Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a663030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a663030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          Tl+F6u2cA6JKIoJiaAwE1fezI04o2BNH+hAzrLTvJfo=
Subject key identifier:   5C:16:8B:DF:56:13:89:11:68:F9:81:8F:C6:9A:7D:44:78:99:3D:33
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       2165B7FDD31F5A92A47D4E57D0C09C39BB1758CE
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a663030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:30:24 +0000
ROA not before:           Fri 11 Feb 2022 19:25:24 +0000
ROA not after:            Fri 10 Feb 2023 19:30:24 +0000
asID:                     262798
IP address blocks:        2804:240:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:b7:fd:d3:1f:5a:92:a4:7d:4e:57:d0:c0:9c:39:bb:17:58:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:25:24 2022 GMT
            Not After : Feb 10 19:30:24 2023 GMT
        Subject: CN=5C168BDF5613891168F9818FC69A7D4478993D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:a6:f4:27:69:c9:27:ab:0c:47:3f:72:f9:
                    c5:2e:ed:f6:40:77:6c:b8:e3:f5:28:84:72:d6:a6:
                    bc:e8:e6:c4:5c:3e:89:76:a9:d3:e6:79:19:9a:af:
                    2a:5c:78:e4:4e:1d:c5:39:fa:43:7e:a6:51:00:4b:
                    63:ca:b5:9e:df:19:89:34:32:cf:ea:a1:94:9a:4d:
                    a5:fb:7f:e5:fa:94:51:28:c0:70:00:93:93:ea:03:
                    96:63:6f:0c:c1:41:be:f8:be:39:e8:23:b1:e0:aa:
                    b5:3e:77:06:dd:73:c2:85:1b:9f:bd:ee:1b:1c:8b:
                    fe:a2:6c:92:4b:01:46:9b:40:02:df:a9:e8:0c:1c:
                    80:48:a2:6e:4b:ad:17:b6:70:c2:c7:71:d9:f1:47:
                    a2:74:fb:dd:c8:54:fb:ad:fe:49:99:de:0f:8b:ff:
                    66:26:99:ec:87:20:d8:96:c4:f2:1e:52:b1:08:b6:
                    8d:22:d1:f0:be:11:4b:74:0d:9f:da:ac:8a:f4:7f:
                    73:4b:28:86:65:5a:bb:67:6a:ae:b5:70:fe:11:58:
                    7d:83:3c:c1:04:12:4d:2c:0b:24:62:72:22:32:90:
                    5b:a9:07:e6:47:3c:20:e5:66:55:ac:1d:5a:e5:ab:
                    b8:27:fa:5f:5a:05:42:31:4f:95:46:19:5d:5d:86:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:8B:DF:56:13:89:11:68:F9:81:8F:C6:9A:7D:44:78:99:3D:33
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a663030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bc:31:1b:20:0e:d0:db:45:a4:12:0e:a3:be:52:be:c7:0d:9a:
         3d:ff:54:3c:4f:30:42:7f:7b:2f:9d:09:ac:ce:44:bd:be:35:
         ac:45:15:9b:8e:46:4a:02:74:ca:dc:48:5d:35:2a:8c:f7:55:
         9d:bd:18:39:be:28:bf:33:f1:37:c3:88:8b:d5:57:a2:8b:e6:
         47:5c:07:2a:bd:44:c5:79:1d:17:64:84:8c:21:18:fc:6d:a9:
         b0:d8:31:87:0a:3b:bf:b6:5c:8a:41:c2:a6:41:48:49:db:29:
         6d:2f:58:fa:60:87:3a:14:8b:a0:a3:9f:8b:c7:8f:e8:4a:21:
         3c:24:d5:91:77:2e:0b:58:29:2f:2b:c2:08:fc:f0:9b:3c:8b:
         22:3b:e8:d0:97:36:85:e9:7f:a9:4d:0c:67:3a:3c:82:11:3f:
         e4:0e:4b:16:3b:3b:68:ab:97:2e:a2:9b:22:90:6f:1c:33:fe:
         cd:03:d8:dd:41:4e:7f:52:c1:8f:57:70:98:0d:a0:be:e5:c3:
         ba:da:fb:04:6b:5d:0d:e7:8f:d2:fc:32:9b:21:a4:49:49:ae:
         ee:40:5a:f7:65:3c:42:c0:9f:f6:67:0a:0e:d1:77:24:5b:94:
         70:d1:96:6e:a0:b6:ce:ba:7c:b4:c6:8e:30:2d:a6:96:a8:90:
         7a:6d:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org