Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa
File:                     323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa (raw, json)
Hash identifier:          KFuGoUl11dLLhyD8oK282HGYPDtg7yoDIgSIEvkTV6E=
Subject key identifier:   5C:7D:2F:47:DE:10:29:85:33:50:EF:EE:02:66:8E:B3:BE:35:F7:61
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       2ECED68D16BA101C62B6FB761643E2F3360B126E
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa
Signing time:             Mon 18 Dec 2023 18:39:28 +0000
ROA not before:           Mon 18 Dec 2023 18:34:28 +0000
ROA not after:            Mon 16 Dec 2024 18:39:28 +0000
asID:                     271612
IP address blocks:        2804:7e40:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:d6:8d:16:ba:10:1c:62:b6:fb:76:16:43:e2:f3:36:0b:12:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Dec 18 18:34:28 2023 GMT
            Not After : Dec 16 18:39:28 2024 GMT
        Subject: CN=5C7D2F47DE1029853350EFEE02668EB3BE35F761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:fe:ad:42:5b:6d:11:e3:61:08:d2:b2:31:
                    15:ef:3d:ce:4c:ea:6d:48:1e:51:c9:08:ab:90:e7:
                    13:75:ea:05:5a:1b:59:46:27:3a:f4:26:21:bf:d5:
                    8a:bd:fc:f5:d8:36:25:29:07:89:26:c4:37:c6:99:
                    47:6d:85:62:dc:5a:e2:31:dd:b5:3d:d1:0f:cb:0d:
                    41:fb:ab:8c:3c:1c:2d:91:ab:a1:ae:22:86:50:8a:
                    b2:2a:77:3b:0a:e4:ef:a5:46:a3:c0:ab:46:84:bf:
                    67:55:64:0a:c2:07:90:6e:37:10:2e:ab:56:78:1a:
                    b6:02:0d:fc:34:ea:a0:e8:91:82:9f:54:3a:f9:86:
                    2d:e5:f9:c7:66:04:94:97:bc:c9:42:70:4f:53:64:
                    62:b7:d4:83:52:15:68:cc:54:ba:8a:4b:49:09:d9:
                    64:7c:4a:92:d2:05:9e:ac:cf:d5:db:93:87:d6:52:
                    96:3a:f8:5f:fa:db:3e:a7:9d:cd:9e:81:27:b3:6f:
                    4b:a5:ba:8b:0d:73:8e:34:80:f3:4a:c0:99:78:3e:
                    f5:61:06:36:5c:f8:ae:af:3a:fb:a2:ea:b4:3b:bc:
                    0b:5b:64:04:8e:40:96:7f:14:a9:e0:51:91:81:17:
                    65:49:3c:a7:85:1a:02:2e:b2:6b:28:a8:64:5e:b4:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:2F:47:DE:10:29:85:33:50:EF:EE:02:66:8E:B3:BE:35:F7:61
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:bc:80:78:e2:05:82:50:93:1d:91:48:19:b8:eb:ac:68:
         36:8e:fa:df:b8:b8:2d:12:10:fa:e2:00:ab:a9:52:c6:c2:8c:
         39:00:6e:81:45:dd:31:b8:ac:53:c3:91:ee:cf:7a:db:92:c1:
         0a:95:7f:77:07:68:b6:d9:79:13:ca:ab:8d:50:85:ec:0d:3c:
         27:d4:ca:97:d5:20:ee:b7:0b:ac:e9:bf:65:d2:da:f0:b0:85:
         07:45:42:0d:2e:11:83:72:bf:2a:46:cd:65:1e:02:3c:c8:9a:
         da:1e:f4:c9:f5:75:ba:3c:a7:8f:39:78:42:57:70:dc:84:f6:
         16:71:33:09:8c:5a:f8:d6:1f:4f:19:b6:48:31:f5:86:50:e4:
         5b:46:a1:73:e9:75:44:02:6d:8c:03:4b:81:21:6c:55:b8:4a:
         b5:0b:c8:50:65:a9:69:46:66:3c:ea:a9:63:a2:1f:c7:54:46:
         dc:36:87:7f:3d:41:97:f0:19:de:d7:0b:09:c9:c6:6f:a4:ef:
         d7:18:56:be:9a:f2:14:82:cd:47:51:69:b4:fe:9a:fe:20:f4:
         15:6b:5d:6e:e7:01:20:bd:01:13:32:92:8a:7f:0a:00:7b:e3:
         90:ef:fa:5f:46:38:5f:98:0b:8e:08:e5:27:56:1e:1b:9a:bd:
         8d:d6:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org