Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
File:                     323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (raw, json)
Hash identifier:          uwH8V1xoEyFbqrltb3xMiD57bo2lQ+KzGnQWs7yG+GM=
Subject key identifier:   EC:37:57:C1:70:E3:F5:55:B6:88:CE:33:C2:5D:F5:FE:4E:27:B8:8B
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       615C3D5C6F5C82184D554F44EFF01AC4FECD44A8
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
Signing time:             Mon 19 Feb 2024 14:25:15 +0000
ROA not before:           Mon 19 Feb 2024 14:20:15 +0000
ROA not after:            Mon 17 Feb 2025 14:25:15 +0000
asID:                     266476
IP address blocks:        2804:386c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5c:3d:5c:6f:5c:82:18:4d:55:4f:44:ef:f0:1a:c4:fe:cd:44:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: Feb 19 14:20:15 2024 GMT
            Not After : Feb 17 14:25:15 2025 GMT
        Subject: CN=EC3757C170E3F555B688CE33C25DF5FE4E27B88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:be:0d:7b:9d:7e:41:cf:ec:2b:55:70:fb:
                    3d:6b:11:43:25:72:56:8a:ea:d1:d5:56:cc:cd:4a:
                    6f:82:35:0f:d8:40:36:b3:45:76:23:e2:d9:e4:cd:
                    b8:72:a9:7a:7e:9b:cb:c1:09:e2:fe:f4:00:b5:75:
                    83:39:72:eb:41:82:fe:b8:40:f2:de:50:2f:44:d1:
                    22:09:79:d1:35:9c:35:cf:30:42:d4:08:73:88:a5:
                    1c:84:18:00:fe:e7:c3:c7:e9:d0:7d:c4:90:74:b0:
                    25:9e:25:81:99:9e:ec:06:40:3d:b1:40:59:f0:30:
                    98:75:fe:27:1a:2a:a6:ff:e7:0a:64:9a:7c:c8:68:
                    d8:90:ed:87:ae:8d:db:33:7f:2c:88:91:22:de:d9:
                    54:9f:d9:de:c6:ef:fc:02:77:97:53:dd:8c:f1:a3:
                    8b:fd:60:96:38:8e:54:21:4f:c5:35:73:6c:eb:67:
                    19:d6:35:36:94:17:83:0e:65:27:99:1c:4a:ea:1c:
                    a6:21:ba:ea:9a:96:db:b7:28:df:5b:9c:d8:b9:74:
                    61:65:a3:6e:85:70:1e:29:c7:ba:65:13:14:30:2a:
                    3f:92:bd:23:e4:ba:30:d9:a6:d6:38:76:5e:10:1e:
                    51:65:28:8c:01:c3:0b:c6:0c:5c:27:05:7b:97:3d:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:37:57:C1:70:E3:F5:55:B6:88:CE:33:C2:5D:F5:FE:4E:27:B8:8B
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:386c::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:dc:d4:44:54:d5:44:e6:07:37:3a:fc:ca:3c:eb:c4:bb:
         0a:84:80:69:ae:0e:fb:c5:8a:50:2a:12:35:f9:77:be:e7:d7:
         3f:f1:24:24:63:78:4b:dd:ab:a4:d4:97:5a:d3:37:87:96:10:
         60:d6:f7:dd:1d:ca:09:3b:08:7f:2e:cc:5c:dc:ca:72:e6:90:
         fd:01:c1:48:1f:62:16:d3:f3:7f:de:ed:43:a3:9e:7d:de:f6:
         08:a1:18:a7:c0:e5:0b:98:8d:f8:ce:e3:6d:aa:bf:2f:68:b4:
         87:12:0a:67:4d:29:4a:43:57:c7:a5:56:49:b7:81:12:b4:1b:
         ff:e2:52:6b:8a:95:4c:b4:96:25:19:a4:d8:a8:65:9b:d8:d0:
         c8:85:46:97:eb:cd:c9:b6:4e:bd:ca:fb:c9:f7:b1:c9:53:ec:
         7e:50:a3:bd:e2:71:67:52:50:d6:54:60:49:0e:91:c2:6f:7e:
         7c:fc:80:aa:60:22:0a:9a:55:21:de:25:4a:ae:dd:25:86:f2:
         d1:23:51:13:b1:29:55:c2:1b:dd:2c:a2:91:5d:e1:ef:6c:1e:
         49:0f:fb:bc:41:65:c4:a4:c6:b5:f9:cb:05:24:57:d7:f6:80:
         a2:9e:3c:60:99:fb:54:06:ce:25:b1:12:e0:ba:29:fb:20:11:
         4d:84:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org