Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          iV/c3YfzloqVYerxS4iPUrRjcoRCdx1btLmPPVTxV7A=
Subject key identifier:   5F:BD:64:47:F3:D5:7F:02:A0:02:BD:9C:D3:B2:57:9A:02:45:58:50
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       2F3641A23207DCCBA8CA4A07FCAA6D6D8BD899DD
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:16 +0000
ROA not before:           Wed 20 Mar 2024 18:52:16 +0000
ROA not after:            Wed 19 Mar 2025 18:57:16 +0000
asID:                     263989
IP address blocks:        2804:28f4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:41:a2:32:07:dc:cb:a8:ca:4a:07:fc:aa:6d:6d:8b:d8:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:16 2024 GMT
            Not After : Mar 19 18:57:16 2025 GMT
        Subject: CN=5FBD6447F3D57F02A002BD9CD3B2579A02455850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e2:01:c9:91:a5:db:32:49:e7:5a:0d:12:cf:
                    69:9b:bf:58:cb:5c:26:e7:3e:12:0f:60:a8:c0:6f:
                    5c:91:dc:3e:44:9f:c8:4a:fa:d4:8b:12:03:72:f7:
                    6d:5f:21:25:64:fa:10:ca:84:da:38:99:42:bf:11:
                    fa:22:ac:c6:ff:20:87:21:f7:dc:ad:3f:32:46:4b:
                    35:20:cb:5d:a0:d8:4e:18:04:0f:1c:9c:85:c2:09:
                    b6:39:4e:fc:bf:3d:78:b3:bf:00:ed:d6:98:cc:54:
                    cf:9b:36:89:03:76:79:4d:11:51:f7:c6:ef:17:c6:
                    dc:04:fd:0d:a1:5f:b7:5b:a0:13:e6:43:54:7f:b7:
                    3c:da:54:3e:c0:ec:ef:03:7e:17:23:00:d9:67:45:
                    16:d0:b3:f3:de:c7:a3:1b:aa:85:52:4c:0f:43:fb:
                    6d:eb:18:1f:c7:0d:f3:ad:b7:f0:4c:1e:fc:8a:2d:
                    3f:34:75:c0:11:b6:9d:bc:5f:eb:49:b7:07:d7:58:
                    12:de:a3:18:3b:e7:a1:79:ec:45:85:22:48:1e:ec:
                    29:d7:74:24:3f:2e:c1:88:6b:ec:9a:3b:9b:02:4e:
                    45:94:7e:26:7d:6d:4a:8b:24:fd:7d:82:61:1e:1f:
                    ef:eb:8a:03:31:a7:b9:c1:4a:bc:29:53:a7:2c:1c:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BD:64:47:F3:D5:7F:02:A0:02:BD:9C:D3:B2:57:9A:02:45:58:50
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:57:94:d7:db:d4:0b:d7:74:98:cd:3a:40:50:a3:be:b5:a2:
         d1:60:c1:ae:21:c9:c3:de:a2:38:e4:a5:22:f2:77:80:4e:53:
         8b:96:8c:40:de:bd:ee:60:40:7c:68:6b:4a:60:38:f4:91:91:
         14:3f:15:ba:bb:ef:be:79:ae:f9:8b:91:db:a7:03:fd:2a:89:
         35:94:ee:7a:e5:e4:f3:27:ab:77:ca:f2:67:71:b5:1d:cf:1f:
         2c:5a:da:ae:94:c9:86:10:ee:9d:35:ef:89:7e:8e:34:07:e1:
         9e:06:fa:9b:6e:47:72:d9:24:e5:f1:0b:46:bc:24:71:0b:b1:
         1a:5e:e8:6d:35:3f:ba:ed:f6:5a:97:46:a5:10:a3:95:1e:09:
         81:83:e2:c0:df:39:18:bf:8c:c8:a1:bb:00:17:3d:c0:4a:58:
         02:57:1b:4f:ac:51:15:49:f6:1d:49:ac:8e:29:68:a8:3f:88:
         59:9c:85:9d:e5:1e:a2:06:95:a4:e8:94:2f:00:67:e7:7f:d1:
         2d:d0:de:a9:1b:4e:46:42:68:e2:98:d2:c3:73:21:4f:21:a5:
         d5:4b:e7:e5:12:22:68:6e:dd:80:46:8c:8f:91:61:31:20:45:
         aa:f5:bb:6e:1f:94:fb:16:8f:da:a2:26:0d:11:43:73:85:de:
         b3:c9:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org