Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33322d3332203d3e20323732373632.roa
File:                     323830343a383834633a3a2f33322d3332203d3e20323732373632.roa (raw, json)
Hash identifier:          b8vNCc7JX60dTHoNnkOeet1COPw59p7O7RnjF5+hc5U=
Subject key identifier:   D4:5D:B1:63:41:7B:08:E5:D0:40:F1:83:67:5F:5F:7A:C9:A4:45:94
Certificate issuer:       /CN=41BE088D7BE0BD2192424318F3299100619CFF6C
Certificate serial:       615F38D848D266BB2C6DC62DA150DC4AF4856926
Authority key identifier: 41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33322d3332203d3e20323732373632.roa
Signing time:             Fri 06 Oct 2023 21:20:53 +0000
ROA not before:           Fri 06 Oct 2023 21:15:53 +0000
ROA not after:            Fri 04 Oct 2024 21:20:53 +0000
asID:                     272762
IP address blocks:        2804:884c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5f:38:d8:48:d2:66:bb:2c:6d:c6:2d:a1:50:dc:4a:f4:85:69:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BE088D7BE0BD2192424318F3299100619CFF6C
        Validity
            Not Before: Oct  6 21:15:53 2023 GMT
            Not After : Oct  4 21:20:53 2024 GMT
        Subject: CN=D45DB163417B08E5D040F183675F5F7AC9A44594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:b6:ac:5a:40:26:8b:70:c1:58:48:7d:82:
                    41:b6:4e:27:06:23:0b:98:03:38:ec:9a:40:0a:f2:
                    78:34:76:d8:f0:79:10:ab:74:5f:7a:2c:a8:2a:ad:
                    b1:4a:7e:6d:1b:a3:78:cb:f3:e8:67:25:b2:13:31:
                    2b:0b:01:ac:56:12:f9:bb:86:c1:9a:2e:af:09:35:
                    3b:12:2e:91:f3:43:b1:3d:ca:08:5c:ea:27:1f:c3:
                    53:96:eb:67:03:a1:15:62:75:8e:d7:7b:0c:c2:56:
                    14:18:f9:16:4f:02:c1:11:67:6d:d8:9f:6c:0d:21:
                    aa:c2:76:24:fc:3b:f8:19:f8:7f:cd:f6:9e:49:a0:
                    5d:07:84:74:83:ca:d3:40:c0:cf:d5:32:f7:c3:4f:
                    c6:ae:e4:52:69:32:17:f4:31:48:c6:36:75:bb:2f:
                    97:ea:d0:26:53:d0:b9:a6:14:e3:5b:da:1c:b6:a8:
                    15:dc:19:bd:54:fa:00:57:a8:d8:1f:a3:9f:8d:06:
                    97:25:32:96:46:16:6c:d6:59:fd:19:ea:f5:10:55:
                    d6:e7:c6:d6:89:82:f7:d4:30:7d:bc:c6:2b:c1:13:
                    3f:cf:16:b3:02:46:9b:52:8b:85:a3:28:08:9d:1f:
                    40:7f:f4:58:c7:9e:c5:a9:71:d5:47:aa:09:f2:7e:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5D:B1:63:41:7B:08:E5:D0:40:F1:83:67:5F:5F:7A:C9:A4:45:94
            X509v3 Authority Key Identifier:
                keyid:41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/41BE088D7BE0BD2192424318F3299100619CFF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33322d3332203d3e20323732373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:3c:7c:b6:e8:6e:f9:7c:1c:aa:d0:91:aa:04:90:ae:58:
         61:b2:fe:9b:e4:6b:a1:03:1e:17:c2:a5:eb:06:54:f4:1b:6f:
         06:a0:8d:ae:61:3c:bc:03:39:e4:67:03:c5:19:39:bd:b1:66:
         66:29:16:25:59:bd:d6:d4:d4:08:e2:60:83:61:83:27:eb:01:
         d0:44:79:d4:a2:fe:b2:d9:dd:a1:91:c0:32:12:e1:03:75:7d:
         75:67:29:ca:98:65:04:cc:8b:cb:17:eb:4a:79:ec:e0:f3:e1:
         08:9b:e1:f4:e1:0f:5a:69:e0:90:82:b1:be:22:22:2e:4d:3f:
         05:7a:04:e2:9d:8c:db:4d:ce:68:62:29:78:00:9f:36:1d:61:
         76:c2:f0:8e:e0:bd:64:95:83:a6:f1:b6:47:ce:73:ce:3f:32:
         da:43:41:56:59:cb:c0:e3:c6:b1:7c:48:d9:ef:f5:b3:67:6f:
         36:0f:73:6d:57:c9:33:e3:b6:70:21:9f:2a:21:ab:b9:01:d6:
         dd:48:a0:08:86:04:b3:17:d3:f0:13:fe:a7:30:5b:b2:1a:92:
         17:07:2b:a4:a1:68:76:f8:20:4a:08:42:61:46:59:fa:e6:cd:
         90:32:52:9d:70:27:02:d0:ba:96:b8:21:c3:e9:72:02:f8:98:
         cc:ff:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org