Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a323030303a3a2f33362d3336203d3e20323732363134.roa
File:                     323830343a383630343a323030303a3a2f33362d3336203d3e20323732363134.roa (raw, json)
Hash identifier:          lQztL9iDqSJk8YnZE6oCMahdapuFuTL/lVxEXpuEcUY=
Subject key identifier:   A5:6E:97:D8:4B:AC:1C:C8:2D:EC:DD:16:4C:25:F9:07:F0:35:12:91
Certificate issuer:       /CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Certificate serial:       76CD3496EC7D84E79DA12EB6218AB55837B912
Authority key identifier: 35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a323030303a3a2f33362d3336203d3e20323732363134.roa
Signing time:             Tue 16 May 2023 11:51:07 +0000
ROA not before:           Tue 16 May 2023 11:46:07 +0000
ROA not after:            Tue 14 May 2024 11:51:07 +0000
asID:                     272614
IP address blocks:        2804:8604:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cd:34:96:ec:7d:84:e7:9d:a1:2e:b6:21:8a:b5:58:37:b9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3508ABC74EC71F9482F4469C06D817E172192BCC
        Validity
            Not Before: May 16 11:46:07 2023 GMT
            Not After : May 14 11:51:07 2024 GMT
        Subject: CN=A56E97D84BAC1CC82DECDD164C25F907F0351291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:e0:f0:0d:1d:40:9b:db:03:ce:8a:47:f0:
                    35:76:96:eb:6e:4f:56:52:dc:9d:37:04:c0:a2:50:
                    79:54:ba:68:ec:77:3f:7b:ec:ad:27:71:66:ac:98:
                    1d:54:09:cc:f4:f8:db:8c:a0:a0:65:cb:02:9a:46:
                    b1:c2:ce:25:64:ad:47:4e:f2:b8:60:60:32:30:d6:
                    1f:e6:d5:73:1f:22:85:cf:fc:09:a8:58:6e:71:c3:
                    38:5e:15:0b:13:74:e2:5c:28:b0:52:ff:7f:98:39:
                    cd:e9:79:5f:09:d3:9e:d2:3f:f1:b7:77:5e:b5:ce:
                    73:7e:76:e5:cc:3b:12:72:e9:fe:b7:8c:24:33:7f:
                    c5:3a:48:51:b2:1c:c8:a7:47:f0:12:7a:19:7f:d5:
                    fe:8a:42:b5:7f:20:fd:42:b6:f7:20:8b:3a:b9:1e:
                    75:eb:f5:72:06:75:a7:72:6b:9b:78:5d:43:bf:9a:
                    61:ea:9e:a3:50:6a:c3:3e:0b:7d:5d:40:09:b9:d0:
                    99:98:4a:ca:0f:c0:10:a4:2d:7c:cf:b5:9d:82:7f:
                    56:6c:af:f1:de:99:09:97:07:96:f6:7e:af:8e:bb:
                    2a:e3:07:f8:de:f5:f9:ea:8a:f0:6a:27:c0:bd:89:
                    8a:21:91:1b:da:dd:98:ae:6b:e3:5e:5e:e1:a6:2e:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:97:D8:4B:AC:1C:C8:2D:EC:DD:16:4C:25:F9:07:F0:35:12:91
            X509v3 Authority Key Identifier:
                keyid:35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a323030303a3a2f33362d3336203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:50:d3:d7:3a:10:80:e3:07:a7:b1:23:26:59:6c:bb:04:3b:
         4c:2c:0c:68:e4:1c:8a:e9:3d:2f:5b:30:8a:cd:38:e0:72:48:
         8f:cb:4f:ec:00:74:44:41:61:6d:32:da:89:b0:dd:fa:6d:fe:
         55:b9:82:5d:3e:e0:92:76:c6:5f:9e:77:78:32:5f:66:72:aa:
         27:8f:fe:73:2f:06:cc:f4:ca:5e:59:15:1a:a6:44:65:5c:07:
         6b:8f:fb:c0:af:9f:0c:c9:2a:ec:2b:77:7d:7d:d8:0d:d2:aa:
         70:81:d1:29:b3:18:28:b4:5a:70:59:05:b7:fc:f5:39:c9:ac:
         a7:a1:7a:d4:5b:55:23:42:a8:6d:27:3c:c8:f3:7f:f8:cb:70:
         1f:eb:da:19:43:0b:b7:2c:38:c9:88:1f:74:7b:7c:2b:23:2a:
         33:4f:f8:7c:2c:7a:15:79:cf:ed:1c:a7:e0:e6:c6:3a:68:c2:
         cc:c2:ed:cb:82:69:52:a1:cc:87:ab:b6:bf:09:4e:e6:9f:bf:
         db:5e:34:61:53:a6:5e:52:94:8f:e5:31:65:ef:f1:8c:2d:24:
         b8:11:1d:12:ea:4c:20:a6:e9:12:1b:de:9f:5e:69:89:8e:40:
         07:1d:9a:f8:47:01:a7:a2:23:5b:85:20:cd:28:37:9b:82:2d:
         19:da:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org