Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa
File:                     323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (raw, json)
Hash identifier:          nfJWZDBE2mc0qsuzAHhFAkw2zMe6bTBY+qZdFvxYj7c=
Subject key identifier:   36:D8:1A:45:15:7C:5E:35:11:BC:BC:BD:B5:4B:85:A3:EA:E4:F9:14
Certificate issuer:       /CN=57566AD0E614192635CC891E97E47A090618F3F5
Certificate serial:       2F0A12E636A3BE12E02D27528FDD35D1EF6E8CA3
Authority key identifier: 57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa
Signing time:             Tue 02 Jan 2024 23:17:52 +0000
ROA not before:           Tue 02 Jan 2024 23:12:52 +0000
ROA not after:            Tue 31 Dec 2024 23:17:52 +0000
asID:                     267024
IP address blocks:        2804:46fc:6600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0a:12:e6:36:a3:be:12:e0:2d:27:52:8f:dd:35:d1:ef:6e:8c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57566AD0E614192635CC891E97E47A090618F3F5
        Validity
            Not Before: Jan  2 23:12:52 2024 GMT
            Not After : Dec 31 23:17:52 2024 GMT
        Subject: CN=36D81A45157C5E3511BCBCBDB54B85A3EAE4F914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:cc:c9:fe:f3:ef:23:16:4c:35:8b:46:0c:
                    0d:9c:40:01:7d:cc:b9:5c:4a:9e:75:b8:65:0a:85:
                    02:4a:34:81:37:62:c7:c4:e6:f6:95:81:6b:be:85:
                    32:04:07:4c:ea:e1:bf:f0:40:94:35:b6:81:c3:fd:
                    80:53:26:8f:5e:1b:3f:d7:49:e4:c8:13:56:57:43:
                    db:ce:8a:bc:ef:49:5d:40:16:f6:ac:83:40:d2:b6:
                    cf:e2:97:84:8c:da:79:97:ed:c0:b7:19:eb:d3:5a:
                    05:19:59:26:e6:8e:7f:f5:0e:2b:b2:00:71:2e:4e:
                    a2:39:79:23:2d:b5:c1:bf:1a:3d:24:ee:fb:c7:e6:
                    f5:ab:c2:bd:0e:7c:2c:1c:51:e5:7c:95:62:07:ec:
                    7b:9a:9c:3c:4e:ae:15:f7:6e:61:9a:3d:e5:af:d1:
                    ab:c6:ba:7d:02:f9:ee:ff:0c:b4:e6:84:c2:1a:7e:
                    80:59:05:92:f4:8f:6f:1f:40:74:0f:6b:dc:62:f2:
                    b3:8a:8f:5b:04:12:c8:c6:09:a5:ba:2e:e4:2e:c9:
                    8b:86:41:ee:75:2f:1a:78:13:b0:8c:ed:c6:de:f8:
                    1f:ae:17:8e:d9:c7:16:f1:a2:8f:d7:b4:2c:e3:b7:
                    6c:cf:ba:b4:70:75:e9:5f:4d:2e:08:f4:48:c4:0b:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D8:1A:45:15:7C:5E:35:11:BC:BC:BD:B5:4B:85:A3:EA:E4:F9:14
            X509v3 Authority Key Identifier:
                keyid:57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/57566AD0E614192635CC891E97E47A090618F3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:84:60:82:bb:00:66:e8:59:a4:ee:f6:f4:be:c6:5b:c9:c9:
         8c:9d:a5:6e:a1:41:87:38:17:88:bf:89:a4:12:b1:c1:67:fe:
         c5:86:af:70:ba:61:3e:96:be:69:4b:06:5a:d4:bd:b2:38:52:
         73:35:df:a1:e0:52:6a:6b:cb:83:74:cd:8e:87:14:9d:46:ae:
         80:78:8a:0d:12:4d:b4:c3:fb:ea:23:6a:68:3b:35:99:d1:75:
         3e:72:ea:93:61:bd:83:a2:e7:c9:ce:9f:d5:d2:bf:25:da:a6:
         8c:f9:d1:fa:80:fa:e7:53:ed:13:70:0b:74:07:bd:0f:b6:53:
         85:00:9d:9a:4e:e6:6c:8f:9f:13:21:ec:c9:a1:d1:56:4e:96:
         73:0f:39:05:27:d1:dd:2e:43:da:85:08:9e:4b:b7:19:bd:03:
         97:5d:72:d4:97:16:3f:a3:0d:0b:42:09:d7:6a:21:60:fc:5a:
         11:ca:dc:45:34:9b:ff:4e:a7:fb:b2:4b:73:7c:92:a9:2a:3f:
         4e:53:de:ae:b7:00:78:e8:39:0a:e0:70:a0:f6:ad:f0:d9:40:
         15:5a:89:8b:3e:1d:5a:fb:e5:7c:59:7d:63:ea:f5:0b:31:ab:
         04:4b:6c:8e:bc:1a:26:20:c1:5f:b5:de:96:6c:70:db:2e:98:
         0f:09:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org