Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3335203d3e20323636333630.roa
File:                     323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (raw, json)
Hash identifier:          8wueU7tPPYDPk3Il26sslDD+iwk71OLizDjvT3sGwj4=
Subject key identifier:   11:F3:57:0C:91:A0:59:46:47:D4:1F:DA:F1:B6:33:53:C1:03:41:5A
Certificate issuer:       /CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
Certificate serial:       628E478592879B09F90F8D1B499FAFEB24A85479
Authority key identifier: B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3335203d3e20323636333630.roa
Signing time:             Fri 26 Jan 2024 12:43:28 +0000
ROA not before:           Fri 26 Jan 2024 12:38:28 +0000
ROA not after:            Fri 24 Jan 2025 12:43:28 +0000
asID:                     266360
IP address blocks:        2804:36a0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:47:85:92:87:9b:09:f9:0f:8d:1b:49:9f:af:eb:24:a8:54:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
        Validity
            Not Before: Jan 26 12:38:28 2024 GMT
            Not After : Jan 24 12:43:28 2025 GMT
        Subject: CN=11F3570C91A0594647D41FDAF1B63353C103415A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:ec:b1:55:4f:06:7c:bf:ef:44:71:27:53:
                    e3:81:0a:77:0a:6b:a0:51:b7:7e:10:d3:e3:b2:74:
                    6d:d2:b2:a4:ef:20:05:18:53:fb:fc:ef:47:19:f5:
                    0d:86:60:05:5a:85:f6:79:2c:94:c0:11:94:04:80:
                    ff:a0:27:57:11:16:40:e9:eb:09:d9:9f:25:a7:7d:
                    37:c6:cf:0d:e6:45:b5:25:99:58:68:b3:7a:a2:13:
                    a5:f6:e4:01:e4:37:fd:49:d7:7d:90:34:ac:3b:20:
                    50:96:a6:bd:1c:b4:2b:d0:4f:7c:e5:ea:1d:46:17:
                    46:04:4b:f4:86:d5:92:66:25:a3:74:21:dc:00:94:
                    bd:4e:c9:e7:3d:82:39:00:63:c4:b4:2c:cb:d3:5b:
                    82:59:60:3b:4a:89:d2:e3:68:55:90:2c:92:db:bc:
                    24:12:84:e0:f9:d6:0d:b9:8a:c4:62:0a:f0:df:53:
                    60:26:6f:69:3b:ae:58:c8:a3:94:52:c0:11:0f:56:
                    a5:9e:91:c8:82:4c:d0:19:34:cc:8d:e7:39:cc:9a:
                    37:a9:0c:4a:bc:0c:c0:78:7c:9e:52:2e:58:d4:d3:
                    cd:af:94:81:07:ae:92:2a:18:8f:98:45:e0:64:77:
                    e3:be:08:3c:54:61:e8:04:45:ea:a8:e7:fb:4a:e2:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:57:0C:91:A0:59:46:47:D4:1F:DA:F1:B6:33:53:C1:03:41:5A
            X509v3 Authority Key Identifier:
                keyid:B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3335203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:2b:59:da:5b:cc:72:b3:ac:0a:39:5f:a9:7a:be:e4:d4:
         ba:d1:ff:4e:45:99:a8:de:8f:28:a8:e1:01:d2:59:6a:f4:e6:
         1b:a4:54:7c:45:ef:f2:54:d2:a3:12:72:6c:2f:d7:bd:ed:29:
         18:34:f6:4e:c9:38:d5:ad:cb:bc:8c:4d:e2:ef:4b:c7:17:64:
         6d:a8:d2:2d:12:1d:fa:a0:59:27:a7:61:d6:27:fa:88:f5:40:
         9d:6d:09:87:35:45:d2:ab:f3:79:3c:02:bc:02:99:4c:49:38:
         0d:1e:c9:99:e3:1a:7c:50:08:50:f4:77:53:36:ce:63:28:12:
         9c:6e:a7:43:35:3f:89:63:45:db:1c:1e:0e:6e:b2:67:55:28:
         7a:01:4d:6c:72:84:9d:29:48:0a:49:e0:91:86:55:11:f4:b6:
         90:c0:36:69:56:f1:c2:db:33:c6:7b:a9:15:50:23:cd:f3:02:
         da:49:64:d9:4f:16:d2:65:0d:3a:1d:29:74:f8:56:b4:5c:27:
         91:1b:65:59:42:c4:7f:51:18:c0:71:1b:6a:4a:b8:95:77:7e:
         12:ed:f1:96:5f:6c:07:ae:57:c7:40:2c:9d:a2:c7:0d:3a:81:
         5e:3c:5c:53:b5:7d:19:7d:e2:1e:61:42:0a:3e:0c:b6:93:bc:
         8b:19:5f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org