Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a653030303a3a2f33362d3336203d3e20323731333537.roa
File:                     323830343a376133633a653030303a3a2f33362d3336203d3e20323731333537.roa (raw, json)
Hash identifier:          zIWq0LXDgwVnM0IIIbjFyGiCSf9CvaKfmGfY72paN8I=
Subject key identifier:   67:5B:08:C0:A3:AD:CF:C8:D2:4E:85:43:F9:1A:61:F9:FC:C0:C9:01
Certificate issuer:       /CN=8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388
Certificate serial:       18F0CDC5ED8C85A8BE79F7D711388B3897E06B17
Authority key identifier: 83:34:E7:8E:CC:B2:CE:B0:77:4D:54:C5:E6:1F:D4:F8:CC:1A:93:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a653030303a3a2f33362d3336203d3e20323731333537.roa
Signing time:             Tue 11 Apr 2023 13:26:29 +0000
ROA not before:           Tue 11 Apr 2023 13:21:29 +0000
ROA not after:            Tue 09 Apr 2024 13:26:29 +0000
asID:                     271357
IP address blocks:        2804:7a3c:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f0:cd:c5:ed:8c:85:a8:be:79:f7:d7:11:38:8b:38:97:e0:6b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388
        Validity
            Not Before: Apr 11 13:21:29 2023 GMT
            Not After : Apr  9 13:26:29 2024 GMT
        Subject: CN=675B08C0A3ADCFC8D24E8543F91A61F9FCC0C901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:7d:d6:52:6c:1b:74:d3:9c:6f:0e:97:89:
                    04:0e:89:3c:09:f8:83:af:6a:ef:bc:84:3d:1a:16:
                    81:7e:2e:27:03:ae:68:7b:06:cb:d7:c5:6f:fa:c6:
                    54:6f:fd:64:d4:ed:c5:f1:18:f9:be:4d:1e:83:bc:
                    8d:6b:cd:d1:1d:07:97:a0:e9:c9:30:3c:8b:35:93:
                    a6:45:da:6a:f4:14:d8:2f:0e:99:71:a7:83:fe:d0:
                    9a:ff:4a:e9:b1:9e:2b:00:a7:35:68:bb:b2:14:19:
                    44:36:60:7f:10:5f:e9:fb:c9:d2:94:38:d2:92:bc:
                    0f:c5:66:7c:7d:15:e4:10:7b:6e:92:a0:53:66:5b:
                    22:17:44:24:84:1e:61:5f:11:b1:00:06:68:16:bd:
                    d4:4d:b7:df:27:31:30:92:46:ae:b1:b9:c2:a8:b1:
                    e4:80:73:b7:ef:79:51:c9:27:c8:4d:6b:64:7d:33:
                    28:e4:4c:eb:0a:c6:ae:09:b4:03:75:64:ef:84:5b:
                    c9:94:57:c8:b1:2a:c7:35:f2:be:4e:9c:90:27:22:
                    2e:da:35:2f:ec:f9:b5:7e:c4:8a:f3:3e:51:6c:cf:
                    3d:cc:fc:e7:2c:05:51:ba:f0:79:62:1d:12:66:74:
                    86:bf:a1:99:38:77:4f:d3:6b:9a:39:e6:40:db:c1:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:08:C0:A3:AD:CF:C8:D2:4E:85:43:F9:1A:61:F9:FC:C0:C9:01
            X509v3 Authority Key Identifier:
                keyid:83:34:E7:8E:CC:B2:CE:B0:77:4D:54:C5:E6:1F:D4:F8:CC:1A:93:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a653030303a3a2f33362d3336203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a3c:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:d1:24:1c:28:53:6a:ca:5f:6f:3f:3a:8e:9c:b8:8a:30:
         a7:92:3f:8f:37:af:4b:3f:97:ed:15:db:b1:a1:7b:24:a5:69:
         b1:50:71:23:66:ce:be:38:63:3d:5c:97:cf:9d:cc:bf:86:f0:
         fb:bb:ba:d6:8b:d5:a4:6b:67:0b:06:db:0e:87:e2:79:44:65:
         30:ae:be:f1:6d:e2:4f:5d:58:bc:6d:e9:d3:f7:2b:4f:6f:96:
         6d:32:a5:20:f4:22:3b:ea:17:e4:da:2a:65:43:c8:31:29:4f:
         53:42:1e:4d:1d:8c:aa:97:3d:4b:97:94:e8:f5:ae:bc:f2:ee:
         94:7f:10:fc:c2:44:32:77:87:d8:4d:74:1f:6b:d5:94:9e:db:
         af:58:97:e3:df:a4:22:cd:12:ab:37:d2:c1:db:42:a9:e7:83:
         73:88:f4:15:bc:5b:21:7c:46:d7:c5:b0:06:62:0c:4d:3b:97:
         dd:af:6d:8b:7b:90:7d:b9:94:91:11:25:38:51:10:d8:56:c0:
         ff:db:e7:c4:79:fa:49:c4:03:65:38:42:57:bf:01:a9:80:79:
         1d:74:89:95:4b:cc:47:27:77:68:34:df:8a:4e:fd:91:13:b4:
         c8:4f:b0:3b:74:f5:3c:df:30:04:b2:e5:64:fe:da:3e:5f:4d:
         33:2f:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org