Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33362d3336203d3e20323731333537.roa
File:                     323830343a376133633a3a2f33362d3336203d3e20323731333537.roa (raw, json)
Hash identifier:          Ba3ItbGnmKjO48PD1QHmF2WVHa8z7zLH0KLRKIuHzmw=
Subject key identifier:   65:B6:6A:4C:A8:D1:C0:22:AC:5C:53:53:A4:E4:5E:79:C1:0E:49:E1
Certificate issuer:       /CN=8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388
Certificate serial:       357E4CCC21574FE555D29FBC9AFBF0FD82616920
Authority key identifier: 83:34:E7:8E:CC:B2:CE:B0:77:4D:54:C5:E6:1F:D4:F8:CC:1A:93:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33362d3336203d3e20323731333537.roa
Signing time:             Tue 11 Apr 2023 13:26:16 +0000
ROA not before:           Tue 11 Apr 2023 13:21:16 +0000
ROA not after:            Tue 09 Apr 2024 13:26:16 +0000
asID:                     271357
IP address blocks:        2804:7a3c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7e:4c:cc:21:57:4f:e5:55:d2:9f:bc:9a:fb:f0:fd:82:61:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388
        Validity
            Not Before: Apr 11 13:21:16 2023 GMT
            Not After : Apr  9 13:26:16 2024 GMT
        Subject: CN=65B66A4CA8D1C022AC5C5353A4E45E79C10E49E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:e2:01:19:70:26:f1:3c:23:a0:7c:47:38:
                    10:ed:5e:1d:0d:b8:81:3a:27:73:8f:41:0b:87:c7:
                    1d:94:ef:c8:e9:47:d1:1e:b4:d5:7b:a3:ce:4e:bf:
                    b1:95:be:73:58:a2:ab:2a:b4:61:cd:85:cb:55:e3:
                    ae:3f:da:c0:a6:7c:a9:81:55:d7:fe:aa:54:2c:68:
                    b4:3a:10:01:21:af:b4:4d:20:69:3c:06:b0:54:21:
                    07:dc:58:c5:4e:71:7a:7a:8a:f4:3d:1f:5a:f5:9e:
                    d2:12:12:5b:05:10:fa:4a:f4:d4:4b:cf:c0:bb:03:
                    77:58:0d:0f:91:9c:34:19:0d:d7:71:29:43:1d:78:
                    7b:87:67:3c:de:00:3a:86:01:7e:3f:e8:46:05:e0:
                    13:69:8a:47:1f:53:35:fd:4f:c5:2e:3b:d3:5d:98:
                    0a:30:c6:2b:30:7f:cd:d2:17:44:97:5d:62:51:cd:
                    15:ff:db:90:b9:39:d2:7c:0c:9d:7b:30:ea:10:8d:
                    79:e4:71:97:e3:64:bd:80:e9:7b:30:1c:c8:2a:66:
                    bb:b1:e5:da:06:06:19:95:0f:07:44:8f:40:fd:b6:
                    30:89:33:cd:8f:69:ff:05:23:15:c8:e5:16:7c:e2:
                    50:0c:8d:82:96:c3:92:3e:dd:9f:a7:83:f5:5f:11:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B6:6A:4C:A8:D1:C0:22:AC:5C:53:53:A4:E4:5E:79:C1:0E:49:E1
            X509v3 Authority Key Identifier:
                keyid:83:34:E7:8E:CC:B2:CE:B0:77:4D:54:C5:E6:1F:D4:F8:CC:1A:93:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33362d3336203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:89:03:48:57:0e:81:83:2d:26:3e:43:83:2f:70:57:0a:6c:
         c3:5c:50:ba:b9:b3:d2:15:5e:97:62:e3:61:47:20:ba:e9:b4:
         d8:7f:2f:70:52:5f:fa:cc:0a:57:bf:f4:22:3e:89:91:f4:d6:
         d0:65:49:c8:7a:b4:49:eb:dd:ab:d4:58:d8:88:ac:fa:61:3d:
         48:5e:a7:d3:31:c8:60:09:b8:a8:b0:7c:95:79:6e:bc:45:fd:
         8d:5e:af:9e:6a:ea:6a:54:79:72:b9:2f:fc:98:fe:6b:a4:dd:
         85:7e:91:4e:c6:30:5e:89:c8:6a:ad:6c:23:a0:f5:11:b1:a0:
         72:58:30:45:3a:d9:7c:23:83:b9:d0:6e:4e:ed:f9:74:fb:55:
         0d:28:5a:bc:04:f6:83:c1:40:f8:49:74:90:ff:91:15:34:fe:
         99:b8:66:ec:d4:ce:03:e5:56:19:45:c7:66:23:b5:ce:3f:a3:
         41:2c:9b:bb:13:1c:cf:13:4e:97:ed:e4:6d:b6:8b:b9:59:f0:
         6c:52:61:ff:95:05:18:c9:ed:18:87:84:d9:d0:ef:f7:1a:ea:
         6c:99:0b:9d:6e:07:ec:54:c8:0b:5e:45:58:a5:95:62:76:b5:
         d1:af:4d:c9:7a:ed:2c:3d:e5:b6:55:64:f6:d3:3a:51:39:57:
         0d:e6:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org