:6d:d4:e6:49:74:99:
                    14:73:e9:8f:e6:05:09:ff:3a:5b:d4:00:44:3e:f4:
                    21:8d:9e:00:8c:28:14:09:f9:fc:6d:61:b8:95:11:
                    34:91:21:7d:d2:1d:49:81:04:a4:09:89:79:11:f0:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D8:BE:77:D4:EB:0D:CB:68:F3:2F:EE:D8:4B:84:AD:AC:04:B2:92
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:d1:f9:1c:36:4d:1a:32:46:fb:91:df:0d:07:ca:ea:18:
         3a:36:cc:4e:a0:c2:9e:27:ab:a0:32:4e:d7:3e:d2:c2:a2:e0:
         4e:07:d5:e9:17:ff:1e:a1:a1:42:08:1c:38:d9:d9:2b:8f:4b:
         e0:ef:be:4e:53:2d:ea:46:fc:bd:7c:ba:2c:2f:e0:69:a7:4d:
         d8:4b:eb:42:63:69:ac:69:c7:20:08:e4:66:37:a6:3b:ea:7f:
         b1:59:03:cd:18:31:57:e9:26:cf:47:ec:25:e5:10:36:e8:81:
         32:e2:b2:3f:1a:8b:d5:78:b2:48:48:75:4a:ce:50:74:38:96:
         c7:06:11:de:d8:52:a9:8c:75:17:5f:5a:a8:cf:2b:40:bd:11:
         3e:cb:09:35:59:2c:be:cb:27:54:de:28:09:3b:36:37:53:45:
         b2:50:9a:73:a0:75:0e:38:e8:ba:b2:c4:cd:72:36:4b:b9:23:
         60:78:c9:f1:91:ce:e4:27:93:b6:c7:ab:b9:c4:52:64:a0:2e:
         49:e0:10:3e:e1:2b:76:84:0c:78:6b:2b:7a:76:87:47:50:d8:
         60:17:94:8a:1c:ed:53:c7:fa:3f:2e:db:ea:1a:76:0a:a4:37:
         87:c5:34:04:c7:5c:2e:05:54:67:63:9c:89:97:95:9d:46:fc:
         ef:ef:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:19 2024 by rpki-client on console.sobornost.net