Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/323830343a373065633a3a2f33322d3334203d3e20323730373536.roa
File:                     323830343a373065633a3a2f33322d3334203d3e20323730373536.roa (raw, json)
Hash identifier:          ERusAWdLBtWjIoVQFLwTt4/OVNnYwXEuN/UmOF4nSv0=
Subject key identifier:   60:8F:BD:DE:61:44:F9:DE:E8:4F:E3:96:87:16:EE:4E:C0:C4:A2:7F
Certificate issuer:       /CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
Certificate serial:       21FDE9E60AF803BA48472D4826CD144D02850D30
Authority key identifier: 36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/323830343a373065633a3a2f33322d3334203d3e20323730373536.roa
Signing time:             Thu 04 Apr 2024 21:30:13 +0000
ROA not before:           Thu 04 Apr 2024 21:25:13 +0000
ROA not after:            Thu 03 Apr 2025 21:30:13 +0000
asID:                     270756
IP address blocks:        2804:70ec::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fd:e9:e6:0a:f8:03:ba:48:47:2d:48:26:cd:14:4d:02:85:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
        Validity
            Not Before: Apr  4 21:25:13 2024 GMT
            Not After : Apr  3 21:30:13 2025 GMT
        Subject: CN=608FBDDE6144F9DEE84FE3968716EE4EC0C4A27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:8d:5f:a8:9a:bd:22:41:25:92:6d:cb:f1:
                    4f:aa:25:8d:35:4d:22:40:cb:40:c5:ae:e2:10:1d:
                    81:29:cf:2f:06:44:a2:42:ce:a4:3d:84:92:f6:a7:
                    e7:d4:f1:b7:89:7f:e7:16:e3:6a:a7:66:5f:34:bc:
                    55:d3:93:06:5f:7c:00:ac:08:1c:eb:06:85:84:32:
                    b1:7c:72:c1:de:a1:e9:fe:84:7a:69:f8:58:3e:ac:
                    ff:21:d2:d4:3d:1b:0b:b9:f9:16:ee:55:ee:c8:bc:
                    50:ae:49:ef:d9:c4:07:3e:58:8a:3f:2b:d4:1f:73:
                    4c:11:51:64:06:08:dc:5b:b2:3b:f8:e0:e9:bf:4e:
                    d0:68:17:22:06:55:c5:a5:01:6b:15:96:8d:b5:40:
                    c5:6b:4a:1e:30:ee:e2:90:97:76:ef:c4:0b:41:d6:
                    1c:cc:6d:2d:c9:80:b1:91:ce:1b:d4:9e:f5:c7:68:
                    28:cb:a8:c4:e2:a7:d0:d9:d3:e6:cc:f6:ca:a8:e6:
                    e3:0c:e4:6e:5b:a1:5d:8f:c5:f8:8e:a8:b5:fd:fc:
                    61:07:43:f4:fe:10:6a:06:fc:68:36:52:15:6e:f9:
                    09:1b:d0:33:39:f8:93:dc:df:b9:43:e0:e4:7d:47:
                    52:b8:be:ca:7f:51:a4:3d:73:08:c9:2a:e0:7a:e5:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:BD:DE:61:44:F9:DE:E8:4F:E3:96:87:16:EE:4E:C0:C4:A2:7F
            X509v3 Authority Key Identifier:
                keyid:36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/323830343a373065633a3a2f33322d3334203d3e20323730373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:54:44:1f:ac:36:81:ba:e7:df:14:30:3d:aa:6a:3b:c5:db:
         19:0f:ee:ff:6f:d6:28:4e:5d:64:38:3f:7b:88:62:45:19:c5:
         c0:c1:60:23:bc:56:49:46:6a:08:13:0d:10:5e:6b:a9:33:2f:
         0f:f5:6c:72:22:69:9b:99:69:8d:81:e8:fd:9a:4e:bc:92:bb:
         6b:41:99:bf:75:2d:db:fc:86:47:5d:fd:6c:fa:ae:0f:8f:f7:
         d0:05:ff:ba:ec:aa:a8:d1:c4:15:20:11:dc:a5:b4:b2:9d:6a:
         05:50:38:b7:93:fd:79:fa:76:ce:92:31:c8:41:4c:fc:65:6f:
         4c:42:d5:f3:7e:57:46:ca:68:f5:bc:1d:22:00:c3:93:69:a4:
         c4:73:0f:82:ff:e6:de:a9:6f:f6:5f:4a:7e:bf:5a:35:30:43:
         cd:ab:fe:1a:1d:df:75:55:4f:4f:ba:39:4b:e8:e3:3a:6d:8d:
         70:51:34:c9:8d:42:a7:43:9a:74:3b:5e:2f:92:8e:fb:a8:d5:
         ff:60:45:47:a3:dc:eb:8a:72:34:4b:2b:aa:3f:8d:53:73:d2:
         af:33:74:d9:0d:69:a5:3e:2f:ed:52:38:cb:8c:6f:2b:7a:6d:
         d8:9f:90:ad:51:8b:9a:ec:83:1f:5b:f3:99:dd:1a:c3:7b:6f:
         26:ad:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org