Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33342d3334203d3e20323732373632.roa
File:                     323830343a383834633a3a2f33342d3334203d3e20323732373632.roa (raw, json)
Hash identifier:          Um6sgfceBIG7uv/yFsP2Mx2K1gsKu1qddAJB21dp47s=
Subject key identifier:   55:6C:1D:89:89:C3:46:B1:35:D2:CC:0B:16:4D:5C:EF:F1:D1:D0:48
Certificate issuer:       /CN=41BE088D7BE0BD2192424318F3299100619CFF6C
Certificate serial:       64B9F900F5857A863FF6DA04C8AD2AE342852CC3
Authority key identifier: 41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33342d3334203d3e20323732373632.roa
Signing time:             Fri 06 Oct 2023 21:21:06 +0000
ROA not before:           Fri 06 Oct 2023 21:16:06 +0000
ROA not after:            Fri 04 Oct 2024 21:21:06 +0000
asID:                     272762
IP address blocks:        2804:884c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b9:f9:00:f5:85:7a:86:3f:f6:da:04:c8:ad:2a:e3:42:85:2c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BE088D7BE0BD2192424318F3299100619CFF6C
        Validity
            Not Before: Oct  6 21:16:06 2023 GMT
            Not After : Oct  4 21:21:06 2024 GMT
        Subject: CN=556C1D8989C346B135D2CC0B164D5CEFF1D1D048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:57:a7:ca:f1:aa:b0:cd:c7:18:91:1b:16:
                    bf:ca:ce:b1:aa:d5:36:23:15:14:e2:a0:08:0b:90:
                    e6:84:8b:13:2f:40:80:01:4a:6a:32:e5:13:03:35:
                    67:7a:62:d0:fb:2f:72:7d:17:05:11:b4:e5:64:c7:
                    6b:8f:fe:06:92:f9:da:98:74:cc:57:55:d6:0f:2e:
                    01:b3:13:b1:25:48:8b:8b:b8:9f:0f:cb:44:b9:8e:
                    15:c4:b3:0d:98:e4:fb:e4:18:57:16:34:3b:68:62:
                    93:9c:21:76:fa:f0:d2:fa:7d:00:c3:c0:fd:e6:8a:
                    c2:6b:25:7c:a8:f9:e1:de:a4:66:99:f3:e5:51:27:
                    27:a5:ea:9c:eb:29:f4:3f:ef:ba:bd:2d:8a:6e:1f:
                    22:8c:d4:ca:48:4b:fe:7a:31:d4:10:a8:97:f7:22:
                    2d:14:8d:d5:92:15:79:cb:ef:08:20:38:74:03:e1:
                    71:d3:95:e3:c6:a6:3c:05:d8:f9:a2:c9:34:c6:96:
                    05:b2:82:01:36:31:d9:4e:b5:98:94:f7:b2:35:b7:
                    c3:89:84:0e:36:f8:3c:16:a4:31:d3:33:6c:cc:d1:
                    2b:8b:91:13:d9:a3:e8:08:da:da:8a:3f:57:f9:89:
                    b8:ea:5a:23:d4:d0:1f:51:5f:c4:b1:b6:44:db:f9:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6C:1D:89:89:C3:46:B1:35:D2:CC:0B:16:4D:5C:EF:F1:D1:D0:48
            X509v3 Authority Key Identifier:
                keyid:41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/41BE088D7BE0BD2192424318F3299100619CFF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a3a2f33342d3334203d3e20323732373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884c::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:5b:24:ab:cd:d6:92:9f:5e:3b:98:6e:a4:e4:4d:64:53:
         f2:7d:3c:b8:7a:8a:76:ff:5e:d2:66:24:66:ad:5d:97:e2:89:
         40:20:9c:ed:e7:88:a0:da:91:80:6a:18:b6:db:0b:78:34:af:
         6d:06:16:6f:e5:0a:66:3a:ba:e9:34:17:06:a2:52:80:b6:30:
         ca:6d:9d:a5:eb:77:0b:52:cd:e9:e1:43:ab:43:89:68:a8:ca:
         c8:7b:01:b7:4e:11:d0:e9:d3:77:92:34:3c:a8:d1:7e:7d:b3:
         d1:42:fa:3a:b4:86:58:83:e5:a1:77:17:17:d7:c4:03:86:b7:
         0e:d2:7f:6e:c7:ae:ac:8d:39:08:53:7f:b2:1f:a1:cc:ac:27:
         23:15:2b:d9:5e:36:83:52:03:96:ba:92:6d:9e:b5:75:26:2b:
         c9:93:49:9f:16:8b:6f:c8:3a:af:b2:82:53:76:90:94:04:41:
         82:a1:da:5c:7d:87:a8:09:59:14:e7:05:8f:b5:ab:b6:ec:24:
         f5:92:06:b2:cd:51:f4:84:40:3f:af:5d:bb:ce:8a:a1:f7:a9:
         2c:a2:59:ab:93:29:07:6a:83:25:7e:85:aa:3e:78:a4:8f:39:
         a8:1a:da:f6:e6:7a:61:fb:ee:6a:0f:b5:51:d5:1e:92:f8:e7:
         90:b5:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org