Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/323830343a326435303a383030303a3a2f33332d3333203d3e20323635323734.roa
File:                     323830343a326435303a383030303a3a2f33332d3333203d3e20323635323734.roa (raw, json)
Hash identifier:          E9yXjmcFSzKGk+vKo0nd33+SjowryUCqxHN0EiXvQPc=
Subject key identifier:   B1:5A:1E:AC:30:EA:35:A8:ED:C3:DF:2B:20:6A:8A:A4:16:A6:12:E6
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       4449CAA947495AA9AD9449DB7FFB2AD1D0CA83AD
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/323830343a326435303a383030303a3a2f33332d3333203d3e20323635323734.roa
Signing time:             Mon 03 Apr 2023 17:36:26 +0000
ROA not before:           Mon 03 Apr 2023 17:31:26 +0000
ROA not after:            Mon 01 Apr 2024 17:36:26 +0000
asID:                     265274
IP address blocks:        2804:2d50:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:49:ca:a9:47:49:5a:a9:ad:94:49:db:7f:fb:2a:d1:d0:ca:83:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Apr  3 17:31:26 2023 GMT
            Not After : Apr  1 17:36:26 2024 GMT
        Subject: CN=B15A1EAC30EA35A8EDC3DF2B206A8AA416A612E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:2d:22:ce:85:d9:0d:c6:1b:d6:38:42:e5:
                    25:68:f1:32:f1:44:4f:d0:60:a3:ae:f9:3e:61:c0:
                    b9:a1:66:df:94:1b:a7:df:3b:97:1b:5d:f6:1e:63:
                    1f:51:cb:25:5b:88:63:d8:14:d5:ef:94:d2:fb:bb:
                    21:b0:23:e5:84:74:55:b0:e9:7a:3b:33:b0:33:19:
                    23:1d:ff:d7:a1:5d:81:74:78:8b:de:c6:69:b3:f7:
                    33:66:16:6a:d8:fb:4a:e4:54:ce:4c:d2:6c:77:32:
                    fa:35:e9:6f:fa:15:5f:3f:e1:9d:19:28:39:4c:ef:
                    8e:fa:4f:a7:1b:73:d4:c7:1f:1c:3b:cc:5c:55:3c:
                    d4:8f:aa:3b:33:0a:99:d1:ac:8e:25:a3:5b:17:df:
                    1d:19:6c:31:74:3f:c9:d8:86:e8:3e:e2:05:cf:95:
                    bc:6e:a3:4f:7e:a7:a7:74:78:54:bf:6e:a1:e2:04:
                    ce:fa:cc:1b:20:51:45:00:f0:c4:f4:06:87:db:70:
                    85:1c:ef:d3:ef:7e:0b:c2:be:67:e4:a1:55:3a:5e:
                    08:75:d1:2d:c6:16:0b:4f:90:f6:81:cb:57:f7:7f:
                    25:fa:c3:30:08:bd:6f:90:35:ea:c8:73:9c:34:ea:
                    5d:fd:4b:0f:d6:fb:08:9f:8c:5c:fc:b4:4c:af:1a:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:1E:AC:30:EA:35:A8:ED:C3:DF:2B:20:6A:8A:A4:16:A6:12:E6
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/323830343a326435303a383030303a3a2f33332d3333203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:48:3c:b2:c9:99:ae:a6:17:07:fc:36:37:89:62:11:89:
         93:6c:7c:75:b2:86:63:29:89:e1:ae:03:43:77:d7:02:19:6b:
         9b:19:71:4a:97:0d:06:23:d5:53:d2:52:05:ba:ef:da:e8:fc:
         e2:cf:13:00:c3:10:c0:c6:64:93:de:6f:ce:03:7e:34:af:5f:
         cc:92:06:5d:08:d2:d2:69:5b:c7:ff:11:94:2d:08:b7:76:20:
         c2:b0:12:76:e7:dc:54:42:64:2b:1e:2a:69:b8:6a:1c:f8:e1:
         10:2b:c0:e5:cc:bf:09:15:f2:1c:0b:78:69:78:77:08:b7:31:
         31:ab:82:e8:85:c4:47:0e:7d:fb:41:ad:22:1a:1f:c4:e6:34:
         8e:3e:9e:e8:e6:0b:9c:24:7f:35:7c:ba:b3:7b:09:c9:95:92:
         d8:92:10:ec:70:41:e8:3e:0e:e6:77:36:77:9f:34:b1:d1:5b:
         89:ca:66:8d:12:9c:77:b4:1c:ab:fc:8c:8f:0a:ea:62:f0:d4:
         5f:e6:ec:d1:74:6d:bb:41:fd:32:0c:6c:4d:ae:5b:45:de:53:
         94:26:bc:9d:07:77:6e:67:92:93:a9:fb:bd:cb:a0:50:7f:33:
         03:8d:f1:1e:60:bd:fd:f2:83:d7:b4:30:2b:ab:a3:2b:2f:ab:
         4e:70:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org