Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/323830343a353563633a383030303a3a2f33342d3334203d3e20323637393537.roa
File:                     323830343a353563633a383030303a3a2f33342d3334203d3e20323637393537.roa (raw, json)
Hash identifier:          7ZlHvYL9bAlMP7HyJfUHhZQqnAg8zqVDI3S70NvkTEk=
Subject key identifier:   8C:CF:60:78:88:C9:61:45:32:E1:2D:C5:86:8E:F4:2E:18:3A:C1:4D
Certificate issuer:       /CN=436AC15E57989C85E66C586C30E7C23263E417D9
Certificate serial:       5C97709CB68B7435AEBBBFE27495572FBD28F1
Authority key identifier: 43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/323830343a353563633a383030303a3a2f33342d3334203d3e20323637393537.roa
Signing time:             Fri 02 Jun 2023 19:26:41 +0000
ROA not before:           Fri 02 Jun 2023 19:21:41 +0000
ROA not after:            Fri 31 May 2024 19:26:41 +0000
asID:                     267957
IP address blocks:        2804:55cc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:97:70:9c:b6:8b:74:35:ae:bb:bf:e2:74:95:57:2f:bd:28:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436AC15E57989C85E66C586C30E7C23263E417D9
        Validity
            Not Before: Jun  2 19:21:41 2023 GMT
            Not After : May 31 19:26:41 2024 GMT
        Subject: CN=8CCF607888C9614532E12DC5868EF42E183AC14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:12:c4:d1:51:33:dd:e5:e1:24:16:57:ec:ea:
                    1e:8d:09:f9:5c:b9:e9:04:75:26:41:e4:61:65:9b:
                    23:fa:95:2b:1e:d9:82:a5:f7:25:45:99:8e:1b:71:
                    47:93:e1:8f:87:29:ee:3f:c6:1a:3e:8e:32:61:62:
                    ae:08:13:f1:9f:5d:3c:35:e9:62:8d:26:de:5a:18:
                    30:5c:12:fc:4d:8a:82:4e:b1:67:fb:d0:a4:5a:95:
                    56:ff:00:2e:a6:4a:f4:f3:9f:37:fb:28:a8:4e:d2:
                    8d:d2:82:fa:bc:08:4f:c7:2b:ea:c7:b1:9d:fa:56:
                    b3:9f:98:15:ef:5e:fc:18:b8:c7:7f:46:e0:82:e0:
                    27:57:a3:f8:56:25:f2:aa:68:23:5f:53:19:4d:6c:
                    45:30:01:b8:52:29:88:3c:31:e0:29:2b:bd:e5:8f:
                    3e:2d:b8:ee:47:2e:3d:bc:2f:08:ac:c3:aa:c7:d8:
                    ff:81:9c:32:78:2c:d2:89:0e:3e:c5:b1:0c:a1:3b:
                    4c:9d:88:a3:1e:c5:68:6b:ba:74:99:96:cb:08:ed:
                    c9:dc:07:82:f9:21:d6:69:fc:8b:db:d1:a3:d3:61:
                    08:e7:5b:cb:d4:f0:9d:a5:c8:3a:b7:54:a7:22:11:
                    3f:ce:27:c1:80:ec:99:cf:d0:f6:0f:33:b8:2d:30:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:60:78:88:C9:61:45:32:E1:2D:C5:86:8E:F4:2E:18:3A:C1:4D
            X509v3 Authority Key Identifier:
                keyid:43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/323830343a353563633a383030303a3a2f33342d3334203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55cc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:8d:11:06:33:47:91:d7:a7:67:3b:8b:46:48:fb:a7:dd:
         25:d5:9e:b6:d6:07:d5:e4:1f:d0:a1:f0:a6:b9:3b:9d:21:82:
         f4:5a:da:00:d5:3a:18:80:b6:c2:35:3d:16:0b:3a:2e:fa:b8:
         2f:a0:92:89:5e:2e:78:4e:fa:11:16:b7:85:2d:e8:79:7b:46:
         7e:40:c9:ff:29:3b:82:89:0d:1e:ec:ae:c6:c3:c3:18:f1:bf:
         66:b2:a7:1f:17:47:44:62:c8:a2:d6:c4:81:81:33:ae:9a:b8:
         aa:03:a2:fd:8e:ee:87:4c:8f:7a:85:dc:83:2b:9b:49:09:a3:
         57:07:fc:70:6e:4a:a5:73:4a:96:44:29:45:ea:5b:22:4b:ce:
         41:82:9c:ea:80:37:a7:9a:5d:de:13:c3:b9:96:ac:76:44:45:
         f7:3c:de:b0:2d:ee:b1:05:63:1d:0e:4e:19:21:bb:45:b3:f2:
         c5:1b:08:20:9a:a2:24:24:be:60:57:0d:87:33:d9:88:2c:3e:
         9d:ab:1d:c4:a8:44:88:bc:01:33:24:e2:69:ee:12:3b:51:1b:
         fb:69:53:0e:4c:d8:d3:73:86:30:9c:55:22:e9:13:fc:69:38:
         30:c6:31:71:24:d0:52:33:ea:e1:ff:33:c3:1c:49:d6:74:c6:
         e0:b9:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org