Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33332d3333203d3e20323732373632.roa
File:                     323830343a383834633a3a2f33332d3333203d3e20323732373632.roa (raw, json)
Hash identifier:          JirMPMGXkRDKToWUTsq2Ptr/KmbqeU/GxPWNrKP4WIc=
Subject key identifier:   E1:85:4B:5A:25:4F:57:C1:A9:79:44:93:2A:39:3A:F6:81:E0:52:28
Certificate issuer:       /CN=41BE088D7BE0BD2192424318F3299100619CFF6C
Certificate serial:       668E2A7C1C9C2657AFBBEBB949BF65CE6E0D2B6C
Authority key identifier: 41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33332d3333203d3e20323732373632.roa
Signing time:             Fri 06 Oct 2023 21:20:57 +0000
ROA not before:           Fri 06 Oct 2023 21:15:57 +0000
ROA not after:            Fri 04 Oct 2024 21:20:57 +0000
asID:                     272762
IP address blocks:        2804:884c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8e:2a:7c:1c:9c:26:57:af:bb:eb:b9:49:bf:65:ce:6e:0d:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BE088D7BE0BD2192424318F3299100619CFF6C
        Validity
            Not Before: Oct  6 21:15:57 2023 GMT
            Not After : Oct  4 21:20:57 2024 GMT
        Subject: CN=E1854B5A254F57C1A97944932A393AF681E05228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:86:73:57:b0:20:79:b6:ee:db:dc:23:34:
                    32:7e:27:20:1c:b3:2b:f6:e9:92:1b:c2:c9:8a:74:
                    4f:b1:82:6f:2a:57:cb:c4:52:9f:73:d9:e1:99:10:
                    76:86:2f:cf:cf:20:2d:e6:45:87:ce:63:d4:f0:5f:
                    29:bd:45:c6:cd:b4:75:51:f9:7d:ba:3f:01:11:9b:
                    f6:55:65:65:e4:d7:35:bf:5a:a3:dc:29:7e:5f:73:
                    e1:64:04:6d:20:2a:f9:67:57:f1:e4:29:39:c1:0d:
                    ac:68:87:5c:3a:9c:c9:eb:da:ab:9d:0a:00:28:9c:
                    e9:8b:83:87:55:1d:fd:5a:2c:95:b1:11:8c:bf:f7:
                    20:1a:65:fb:5b:c4:9d:94:c0:13:be:0b:66:f8:11:
                    6e:b0:7a:3b:4a:cd:86:8f:69:9a:7c:d7:ea:58:00:
                    db:ed:5b:5c:96:0b:24:6d:08:e2:b7:ef:1b:9f:6f:
                    15:6b:95:a9:1d:09:bc:a3:9e:95:8d:1a:24:c5:af:
                    01:a9:18:fc:96:09:23:92:d8:c9:37:c0:69:44:f0:
                    ba:bf:a4:77:f9:02:1f:95:a0:0b:31:b7:93:cb:5b:
                    59:48:2e:5a:23:48:0e:0d:a1:d7:6f:34:5b:2e:64:
                    ab:29:a3:3f:ad:36:15:37:4f:ba:6d:75:ff:9f:41:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:4B:5A:25:4F:57:C1:A9:79:44:93:2A:39:3A:F6:81:E0:52:28
            X509v3 Authority Key Identifier:
                keyid:41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/41BE088D7BE0BD2192424318F3299100619CFF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33332d3333203d3e20323732373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884c::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:70:f4:59:b7:3b:60:4e:06:fc:fa:90:ca:fb:38:1f:79:
         9d:18:8c:b5:5f:45:7f:b9:32:db:f7:26:f0:2d:78:f7:9d:1d:
         84:7f:a0:cd:bd:f6:f7:d4:f0:3d:03:04:b2:c7:0f:36:c3:0b:
         f2:ca:86:db:3b:fa:d4:89:be:18:78:ad:56:9e:f8:15:de:59:
         54:34:b4:1e:1f:d8:e2:b3:d2:b8:3f:fc:e4:5c:e1:f8:87:91:
         92:a8:2c:9e:9e:0f:39:dc:6e:61:9b:5a:b1:68:1f:fd:b2:3f:
         8a:5e:a0:1c:22:d0:96:25:d9:40:f3:13:7f:c0:55:a0:48:90:
         40:d7:3b:20:0c:28:51:a4:11:61:22:08:46:b9:84:a9:0b:15:
         38:0c:29:12:32:4c:ec:17:5d:ed:92:c5:c0:13:1b:be:36:7c:
         ea:79:49:20:27:44:93:20:54:a9:94:05:5a:4b:6d:4f:2e:31:
         98:9f:fd:39:14:fb:0d:87:1f:39:07:6f:e4:10:77:04:e6:8d:
         6c:ce:87:97:92:bb:fc:e1:a3:fe:74:72:be:36:b6:df:9b:5f:
         49:a1:af:16:ef:9a:ae:cc:23:f1:8c:69:7b:73:f6:32:d0:a0:
         ca:bd:c1:5e:61:41:a3:29:b2:34:7b:fd:13:da:e0:35:bf:ce:
         6b:02:e4:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZo4qfBycJlevu+u5Sb9lzm4NK2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCRTA4OEQ3QkUwQkQyMTkyNDI0MzE4RjMyOTkxMDA2
MTlDRkY2QzAeFw0yMzEwMDYyMTE1NTdaFw0yNDEwMDQyMTIwNTdaMDMxMTAvBgNV
BAMTKEUxODU0QjVBMjU0RjU3QzFBOTc5NDQ5MzJBMzkzQUY2ODFFMDUyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpGIZzV7Agebbu29wjNDJ+JyAc
syv26ZIbwsmKdE+xgm8qV8vEUp9z2eGZEHaGL8/PIC3mRYfOY9TwXym9RcbNtHVR
+X26PwERm/ZVZWXk1zW/WqPcKX5fc+FkBG0gKvlnV/HkKTnBDaxoh1w6nMnr2qud
CgAonOmLg4dVHf1aLJWxEYy/9yAaZftbxJ2UwBO+C2b4EW6wejtKzYaPaZp81+pY
ANvtW1yWCyRtCOK37xufbxVrlakdCbyjnpWNGiTFrwGpGPyWCSOS2Mk3wGlE8Lq/
pHf5Ah+VoAsxt5PLW1lILlojSA4NoddvNFsuZKspoz+tNhU3T7ptdf+fQdN3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4YVLWiVPV8GpeUSTKjk69oHgUigwHwYDVR0j
BBgwFoAUQb4IjXvgvSGSQkMY8ymRAGGc/2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZEU2g3MmJta0NCQTdjNDI2OXFXRU5VWDR0Q2ZLbm96d2dIUDFadWt1
dmsvMC80MUJFMDg4RDdCRTBCRDIxOTI0MjQzMThGMzI5OTEwMDYxOUNGRjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxQkUwODhEN0JFMEJEMjE5
MjQyNDMxOEYzMjk5MTAwNjE5Q0ZGNkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2RFNoNzJibWtDQkE3YzQyNjlxV0VOVVg0dENmS25vendnSFAxWnVrdXZrLzAv
MzIzODMwMzQzYTM4MzgzNDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMy
MzczNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASITAAwDQYJKoZIhvcNAQELBQADggEBAGxHcPRZ
tztgTgb8+pDK+zgfeZ0YjLVfRX+5Mtv3JvAtePedHYR/oM299vfU8D0DBLLHDzbD
C/LKhts7+tSJvhh4rVae+BXeWVQ0tB4f2OKz0rg//ORc4fiHkZKoLJ6eDzncbmGb
WrFoH/2yP4peoBwi0JYl2UDzE3/AVaBIkEDXOyAMKFGkEWEiCEa5hKkLFTgMKRIy
TOwXXe2SxcATG742fOp5SSAnRJMgVKmUBVpLbU8uMZif/TkU+w2HHzkHb+QQdwTm
jWzOh5eSu/zho/50cr42tt+bX0mhrxbvmq7MI/GMaXtz9jLQoMq9wV5hQaMpsjR7
/RPa4DW/zmsC5MY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org