Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/323830343a6538303a3a2f33322d3438203d3e20323632363736.roa
File:                     323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (raw, json)
Hash identifier:          YsnDad9jjTveyfGC/v5uuKZmwCdpm6Uv3iFXCcbzOgY=
Subject key identifier:   CC:2E:31:FB:CF:05:2F:86:7D:12:3F:90:41:F6:FB:04:49:95:F3:D8
Certificate issuer:       /CN=2B36A526D06D86847A393BEA10A2E899D81E57EE
Certificate serial:       5A6B8ADA7E04866736C9B3FAA79A4AB4E8057D62
Authority key identifier: 2B:36:A5:26:D0:6D:86:84:7A:39:3B:EA:10:A2:E8:99:D8:1E:57:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B36A526D06D86847A393BEA10A2E899D81E57EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/323830343a6538303a3a2f33322d3438203d3e20323632363736.roa
Signing time:             Tue 10 Oct 2023 12:24:06 +0000
ROA not before:           Tue 10 Oct 2023 12:19:06 +0000
ROA not after:            Tue 08 Oct 2024 12:24:06 +0000
asID:                     262676
IP address blocks:        2804:e80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6b:8a:da:7e:04:86:67:36:c9:b3:fa:a7:9a:4a:b4:e8:05:7d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36A526D06D86847A393BEA10A2E899D81E57EE
        Validity
            Not Before: Oct 10 12:19:06 2023 GMT
            Not After : Oct  8 12:24:06 2024 GMT
        Subject: CN=CC2E31FBCF052F867D123F9041F6FB044995F3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:33:dc:b8:f7:a6:89:a5:be:32:72:34:58:
                    54:79:59:a2:fa:14:0d:45:ea:62:d0:87:fa:49:5c:
                    4d:cc:f7:d0:bc:94:1a:f0:11:db:65:e0:39:aa:1a:
                    61:0b:6e:c0:6a:e0:43:f2:d7:0e:fc:91:d1:9e:9d:
                    bc:d8:68:37:32:b7:f2:80:64:21:ac:aa:6a:e8:5f:
                    ab:d5:6f:71:2f:9f:96:06:12:67:b5:21:f2:3c:79:
                    57:c9:60:25:34:ff:75:21:56:02:95:49:54:e8:f6:
                    63:a8:ee:a1:58:33:ce:bd:52:d5:12:80:35:2d:8c:
                    16:dc:01:29:8b:b4:bb:67:76:7b:79:a6:11:f2:16:
                    8a:d5:ec:8f:51:2d:2b:a7:d1:16:53:c6:e4:99:ec:
                    a1:26:4d:10:ef:14:1e:cd:5c:17:95:e7:3f:cb:6d:
                    ee:e9:62:39:58:91:39:f2:f5:15:8d:98:c8:6a:79:
                    4e:38:83:89:99:72:52:88:a3:19:c3:cd:de:09:9a:
                    0d:3d:00:6c:33:65:30:27:03:29:9a:f9:9e:4d:89:
                    fa:4c:d3:70:65:51:66:a7:25:52:e8:75:d7:09:92:
                    f1:a2:e7:b9:5f:38:6c:4e:08:99:3d:59:fe:7e:0f:
                    07:c9:28:49:0b:fc:5a:e9:1b:2e:3d:67:15:67:66:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2E:31:FB:CF:05:2F:86:7D:12:3F:90:41:F6:FB:04:49:95:F3:D8
            X509v3 Authority Key Identifier:
                keyid:2B:36:A5:26:D0:6D:86:84:7A:39:3B:EA:10:A2:E8:99:D8:1E:57:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/2B36A526D06D86847A393BEA10A2E899D81E57EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B36A526D06D86847A393BEA10A2E899D81E57EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/323830343a6538303a3a2f33322d3438203d3e20323632363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:9d:b0:4e:fd:d7:b6:22:3a:18:b6:e5:3f:d4:b4:88:9b:
         2e:7f:82:ab:4b:bc:46:5e:99:d6:f7:f8:43:8a:2e:5e:d6:20:
         3c:50:e1:9e:b3:fb:60:42:44:64:a3:76:73:f0:7d:3e:e8:42:
         e7:5b:f6:c2:04:0e:89:fd:65:74:c3:ae:25:a1:16:b5:19:c7:
         e7:39:bc:4c:2c:fb:ee:d0:81:6e:77:47:37:24:f6:e0:61:37:
         7e:e2:3c:83:bc:1b:10:f8:c4:60:83:8d:22:8d:4e:6c:bd:af:
         8e:cb:c6:e0:9b:18:c6:55:73:4b:c3:75:9d:c9:26:47:0b:f9:
         e5:9a:14:6e:5a:01:f1:28:a6:ce:ac:b7:4a:44:3a:18:a0:db:
         a9:ef:5c:6f:07:a4:73:55:ac:e9:e9:2a:68:c9:51:90:e8:3d:
         24:3f:93:3c:0c:28:15:27:da:01:51:b9:2d:11:d2:e7:64:93:
         de:76:9b:f4:30:b8:c2:70:e7:e2:e9:de:33:b9:a3:2a:15:37:
         eb:93:dd:b0:c7:b1:0b:b1:51:7d:99:0f:3a:89:7d:b4:05:72:
         0c:14:72:67:6f:91:1b:8f:55:1c:1f:23:e3:76:64:02:c7:81:
         9d:2b:45:bc:e4:2a:35:e6:10:53:24:51:ec:58:d9:62:01:f3:
         51:1f:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org