Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a383030303a3a2f33332d3333203d3e20323732373632.roa
File:                     323830343a383834633a383030303a3a2f33332d3333203d3e20323732373632.roa (raw, json)
Hash identifier:          +kAJh3gEdu4LJtse1ipjDadgUdTWh4T7VW/JiC+49QU=
Subject key identifier:   EE:2B:AB:34:DA:F9:9C:54:96:D6:73:1D:B6:CF:E5:D1:8B:6F:70:35
Certificate issuer:       /CN=41BE088D7BE0BD2192424318F3299100619CFF6C
Certificate serial:       211820492C575B5B296E6BB85C6F5B87AE39B1A1
Authority key identifier: 41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a383030303a3a2f33332d3333203d3e20323732373632.roa
Signing time:             Fri 06 Oct 2023 21:21:11 +0000
ROA not before:           Fri 06 Oct 2023 21:16:11 +0000
ROA not after:            Fri 04 Oct 2024 21:21:11 +0000
asID:                     272762
IP address blocks:        2804:884c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:20:49:2c:57:5b:5b:29:6e:6b:b8:5c:6f:5b:87:ae:39:b1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BE088D7BE0BD2192424318F3299100619CFF6C
        Validity
            Not Before: Oct  6 21:16:11 2023 GMT
            Not After : Oct  4 21:21:11 2024 GMT
        Subject: CN=EE2BAB34DAF99C5496D6731DB6CFE5D18B6F7035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fd:d9:66:a3:96:9f:78:89:9c:e3:14:d6:95:
                    05:9a:cb:d8:15:db:b5:7e:7c:58:5f:f6:a6:b1:94:
                    19:65:9e:04:94:df:04:31:21:1c:cd:cf:4b:a4:96:
                    be:93:27:99:8a:ef:66:1c:d0:ed:7b:6e:95:fa:c6:
                    25:a0:ad:16:10:c4:52:05:2a:5c:5f:c9:9e:29:3c:
                    6a:e9:1d:02:f3:bd:31:ec:70:86:50:e1:17:34:cc:
                    97:a7:4f:5c:38:bf:7d:42:84:03:97:69:af:24:a3:
                    3a:b6:0d:58:c2:4d:25:1c:e9:fb:c7:bc:42:e8:6f:
                    04:c0:c6:9c:17:0a:ff:79:5a:9e:2b:3e:82:31:79:
                    f4:0a:ef:ae:b3:9d:0b:56:e7:e7:71:d2:a2:3a:07:
                    1e:29:e3:02:ef:ec:3a:35:56:5e:46:93:88:0f:6b:
                    ad:66:ff:bb:a0:8f:61:be:4e:fe:df:88:10:07:eb:
                    1b:aa:46:aa:22:ad:98:57:da:87:34:ef:a7:76:6e:
                    a7:96:a7:36:00:0c:39:6b:33:88:47:07:2b:20:b6:
                    96:a6:8f:13:d2:60:92:6b:18:5a:bf:23:1a:e3:c1:
                    55:57:85:75:96:f8:a5:fb:4c:51:6a:06:dd:8c:06:
                    a8:2e:8f:13:7f:49:57:f8:73:10:74:0e:c3:78:44:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:AB:34:DA:F9:9C:54:96:D6:73:1D:B6:CF:E5:D1:8B:6F:70:35
            X509v3 Authority Key Identifier:
                keyid:41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/41BE088D7BE0BD2192424318F3299100619CFF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a383030303a3a2f33332d3333203d3e20323732373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:e6:41:3d:c8:37:dd:11:db:67:c8:4b:af:37:3d:7f:72:
         0c:ba:65:f1:6a:e9:34:7b:c1:4a:2b:e2:03:bb:54:fc:6c:de:
         55:8b:a0:e6:3f:9a:f0:90:d8:0d:94:eb:1b:17:11:32:21:8b:
         5e:6e:9e:3a:1c:d5:18:99:42:a4:8e:24:65:13:c6:06:bc:64:
         83:fc:c7:71:c5:f3:93:e2:bc:81:e4:95:9d:54:36:f2:c1:f3:
         c3:00:67:a5:18:1f:6b:c9:70:e0:8c:8b:07:c5:7c:8c:f0:72:
         08:16:f1:5c:0f:0f:81:63:c8:a7:aa:ca:68:15:04:fc:04:12:
         cc:4e:6d:14:00:f3:b0:e6:86:b7:e0:60:ca:56:7e:d6:ac:10:
         cf:d6:a0:dd:ba:17:da:94:53:d2:50:95:d5:2a:7d:81:84:5f:
         d4:26:85:1a:fb:b2:48:d9:39:ee:95:3b:49:c9:0b:78:76:b9:
         37:1c:49:61:bd:a7:60:bf:70:29:be:f3:5f:28:c2:46:01:5f:
         93:fc:ba:e6:4e:9e:96:d3:93:07:70:6d:32:84:ea:6d:7a:55:
         17:ae:b8:f4:f1:d9:51:5e:1e:21:86:f7:81:50:3c:c8:2a:a4:
         e6:62:1d:42:a4:89:4a:2f:e7:67:5d:26:88:93:7a:a3:79:d2:
         e4:af:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org