Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3332203d3e20323636333630.roa
File:                     323830343a333661303a3a2f33322d3332203d3e20323636333630.roa (raw, json)
Hash identifier:          Q+1iBe1aE5hrpcSMTKAsjFdl5DQAuc9BiKCg3+ukvjk=
Subject key identifier:   7E:F2:38:F1:C9:E2:37:5D:E8:18:C3:7E:61:0E:8B:D0:85:D0:66:99
Certificate issuer:       /CN=8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742
Certificate serial:       58A0CBC1013EAA6F3EDF3CC87609AAFD6933DE99
Authority key identifier: 8C:E5:AB:DB:7C:EF:7B:FE:57:62:FB:9B:68:A5:86:B1:31:0B:17:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3332203d3e20323636333630.roa
Signing time:             Tue 05 Dec 2023 17:44:43 +0000
ROA not before:           Tue 05 Dec 2023 17:39:43 +0000
ROA not after:            Tue 03 Dec 2024 17:44:43 +0000
asID:                     266360
IP address blocks:        2804:36a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a0:cb:c1:01:3e:aa:6f:3e:df:3c:c8:76:09:aa:fd:69:33:de:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742
        Validity
            Not Before: Dec  5 17:39:43 2023 GMT
            Not After : Dec  3 17:44:43 2024 GMT
        Subject: CN=7EF238F1C9E2375DE818C37E610E8BD085D06699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:7f:0f:0a:c4:06:54:22:33:03:a1:ab:ba:
                    7b:ef:4a:c6:24:47:5f:f6:25:a1:5e:e3:0f:ed:19:
                    78:33:ca:3b:c6:6a:fb:a0:6a:f1:fe:a8:9b:96:78:
                    e6:7f:64:c8:28:29:99:73:2e:e7:bc:44:71:1c:ad:
                    70:9e:c2:dc:0c:b8:2b:3d:de:04:eb:95:7a:fe:42:
                    a5:d4:51:39:51:4e:e3:1d:fc:2d:0f:f7:04:7f:5a:
                    ec:3a:22:38:be:57:25:7b:c0:3f:87:2f:2b:6b:6c:
                    8a:b6:7f:5c:64:14:a5:71:9a:44:d0:2d:7e:05:14:
                    2a:e7:a0:50:01:67:ed:72:61:80:c5:67:f3:0f:28:
                    52:f0:c6:1d:73:71:9e:3e:54:08:8a:e0:be:f5:d5:
                    64:05:8f:5d:54:7f:e0:dd:a8:b4:0f:e7:0c:58:a2:
                    39:a4:83:36:71:2d:1d:5b:35:7d:77:d1:7d:6f:fd:
                    4b:b8:1d:bd:a0:69:3a:45:a1:81:7c:2c:1f:b6:c0:
                    03:fc:33:70:a7:f6:1e:ee:a8:b8:65:06:2e:61:e9:
                    68:44:8a:8d:92:26:45:23:19:99:eb:85:fd:e2:38:
                    21:9f:d9:22:a1:00:a7:08:dc:c1:89:31:7d:8d:50:
                    0d:2e:e3:c4:36:91:1c:20:54:ba:e1:82:8b:99:64:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:38:F1:C9:E2:37:5D:E8:18:C3:7E:61:0E:8B:D0:85:D0:66:99
            X509v3 Authority Key Identifier:
                keyid:8C:E5:AB:DB:7C:EF:7B:FE:57:62:FB:9B:68:A5:86:B1:31:0B:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3332203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:c2:82:1b:f6:16:47:9f:e7:e9:f8:7c:f1:db:c4:0f:47:
         fb:1c:88:b2:1d:b3:12:ff:1b:c0:95:92:cb:1a:88:ed:8c:37:
         1a:bc:20:96:6c:95:a9:0f:c4:9e:1c:ad:2e:26:7f:93:91:62:
         4c:d5:34:07:87:55:49:5b:d8:0f:a3:8b:de:db:32:3e:e2:5f:
         4c:60:d6:df:ad:37:8e:a0:14:11:b3:e6:f0:a3:b4:91:ed:aa:
         44:e9:15:73:22:b3:d9:f2:05:2b:fe:c8:89:e7:82:f8:52:b0:
         02:6b:6d:78:34:37:12:21:6a:50:da:2c:b6:c7:28:52:5c:4c:
         9e:f6:c3:31:a9:6e:8f:63:b6:8e:ab:2e:55:ac:0e:b5:ef:f3:
         32:67:bc:2f:a7:ce:78:2e:d1:4e:9d:12:d6:3f:2f:c0:23:e6:
         bd:a0:86:23:16:cd:01:41:6b:33:17:ad:d5:73:c5:c9:83:81:
         27:f1:df:8d:1d:29:68:c4:9b:5b:50:93:0c:7a:25:e5:11:19:
         1c:20:1e:ab:01:93:e7:2c:be:5c:67:7d:90:80:87:5c:cf:98:
         e2:da:b7:9f:c9:ee:79:ee:15:d5:b1:a1:51:83:2b:d8:77:5e:
         08:9f:37:b3:6e:b7:b2:74:26:ca:32:b6:75:0f:1e:a5:f9:9c:
         47:53:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org