Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33352d3335203d3e20323635393238.roa
File:                     323830343a343030343a3a2f33352d3335203d3e20323635393238.roa (raw, json)
Hash identifier:          y6+/lAnrOl5mvLv6qh/MgiCZRagIwnlY8qdtPjTE8SE=
Subject key identifier:   A3:A8:A5:51:15:6B:3F:60:18:4E:43:21:E6:D8:B9:AE:62:A2:F2:4F
Certificate issuer:       /CN=36F665342472E37B1A265E089E5C8754A433B1A2
Certificate serial:       1ECAD5B1AED9D08DFB06B18AF4443A76E0C67E80
Authority key identifier: 36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33352d3335203d3e20323635393238.roa
Signing time:             Tue 23 Jan 2024 12:23:27 +0000
ROA not before:           Tue 23 Jan 2024 12:18:27 +0000
ROA not after:            Tue 21 Jan 2025 12:23:27 +0000
asID:                     265928
IP address blocks:        2804:4004::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ca:d5:b1:ae:d9:d0:8d:fb:06:b1:8a:f4:44:3a:76:e0:c6:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36F665342472E37B1A265E089E5C8754A433B1A2
        Validity
            Not Before: Jan 23 12:18:27 2024 GMT
            Not After : Jan 21 12:23:27 2025 GMT
        Subject: CN=A3A8A551156B3F60184E4321E6D8B9AE62A2F24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:e7:68:67:02:4e:84:15:41:d2:aa:0e:ca:
                    bb:b8:a6:a2:59:97:c8:2a:3b:e9:1c:a0:9b:96:97:
                    e4:a8:43:21:58:19:e4:c5:4c:14:aa:92:a5:f9:8d:
                    ba:e0:4c:ef:fb:11:e5:3e:94:15:96:83:fa:34:ab:
                    9c:ba:8a:31:f3:75:76:2f:72:ef:2c:1d:f3:36:b1:
                    9f:0c:8b:c5:72:d6:47:5e:63:7a:cc:5a:af:b0:9a:
                    ab:93:69:90:dd:34:30:ab:5a:d8:8f:d0:b6:a3:2b:
                    f4:db:19:8f:e8:c5:7c:0c:25:bc:2a:6e:64:80:f5:
                    2c:17:11:38:44:ad:83:f4:67:ad:1e:5f:90:fe:b0:
                    ae:82:0a:a6:8c:95:44:a4:c0:23:51:78:f7:b1:16:
                    90:71:07:13:19:cd:af:f0:2e:11:b0:88:af:a3:f4:
                    55:8f:ff:66:92:71:cc:4c:16:7d:7c:d6:53:78:1b:
                    cf:6c:25:ab:d2:41:c7:67:5b:cd:b2:65:b4:d2:41:
                    b0:fd:80:85:2e:76:31:77:8b:c2:cd:5f:a2:d5:3a:
                    32:e5:59:e9:f2:2a:9d:4f:9e:62:b1:49:e2:63:25:
                    fb:b7:a9:88:61:96:fa:64:76:f4:c1:fc:8a:36:98:
                    ca:43:19:61:b0:fb:5f:cb:1c:18:9a:74:12:ef:fb:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A8:A5:51:15:6B:3F:60:18:4E:43:21:E6:D8:B9:AE:62:A2:F2:4F
            X509v3 Authority Key Identifier:
                keyid:36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/36F665342472E37B1A265E089E5C8754A433B1A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33352d3335203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4004::/35

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:48:aa:03:37:d5:ef:d0:4d:8b:fa:be:b7:11:74:e5:e6:
         5c:f7:98:92:c7:ea:52:0f:82:bd:78:bb:8f:71:1a:c3:f5:88:
         d4:02:4e:1b:e4:ac:bf:b1:c2:af:e4:f7:4b:41:7d:69:77:be:
         5c:9e:30:9d:fa:d7:59:61:06:e2:26:d4:e9:e1:e0:1c:d9:ad:
         00:c9:b8:99:a9:f5:ca:48:df:84:b2:77:99:0a:76:38:fc:c6:
         47:a7:f0:ab:2d:73:87:ea:d2:d5:11:b4:8c:32:b5:33:4c:8b:
         c2:ba:01:e3:61:d9:bb:e3:5d:ba:d5:2b:79:e3:46:a2:cb:ea:
         78:14:56:29:eb:73:62:03:1d:45:97:e3:78:3a:97:54:33:05:
         89:a4:bf:f2:7e:53:f6:85:5c:95:97:21:c6:43:7e:7d:de:87:
         24:04:c1:21:fc:30:98:be:02:be:fe:28:3a:6e:44:8d:2c:b4:
         11:75:d3:40:20:b8:ea:12:2f:a3:f1:26:b4:8b:1e:fa:19:21:
         7a:49:d3:82:ef:ca:34:d8:b1:34:6e:3f:66:3f:16:f5:60:f1:
         06:26:a6:14:99:57:02:44:af:51:de:b2:bd:82:88:35:42:b7:
         2b:05:13:47:52:18:be:0e:75:66:ff:03:c3:ee:da:7b:bc:1d:
         ff:12:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org