Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          JE18VqRBHhFYyegGWNMnOoyLS8M+myyJmaCKxbjnGy0=
Subject key identifier:   C2:22:15:FB:5E:D9:54:81:D1:B4:36:B0:96:4E:50:36:7B:7A:D2:F1
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       7CC38F2F0FC6CA6698EBC51560A2D50DDB81E7C4
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 16:24:14 +0000
ROA not before:           Tue 12 Dec 2023 16:19:14 +0000
ROA not after:            Tue 10 Dec 2024 16:24:14 +0000
asID:                     61776
IP address blocks:        2804:192c:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:8f:2f:0f:c6:ca:66:98:eb:c5:15:60:a2:d5:0d:db:81:e7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:19:14 2023 GMT
            Not After : Dec 10 16:24:14 2024 GMT
        Subject: CN=C22215FB5ED95481D1B436B0964E50367B7AD2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:df:b0:b4:48:40:0a:4b:68:14:fe:8e:85:
                    5e:35:7e:e2:07:12:7a:5a:2c:25:0a:05:7f:ef:11:
                    6a:08:1b:53:72:85:34:99:9a:18:c2:7f:22:ba:a9:
                    20:a3:6a:17:0a:0a:0f:85:c6:52:a4:42:72:9c:b0:
                    d4:c9:c8:94:0e:f5:e7:74:50:32:a7:5d:c4:06:8d:
                    1a:d0:3c:c5:b6:e0:52:0d:27:ac:d7:5f:5d:b3:90:
                    bb:26:ec:dd:94:fa:17:38:f5:f4:87:a3:69:8d:26:
                    9a:f0:8f:ed:d2:37:35:3e:85:58:8d:2a:20:75:f7:
                    36:98:bd:d3:d5:bb:f3:5f:d2:f7:e1:ce:09:49:6d:
                    0f:ec:cf:86:a2:21:77:18:36:76:1a:0c:71:02:ba:
                    6b:22:c9:c1:40:ce:fe:1b:ef:1b:1c:ed:85:ef:45:
                    58:0d:fc:7e:26:cf:d1:56:b8:e6:e3:0e:30:ea:70:
                    5b:9b:7b:a0:8a:33:a6:12:86:d4:38:b0:6c:da:d0:
                    d8:2a:bf:42:b2:df:09:0d:81:b7:43:a8:81:a9:3d:
                    f8:99:73:d2:5f:a4:bc:2c:3d:81:99:89:a3:66:f3:
                    51:46:d1:24:0b:c6:d2:7b:16:55:10:f6:d2:ef:6e:
                    82:6d:40:86:a4:3d:a5:3d:9b:76:38:32:a7:db:9b:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:22:15:FB:5E:D9:54:81:D1:B4:36:B0:96:4E:50:36:7B:7A:D2:F1
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:13:ca:b4:70:19:82:d8:07:3c:11:04:79:3d:09:cf:e2:af:
         a7:57:03:6f:b9:12:74:36:66:35:8f:53:41:79:00:7c:89:82:
         91:55:30:31:fb:05:0c:61:ce:a0:89:20:22:da:f9:7c:53:60:
         f2:8f:52:ef:ad:f1:43:f1:49:20:f4:c3:ae:5a:a5:e0:77:cf:
         27:fb:4c:9b:b5:ae:c1:31:e1:a5:0e:ac:75:c0:b3:17:91:22:
         36:0c:5c:96:99:73:50:2c:26:cf:de:c3:ef:fd:d9:50:f3:5a:
         c7:b1:d3:ad:b6:70:7d:00:e6:67:fd:80:44:4d:b5:61:9d:44:
         d1:a7:61:8a:00:5f:6b:4c:5c:ec:aa:67:b8:35:50:0e:58:7d:
         7a:5f:ab:64:bf:f6:26:37:77:41:cc:ff:f9:41:60:6b:99:cd:
         91:c8:83:f7:03:9e:38:82:48:9f:fa:d1:f8:da:56:d2:f3:67:
         99:a7:06:7b:b6:de:02:72:fe:fe:b3:ef:35:4d:45:d7:ca:73:
         69:0b:20:85:3f:bb:02:39:f4:aa:c8:fd:b3:70:6f:71:1f:d4:
         b9:f6:4e:1a:33:e6:81:80:f5:59:86:52:b9:c6:21:a0:d3:14:
         31:c1:71:10:0e:5e:a0:4f:40:c2:74:ff:21:1f:13:92:78:8c:
         b2:be:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org