Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa
File:                     323830343a373432303a3a2f33322d3334203d3e20323730393630.roa (raw, json)
Hash identifier:          WB7VvVplrfxlyq0SYNCuRRdgSGi1bhM0JGfYKyQd4xk=
Subject key identifier:   D4:A1:CA:C3:DD:2B:7E:0E:17:7D:70:6F:EA:77:C7:79:55:4A:73:DD
Certificate issuer:       /CN=36D0000793E703A1FE20CA3A1A3DCA18DBB32512
Certificate serial:       6D9AECB62794230D83BC05EED8D94A337AE2281D
Authority key identifier: 36:D0:00:07:93:E7:03:A1:FE:20:CA:3A:1A:3D:CA:18:DB:B3:25:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36D0000793E703A1FE20CA3A1A3DCA18DBB32512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa
Signing time:             Fri 12 May 2023 03:18:02 +0000
ROA not before:           Fri 12 May 2023 03:13:02 +0000
ROA not after:            Fri 10 May 2024 03:18:02 +0000
asID:                     270960
IP address blocks:        2804:7420::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9a:ec:b6:27:94:23:0d:83:bc:05:ee:d8:d9:4a:33:7a:e2:28:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36D0000793E703A1FE20CA3A1A3DCA18DBB32512
        Validity
            Not Before: May 12 03:13:02 2023 GMT
            Not After : May 10 03:18:02 2024 GMT
        Subject: CN=D4A1CAC3DD2B7E0E177D706FEA77C779554A73DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:31:47:6e:8a:2d:8d:14:e3:88:5a:eb:73:
                    46:35:c9:ba:8c:6c:ba:f9:15:10:a7:a0:57:a1:04:
                    2c:1c:b9:33:3d:69:c9:e9:43:5e:3e:48:b1:54:bd:
                    15:b9:9b:51:22:69:78:0d:fa:20:dc:b4:cc:92:81:
                    41:7f:92:8f:ca:ea:e5:69:e6:0e:5c:f0:34:ff:bb:
                    70:24:37:97:f4:e9:9f:15:57:3b:fe:21:fa:9b:34:
                    5f:d5:56:f5:29:d6:6e:ae:66:00:6f:30:90:22:d7:
                    67:f5:42:be:dc:dd:03:33:df:d4:c1:4d:5f:e9:42:
                    84:d0:22:2c:2f:a0:3f:0c:cd:8f:43:01:6c:59:33:
                    77:16:03:30:de:c8:a4:2c:01:99:08:85:26:02:37:
                    c5:be:68:d7:10:b7:0b:88:2b:bc:fd:7c:53:d9:7d:
                    1a:66:01:d9:01:7e:93:ae:aa:34:86:df:41:ba:e6:
                    5d:87:0a:22:cd:53:2a:0a:e0:ab:69:b8:d1:67:d3:
                    a1:9a:b0:f8:67:ac:19:08:11:aa:1a:5e:de:94:59:
                    b2:18:6b:eb:f1:6f:37:a8:d2:06:fe:ad:69:d9:71:
                    e0:c0:c9:97:cc:17:24:45:9e:a6:d2:d3:93:5e:84:
                    29:db:2c:64:01:8e:05:e6:fb:a4:f8:88:d9:d3:a3:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A1:CA:C3:DD:2B:7E:0E:17:7D:70:6F:EA:77:C7:79:55:4A:73:DD
            X509v3 Authority Key Identifier:
                keyid:36:D0:00:07:93:E7:03:A1:FE:20:CA:3A:1A:3D:CA:18:DB:B3:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/36D0000793E703A1FE20CA3A1A3DCA18DBB32512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36D0000793E703A1FE20CA3A1A3DCA18DBB32512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:96:7f:06:35:a5:13:ed:be:e3:d1:61:51:c5:57:8f:73:a3:
         d6:2b:6b:8d:c0:a9:01:2c:a3:e5:34:76:bd:b1:92:9e:87:87:
         c9:bd:a5:c4:86:a3:fb:36:3d:16:0c:e3:be:e2:d4:20:6e:d1:
         2a:d6:76:6e:f0:34:db:46:59:4c:8c:65:ba:f2:2b:e2:0b:da:
         af:a8:14:9a:e9:65:e0:fa:1a:9f:68:d7:10:1e:aa:72:e9:68:
         99:7a:54:0d:72:dc:06:fd:11:4a:09:71:be:4c:77:e5:9c:19:
         54:a4:f8:c9:7e:72:ef:d6:df:a6:58:a8:61:1c:b2:82:c9:08:
         40:5a:c3:0a:46:ff:fd:be:89:13:e4:13:55:02:d9:c6:df:0a:
         16:ce:6b:56:be:7d:31:07:d1:86:a6:ef:a6:35:3c:63:68:9d:
         21:29:63:1b:e5:fe:49:6c:77:50:32:3e:4e:33:24:29:2d:64:
         6a:48:d1:d7:10:ba:5a:ab:fe:a6:96:e8:83:0c:91:5f:33:3b:
         8e:b1:cd:50:a5:fe:cc:15:16:8e:68:50:fc:db:03:7d:37:b9:
         bc:45:77:9a:72:86:8d:4b:8a:41:04:79:ff:44:2f:ae:ad:dd:
         e5:96:5a:04:2d:ac:89:cc:5b:1a:d9:93:ee:35:e1:38:69:59:
         dc:8c:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org