Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a3a2f33362d3336203d3e20323636393839.roa
File:                     323830343a343637303a3a2f33362d3336203d3e20323636393839.roa (raw, json)
Hash identifier:          /Y3vJlX8XuVvboXmYrd9SbDWax8dSCUSPT8k9n66cVA=
Subject key identifier:   89:00:8E:FF:7B:AF:43:6C:47:72:8F:EA:64:16:8E:0F:BE:83:D0:53
Certificate issuer:       /CN=11E1368454EE4321A3D47283E551C91FAE044C9F
Certificate serial:       05FAE66878ADA1148624956AB004F5C0BA76DB5F
Authority key identifier: 11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a3a2f33362d3336203d3e20323636393839.roa
Signing time:             Tue 02 May 2023 15:48:15 +0000
ROA not before:           Tue 02 May 2023 15:43:15 +0000
ROA not after:            Tue 30 Apr 2024 15:48:15 +0000
asID:                     266989
IP address blocks:        2804:4670::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fa:e6:68:78:ad:a1:14:86:24:95:6a:b0:04:f5:c0:ba:76:db:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1368454EE4321A3D47283E551C91FAE044C9F
        Validity
            Not Before: May  2 15:43:15 2023 GMT
            Not After : Apr 30 15:48:15 2024 GMT
        Subject: CN=89008EFF7BAF436C47728FEA64168E0FBE83D053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:1f:df:d7:5c:e2:3d:e0:93:fd:b2:ef:ec:
                    80:17:d9:81:9d:72:aa:fd:46:fc:f7:a7:5b:bb:92:
                    40:af:64:a4:a6:54:43:10:6d:f6:13:d0:fa:13:78:
                    cc:a5:05:a0:2a:26:60:01:40:bc:b1:a2:9a:ca:c1:
                    37:f9:71:43:fc:d9:b3:9c:94:d5:60:f1:b5:42:a0:
                    11:5b:c4:2f:90:80:b5:12:de:53:e5:4c:df:1e:46:
                    9f:ca:8d:0d:22:16:20:4d:61:92:3c:e4:43:d1:51:
                    39:35:c7:77:68:09:25:22:d4:27:ac:a6:d9:d1:df:
                    b1:0c:cb:ea:14:17:70:73:4a:b9:90:ac:5b:5d:2b:
                    0f:d2:ec:f8:62:5f:94:9a:0f:03:ec:72:03:49:cb:
                    2a:a6:df:cf:fc:38:92:58:28:6b:77:7f:da:0b:11:
                    81:8f:d0:db:db:b9:03:b9:a8:b3:c5:c2:57:ab:bd:
                    a6:58:5f:b3:91:50:24:41:a1:24:0f:27:4a:29:0d:
                    7a:c0:42:44:c9:89:1e:18:95:8a:d0:46:8e:97:fd:
                    19:25:37:e5:45:21:49:13:0b:54:d8:e7:a4:b0:bb:
                    63:01:50:de:8f:49:f4:4c:a6:7e:41:d6:49:54:fa:
                    9d:51:61:95:25:23:f5:87:63:ea:ee:2e:00:54:7b:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:8E:FF:7B:AF:43:6C:47:72:8F:EA:64:16:8E:0F:BE:83:D0:53
            X509v3 Authority Key Identifier:
                keyid:11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/11E1368454EE4321A3D47283E551C91FAE044C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a3a2f33362d3336203d3e20323636393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4670::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:22:c7:55:70:48:88:e1:9d:38:43:7c:76:48:c7:3f:15:09:
         43:cc:6b:35:28:c3:26:f5:3e:cc:86:a8:cb:8e:08:b5:38:25:
         d8:fc:9d:0c:31:ff:63:91:03:64:9c:0f:db:94:9d:a7:d4:50:
         bf:b1:4a:9d:7d:0e:46:7f:8b:1f:dc:a8:4f:9b:04:5b:de:67:
         41:b9:3d:d6:b6:11:d4:8d:8c:74:95:82:52:b1:cb:3d:e4:91:
         c5:7b:4c:98:54:1a:b2:c3:67:08:78:be:a1:76:f7:22:3f:59:
         a2:34:85:12:a8:ea:4d:e1:7b:a9:8f:4c:d0:72:59:ed:08:5d:
         eb:58:6a:fe:9b:e8:da:93:1c:fc:00:49:6c:ff:05:05:a2:d6:
         c1:54:e4:65:af:fa:75:dc:8e:98:46:5b:d5:7a:c9:d9:a1:fd:
         62:10:d1:1a:d1:85:ef:e5:84:66:0d:96:28:d5:fe:62:e2:d5:
         20:48:f3:93:8a:bc:41:b3:62:ef:74:fc:07:70:90:13:b7:cb:
         40:57:9d:6f:9c:24:c7:56:28:97:25:70:7f:03:10:46:c8:a4:
         9e:82:73:57:da:b0:db:52:88:ec:bb:7d:55:b2:bd:27:09:bf:
         6d:5b:0b:08:a9:f8:88:d5:f0:f7:23:13:d5:37:ac:e2:87:6e:
         bc:97:fd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org