Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33332d3333203d3e20323636333735.roa
File:                     323830343a333664343a383030303a3a2f33332d3333203d3e20323636333735.roa (raw, json)
Hash identifier:          zQCjel4iaHXg7M1xnd6xTUjTkNGcvSOeIT3pNSjaUWc=
Subject key identifier:   61:4B:62:45:D1:D5:1D:26:56:C0:3B:5F:FE:2C:B5:F2:08:F8:04:C0
Certificate issuer:       /CN=EC1EE79463AC0DE0927DAC537E3288C9AA6018F5
Certificate serial:       336632D6BBD9035D406A4F8851693D17258DE490
Authority key identifier: EC:1E:E7:94:63:AC:0D:E0:92:7D:AC:53:7E:32:88:C9:AA:60:18:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33332d3333203d3e20323636333735.roa
Signing time:             Mon 18 Dec 2023 18:41:58 +0000
ROA not before:           Mon 18 Dec 2023 18:36:58 +0000
ROA not after:            Mon 16 Dec 2024 18:41:58 +0000
asID:                     266375
IP address blocks:        2804:36d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:66:32:d6:bb:d9:03:5d:40:6a:4f:88:51:69:3d:17:25:8d:e4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1EE79463AC0DE0927DAC537E3288C9AA6018F5
        Validity
            Not Before: Dec 18 18:36:58 2023 GMT
            Not After : Dec 16 18:41:58 2024 GMT
        Subject: CN=614B6245D1D51D2656C03B5FFE2CB5F208F804C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:a4:16:c7:83:f3:ff:f7:95:86:fd:4e:22:
                    cd:62:d1:e0:ea:2c:57:e1:86:05:8a:f8:07:df:d7:
                    6f:d1:c2:e3:e2:88:51:1f:f3:86:1d:fe:1d:39:e1:
                    a5:4a:89:21:f3:f4:ed:90:6a:a3:65:21:1e:b1:9e:
                    fa:f6:97:5d:3f:41:4b:03:ff:0f:33:04:6b:fc:9a:
                    72:65:5d:3e:7c:6b:8e:c2:62:74:38:a5:e9:eb:a2:
                    71:bb:ba:e4:06:89:9e:1c:74:2f:de:46:6d:60:85:
                    f2:e0:63:db:c4:92:ed:92:49:87:e6:67:8c:16:e5:
                    66:67:4f:ee:f1:56:8e:1a:5e:2d:bd:c8:85:b6:58:
                    4f:4f:50:c4:f0:12:ce:a5:aa:30:4c:33:96:fe:00:
                    09:82:d8:6b:8e:2d:aa:b0:66:a4:0c:6d:44:82:b4:
                    60:2b:99:68:79:dd:db:0e:11:31:e9:cd:f8:de:eb:
                    93:2d:b6:35:a3:66:40:05:f2:41:22:75:ce:49:dc:
                    6e:02:90:30:9e:61:5f:dc:09:18:04:9c:af:01:5e:
                    1e:af:d6:68:44:9e:bc:ce:fa:36:cc:bc:d7:75:22:
                    e6:79:23:c4:6a:3a:58:88:a1:9c:81:a7:ab:ab:0b:
                    92:d4:01:b3:93:2a:14:fd:f9:bb:87:20:e6:5a:8e:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:62:45:D1:D5:1D:26:56:C0:3B:5F:FE:2C:B5:F2:08:F8:04:C0
            X509v3 Authority Key Identifier:
                keyid:EC:1E:E7:94:63:AC:0D:E0:92:7D:AC:53:7E:32:88:C9:AA:60:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33332d3333203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:76:ce:dd:7c:c1:bf:53:da:e2:98:1a:e5:ee:94:bc:ed:88:
         85:b4:56:c7:9a:bf:c1:96:9a:f9:bb:f8:9a:08:6b:c9:67:df:
         8c:07:f6:91:06:22:78:62:9d:4e:df:78:4d:22:e5:03:0a:55:
         51:fa:cc:52:23:9e:0f:4d:28:02:52:1f:e7:1c:29:ce:bb:9e:
         ab:56:45:1b:dc:fe:a6:b9:76:b3:74:47:16:07:ed:b2:95:a6:
         8b:a5:51:92:8f:0e:be:e7:a2:60:1d:7b:58:47:d9:ff:bb:15:
         e7:22:28:12:ec:eb:8f:f7:09:d3:12:b7:c6:6e:62:59:52:93:
         63:4e:cc:cc:b4:6e:af:c9:60:e7:3b:ed:91:e5:b2:98:fa:11:
         dd:ca:53:ff:a8:9b:6f:c7:e9:2b:14:12:26:c7:02:89:72:d0:
         55:8c:0c:51:af:05:37:10:58:5a:66:a4:68:35:cf:52:cc:5c:
         70:7b:d5:80:87:c3:70:71:32:30:31:49:8f:db:c2:3d:a3:8e:
         cd:58:1d:47:9f:3a:bc:06:85:3e:87:5f:cd:8d:13:d7:b7:33:
         e9:6f:71:32:c6:20:89:0a:5b:ef:81:66:81:7b:aa:5c:d5:4b:
         2f:9b:ad:e6:62:1f:40:e0:be:83:99:5a:7a:3a:ab:e4:c0:74:
         5a:4e:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org