Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a383030303a3a2f33362d3336203d3e20323638333033.roa
File:                     323830343a346631383a383030303a3a2f33362d3336203d3e20323638333033.roa (raw, json)
Hash identifier:          3ZYZBjImXrsE2i7WkYcSTaH+qETuWBk8a28Exd77/PQ=
Subject key identifier:   C3:9E:96:D8:DA:96:00:AA:47:72:92:CA:8B:DB:B2:48:0F:0B:9F:EA
Certificate issuer:       /CN=B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA
Certificate serial:       4B00E38CAE87D61BEA71EF9916DF472D9EB43300
Authority key identifier: B9:3B:B7:48:63:B5:29:8E:6E:3E:F7:21:BC:A7:D4:69:FF:0A:3B:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a383030303a3a2f33362d3336203d3e20323638333033.roa
Signing time:             Wed 22 May 2024 21:18:51 +0000
ROA not before:           Wed 22 May 2024 21:13:51 +0000
ROA not after:            Wed 21 May 2025 21:18:51 +0000
asID:                     268303
IP address blocks:        2804:4f18:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:e3:8c:ae:87:d6:1b:ea:71:ef:99:16:df:47:2d:9e:b4:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA
        Validity
            Not Before: May 22 21:13:51 2024 GMT
            Not After : May 21 21:18:51 2025 GMT
        Subject: CN=C39E96D8DA9600AA477292CA8BDBB2480F0B9FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:5f:13:4d:b6:a2:2e:37:b2:1b:85:b4:06:
                    b0:14:9d:e9:c4:c3:be:b5:10:d0:c6:19:2c:4a:c0:
                    e0:af:3c:16:03:c8:41:5f:93:77:72:cc:39:cb:da:
                    c3:59:b3:69:00:d0:b3:2f:e3:8f:50:eb:9a:e8:18:
                    c3:0f:bb:5a:b4:ab:a4:85:4a:22:74:69:b1:de:da:
                    96:92:17:c4:13:3b:a0:5c:d7:c0:4b:85:17:ad:17:
                    6e:63:95:93:44:4d:ba:fb:0a:df:e4:ce:a3:10:17:
                    d3:7a:e9:b7:e2:6c:f3:cc:63:c2:e4:ab:a8:05:ec:
                    f7:93:03:33:7d:ca:ab:05:8f:63:73:d9:d6:ab:7e:
                    32:80:d4:6f:ae:e8:86:db:33:0c:48:04:c9:86:bb:
                    94:dd:0a:e3:c8:0c:ae:12:0d:8f:3a:0d:11:a5:0d:
                    2c:d7:2d:45:82:02:3c:17:f0:b1:4e:f4:67:6c:78:
                    65:0e:99:af:9f:c3:d0:cb:4d:12:04:7b:03:28:45:
                    ef:cf:8a:60:46:a4:46:c4:ba:91:dd:6a:30:8c:a8:
                    e1:4b:16:f8:a0:51:40:d8:73:fd:ff:d4:b5:5f:74:
                    6f:13:bc:d5:99:c1:03:12:ef:da:68:75:49:6a:6e:
                    94:29:f4:cb:39:22:46:1b:4d:60:6e:93:d9:9e:8f:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9E:96:D8:DA:96:00:AA:47:72:92:CA:8B:DB:B2:48:0F:0B:9F:EA
            X509v3 Authority Key Identifier:
                keyid:B9:3B:B7:48:63:B5:29:8E:6E:3E:F7:21:BC:A7:D4:69:FF:0A:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a383030303a3a2f33362d3336203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         37:e8:f7:26:e2:87:49:63:32:8e:aa:75:44:aa:58:36:17:27:
         c5:9d:08:dc:e9:c0:99:14:4b:b3:da:b8:c6:13:43:1f:d1:dd:
         22:bd:80:42:12:11:8f:1d:bb:42:9e:b8:6f:38:bd:1b:4f:91:
         57:85:a7:e9:02:fe:1f:a5:4f:ec:2f:a5:d7:e4:fe:a6:5a:52:
         80:3d:b7:3a:a6:18:46:aa:a2:02:4b:a6:bf:39:a2:54:d7:d9:
         44:76:a5:f2:06:53:e5:49:f2:c5:4e:fc:af:7d:a1:d7:d8:fd:
         40:f6:4a:c6:83:81:0a:f8:26:5e:68:4d:ed:67:b8:e8:83:7f:
         d0:1a:a9:46:40:fa:3e:60:aa:e5:1c:50:ee:39:15:f9:84:b4:
         47:21:08:28:52:57:38:f8:7a:da:78:9b:4d:bf:c2:ca:29:c1:
         c3:6b:78:27:ec:27:76:91:f0:7a:83:01:ed:73:47:72:5c:5c:
         8e:b4:0f:cd:1f:cb:a6:1a:f8:f8:81:86:87:77:5b:59:ba:f4:
         73:db:f2:8b:af:32:b7:3f:99:09:7f:97:36:d5:8c:a9:c9:38:
         d3:09:8f:43:8c:ce:e7:d6:07:08:bc:18:61:f7:a5:26:38:43:
         37:75:50:f2:e9:1c:0e:27:c5:50:4b:53:87:84:14:a4:51:1d:
         42:2f:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org