Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa
File:                     323830343a336233383a3a2f33322d3438203d3e20323636313336.roa (raw, json)
Hash identifier:          r6uuCuMHLAL/oa9n+/pzVSnpYQjou3POBQWYbcacoqE=
Subject key identifier:   28:90:4E:AC:FD:7E:E8:44:DE:3E:88:07:61:D6:1B:E5:AC:BA:72:CA
Certificate issuer:       /CN=36A2F1A073C1E2560697D35F5C8F0E131B1C5916
Certificate serial:       59B2E159AA1EFA3351F451E1BACA3684A35A0829
Authority key identifier: 36:A2:F1:A0:73:C1:E2:56:06:97:D3:5F:5C:8F:0E:13:1B:1C:59:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36A2F1A073C1E2560697D35F5C8F0E131B1C5916.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa
Signing time:             Mon 08 Jan 2024 05:00:00 +0000
ROA not before:           Mon 08 Jan 2024 04:55:00 +0000
ROA not after:            Wed 08 Jan 2025 05:00:00 +0000
asID:                     266136
IP address blocks:        2804:3b38::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b2:e1:59:aa:1e:fa:33:51:f4:51:e1:ba:ca:36:84:a3:5a:08:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36A2F1A073C1E2560697D35F5C8F0E131B1C5916
        Validity
            Not Before: Jan  8 04:55:00 2024 GMT
            Not After : Jan  8 05:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:15:12:8f:85:ff:ed:23:17:39:65:52:cc:
                    8f:ae:f2:5c:d0:79:de:e1:11:7b:6b:44:69:ec:b3:
                    e3:e1:8c:b1:01:84:ed:ce:e2:7d:d9:16:5f:3f:54:
                    a7:ce:7b:6c:e4:96:a3:cf:71:91:f5:26:a7:a0:dd:
                    58:df:f4:07:a9:28:78:ac:7d:3d:16:30:25:8a:7b:
                    c2:e6:2c:ff:ce:76:51:9b:bd:6c:6e:8a:1a:95:cb:
                    8d:09:ec:4b:77:75:9f:69:c9:2d:11:9e:66:24:a5:
                    72:36:16:d7:da:44:2e:be:0a:40:d8:60:d8:90:b8:
                    48:f0:a2:7a:06:82:38:49:ed:43:d8:88:f2:fd:1a:
                    ca:43:4a:c0:03:7f:64:a8:fb:b5:6a:9c:0f:0f:41:
                    29:84:a7:69:8c:8e:1a:30:3c:95:8d:f2:88:1f:07:
                    c3:27:e4:fb:b0:00:91:b9:4b:dc:e3:b9:87:95:cb:
                    b2:a9:87:86:26:fd:e8:12:8a:2e:01:02:52:14:08:
                    be:2d:cc:97:71:88:51:04:64:d8:e1:a4:f1:69:9a:
                    f3:80:85:bb:73:31:fa:db:81:63:a4:4d:ee:a9:84:
                    26:8c:30:c6:ea:de:07:08:96:9a:62:cd:1c:16:85:
                    95:0a:50:fc:97:f0:e5:03:94:ad:82:70:5e:47:7e:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:90:4E:AC:FD:7E:E8:44:DE:3E:88:07:61:D6:1B:E5:AC:BA:72:CA
            X509v3 Authority Key Identifier:
                keyid:36:A2:F1:A0:73:C1:E2:56:06:97:D3:5F:5C:8F:0E:13:1B:1C:59:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/36A2F1A073C1E2560697D35F5C8F0E131B1C5916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36A2F1A073C1E2560697D35F5C8F0E131B1C5916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:cc:a0:b9:af:a7:41:fe:95:22:9e:a9:c3:65:20:71:14:
         d9:24:ed:9a:4d:7d:5e:f2:b3:1c:6f:7e:4d:cd:c2:ee:38:57:
         c1:22:e6:4f:e6:02:1a:ea:f5:12:15:68:28:8d:9f:3f:ae:18:
         55:d0:ff:da:78:e5:1b:be:84:8d:e1:30:aa:f5:d7:85:ea:f0:
         c0:ba:03:a8:b7:8a:62:3e:c6:93:49:e5:af:ba:c1:2b:6a:00:
         17:ee:be:85:5c:f7:e8:56:e3:36:25:80:8a:4f:31:b6:63:16:
         c0:02:87:61:f6:01:8a:62:d6:b1:d0:40:0f:af:2e:e9:3a:83:
         a9:18:2a:52:bd:7d:22:56:aa:f4:4a:38:2f:8b:14:22:29:c5:
         9c:7d:35:de:22:fe:f5:5b:1e:1e:3f:5d:86:b8:f7:ab:e8:b5:
         67:13:0f:a3:38:ff:c9:f0:74:d3:18:fe:93:36:89:87:5c:1c:
         dd:af:31:bb:cd:79:f0:01:eb:46:82:35:31:03:b1:9c:bc:86:
         e4:2a:6c:2e:fc:3d:fc:fe:01:4e:3f:0d:f6:76:f9:8a:ab:bf:
         6e:91:ad:bd:1b:87:f0:32:bc:1a:fb:9c:5f:80:32:45:f4:86:
         b1:9a:71:71:ff:5e:91:58:50:9f:6d:e5:b8:3b:80:a0:d7:b8:
         ac:97:aa:82
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUWbLhWaoe+jNR9FHhuso2hKNaCCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZBMkYxQTA3M0MxRTI1NjA2OTdEMzVGNUM4RjBFMTMx
QjFDNTkxNjAeFw0yNDAxMDgwNDU1MDBaFw0yNTAxMDgwNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlBQTE1MTI4Rjg1RkZFRDIz
MTczOTY1NTJDQzhGQUVGMjVDRDA3OURFRTExMTdCNkI0NDY5RUNCM0UzRTE4Q0Ix
MDE4NEVEQ0VFMjdERDkxNjVGM0Y1NEE3Q0U3QjZDRTQ5NkEzQ0Y3MTkxRjUyNkE3
QTBERDU4REZGNDA3QTkyODc4QUM3RDNEMTYzMDI1OEE3QkMyRTYyQ0ZGQ0U3NjUx
OUJCRDZDNkU4QTFBOTVDQjhEMDlFQzRCNzc3NTlGNjlDOTJEMTE5RTY2MjRBNTcy
MzYxNkQ3REE0NDJFQkUwQTQwRDg2MEQ4OTBCODQ4RjBBMjdBMDY4MjM4NDlFRDQz
RDg4OEYyRkQxQUNBNDM0QUMwMDM3RjY0QThGQkI1NkE5QzBGMEY0MTI5ODRBNzY5
OEM4RTFBMzAzQzk1OERGMjg4MUYwN0MzMjdFNEZCQjAwMDkxQjk0QkRDRTNCOTg3
OTVDQkIyQTk4Nzg2MjZGREU4MTI4QTJFMDEwMjUyMTQwOEJFMkRDQzk3NzE4ODUx
MDQ2NEQ4RTFBNEYxNjk5QUYzODA4NUJCNzMzMUZBREI4MTYzQTQ0REVFQTk4NDI2
OEMzMEM2RUFERTA3MDg5NjlBNjJDRDFDMTY4NTk1MEE1MEZDOTdGMEU1MDM5NEFE
ODI3MDVFNDc3RTMyRjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyaoVEo+F/+0jFzllUsyPrvJc0Hne4RF7a0Rp7LPj4YyxAYTtzuJ9
2RZfP1Snznts5Jajz3GR9SanoN1Y3/QHqSh4rH09FjAlinvC5iz/znZRm71sbooa
lcuNCexLd3WfacktEZ5mJKVyNhbX2kQuvgpA2GDYkLhI8KJ6BoI4Se1D2Ijy/RrK
Q0rAA39kqPu1apwPD0EphKdpjI4aMDyVjfKIHwfDJ+T7sACRuUvc47mHlcuyqYeG
Jv3oEoouAQJSFAi+LcyXcYhRBGTY4aTxaZrzgIW7czH624FjpE3uqYQmjDDG6t4H
CJaaYs0cFoWVClD8l/DlA5StgnBeR34y8wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FCiQTqz9fuhE3j6IB2HWG+WsunLKMB8GA1UdIwQYMBaAFDai8aBzweJWBpfTX1yP
DhMbHFkWMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2VnRHSG9aQnlaTHRT
WG01eVRQRkQ5Q0VOeFB2UXlndVlrYkpLOVQzYmltLzAvMzZBMkYxQTA3M0MxRTI1
NjA2OTdEMzVGNUM4RjBFMTMxQjFDNTkxNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zNkEyRjFBMDczQzFFMjU2MDY5N0QzNUY1QzhGMEUxMzFCMUM1
OTE2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81NlZ0R0hvWkJ5Wkx0U1htNXlU
UEZEOUNFTnhQdlF5Z3VZa2JKSzlUM2JpbS8wLzMyMzgzMDM0M2EzMzYyMzMzODNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjMxMzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
OzgwDQYJKoZIhvcNAQELBQADggEBABH4zKC5r6dB/pUinqnDZSBxFNkk7ZpNfV7y
sxxvfk3Nwu44V8Ei5k/mAhrq9RIVaCiNnz+uGFXQ/9p45Ru+hI3hMKr114Xq8MC6
A6i3imI+xpNJ5a+6wStqABfuvoVc9+hW4zYlgIpPMbZjFsACh2H2AYpi1rHQQA+v
Luk6g6kYKlK9fSJWqvRKOC+LFCIpxZx9Nd4i/vVbHh4/XYa496votWcTD6M4/8nw
dNMY/pM2iYdcHN2vMbvNefAB60aCNTEDsZy8huQqbC78Pfz+AU4/DfZ2+Yqrv26R
rb0bh/AyvBr7nF+AMkX0hrGacXH/XpFYUJ9t5bg7gKDXuKyXqoI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org