Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a623030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a623030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          E+LjTwnN1wXNQElFsPp0nDeXVNqms7Ku9nqw8zLxjrw=
Subject key identifier:   4F:A1:BD:B8:FF:4D:96:1D:E5:0A:63:3D:C8:6F:1C:BE:44:C6:32:EE
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       38FBC1D5CAAC09CFAD811095B5C98453C33F5CFC
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a623030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:29:14 +0000
ROA not before:           Fri 11 Feb 2022 19:24:14 +0000
ROA not after:            Fri 10 Feb 2023 19:29:14 +0000
asID:                     262798
IP address blocks:        2804:240:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:c1:d5:ca:ac:09:cf:ad:81:10:95:b5:c9:84:53:c3:3f:5c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:24:14 2022 GMT
            Not After : Feb 10 19:29:14 2023 GMT
        Subject: CN=4FA1BDB8FF4D961DE50A633DC86F1CBE44C632EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:ac:27:3c:e3:5d:37:0f:7b:bd:ce:db:af:
                    36:9f:be:b9:56:44:8b:c4:e2:f0:26:0e:2d:0d:d0:
                    0c:29:87:4c:e1:e5:7e:12:30:d2:29:bf:03:ff:8e:
                    d3:5f:6f:a0:f5:c6:40:e6:df:1e:b4:41:e6:0b:dc:
                    a2:ac:d7:2b:5c:ce:d8:b1:b0:29:b7:f7:9a:71:90:
                    06:6b:09:e8:51:f4:35:65:22:8f:37:e9:d4:01:39:
                    df:92:7d:08:a6:51:21:1c:68:39:45:4a:a2:03:3e:
                    49:05:7e:96:31:10:80:56:22:bc:63:69:9b:6e:c9:
                    1d:1b:7f:12:1a:47:b6:2e:9a:80:0b:62:9c:05:51:
                    ac:ae:72:1f:bd:e4:19:ab:f9:da:a8:cd:5b:88:83:
                    d8:b5:76:27:6d:13:2a:4e:15:4f:0a:f6:db:fc:0f:
                    35:1f:2e:60:e6:91:1e:68:93:53:85:ec:5c:a0:c4:
                    03:4d:ca:4c:09:ae:06:5c:de:da:1e:e0:da:72:88:
                    50:de:4d:8a:fe:37:c2:cc:6d:98:66:d5:da:54:76:
                    a0:55:5d:a7:6c:5b:12:89:5b:0c:53:b4:8c:c4:ad:
                    c7:34:be:72:69:4b:4d:7b:d7:cc:e0:39:d3:0b:cb:
                    26:c6:55:0b:07:41:8e:03:85:f0:52:76:49:40:5d:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:BD:B8:FF:4D:96:1D:E5:0A:63:3D:C8:6F:1C:BE:44:C6:32:EE
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a623030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:c6:f2:a0:b6:07:ad:18:fa:cb:f6:0e:31:0d:6d:46:24:
         9b:0f:78:0b:6a:e0:9f:d9:55:a9:0d:b5:5b:e9:c9:dc:c7:ab:
         55:63:e5:94:a1:8b:5f:44:89:62:a0:0c:4f:b8:17:e9:b8:8b:
         40:f5:25:64:48:14:a5:ee:ea:57:0f:87:4b:b3:e9:bd:27:97:
         b6:62:94:d5:dc:d4:05:4d:af:e2:8f:bb:cf:30:49:c0:ca:40:
         aa:7e:06:7b:db:9b:2b:52:a5:0a:85:b7:b3:50:98:e3:57:a3:
         bb:c2:28:7e:8f:e2:4a:b1:4f:48:85:c4:78:48:ff:48:16:cc:
         dc:e0:1a:d6:06:2c:a6:2d:e8:e3:9c:11:cb:99:85:0f:37:ea:
         ed:83:2d:f7:07:c6:ac:1d:fb:6c:0b:c0:e7:72:78:42:16:06:
         92:66:32:f4:01:d1:31:79:83:8e:d8:e4:1e:01:f8:b5:cc:b3:
         7d:ec:55:5f:27:d2:c7:9b:3b:dc:73:3c:9b:ac:0b:b7:29:1a:
         0e:10:8f:5b:f9:9c:6d:c3:ef:2c:c0:fc:32:cb:f7:65:52:2d:
         42:46:7a:e2:07:c0:92:9a:52:b7:cf:f3:6c:8d:85:ef:37:ce:
         bf:06:6a:68:e6:21:6e:8f:fc:0a:33:e6:69:1f:c5:02:44:1a:
         de:e2:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org