Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa
File:                     323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa (raw, json)
Hash identifier:          ZB2M+6sZwSr+SXR6DJWZRT1a7N+PY9XOP5fCRIgX/RQ=
Subject key identifier:   2C:F4:F8:DD:D1:44:B1:64:CB:13:81:D1:C6:87:A5:A9:21:4E:E6:40
Certificate issuer:       /CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
Certificate serial:       355DA152BC861E36B7845E40AA6CAEF2E6CB3C66
Authority key identifier: 13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     268303
IP address blocks:        2804:4f18:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5d:a1:52:bc:86:1e:36:b7:84:5e:40:aa:6c:ae:f2:e6:cb:3c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=2CF4F8DDD144B164CB1381D1C687A5A9214EE640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e3:7d:73:3d:8b:8c:43:8d:c0:1c:aa:1d:2a:
                    46:68:44:14:36:69:bd:68:38:f9:96:06:07:69:8d:
                    06:4a:3d:0b:da:cc:5a:55:b3:21:a4:22:c5:8c:e5:
                    6a:32:be:b6:70:98:28:51:55:eb:e0:22:6f:52:99:
                    d6:dd:47:2c:6f:7c:2e:cc:78:f9:a4:f9:f1:13:0f:
                    11:65:a7:50:9e:9b:57:a8:03:c9:31:56:88:2b:66:
                    d1:4c:23:18:c8:e5:57:0a:4e:82:20:7f:33:20:9e:
                    ae:af:88:2b:39:63:94:3f:2c:50:11:b4:f0:8c:4e:
                    f7:56:af:59:78:11:ef:0a:a9:50:d2:08:3a:85:cb:
                    8b:b4:48:a9:8e:63:1f:c4:cd:54:67:5d:6c:6c:a4:
                    e6:5c:04:19:a5:ed:ae:46:0f:dc:27:10:f9:ee:a7:
                    72:95:ac:dc:01:fd:66:d0:43:17:7a:5c:54:c0:08:
                    a0:46:53:e9:6b:04:9f:2b:65:e2:8c:cf:62:6a:9a:
                    5c:59:ee:fe:ad:93:9c:05:98:db:a8:05:80:70:b0:
                    0c:59:1f:a0:03:23:28:7a:39:bb:88:4c:e6:85:76:
                    b2:37:94:6e:48:2c:26:56:18:a3:63:62:3f:e7:2e:
                    fd:dc:64:4f:86:f5:2f:62:9a:e3:66:89:46:65:71:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F4:F8:DD:D1:44:B1:64:CB:13:81:D1:C6:87:A5:A9:21:4E:E6:40
            X509v3 Authority Key Identifier:
                keyid:13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ad:39:4b:80:c1:f3:f1:f0:cc:4f:56:49:50:3e:ee:ea:3f:35:
         d9:b2:51:6d:23:58:95:cd:8d:18:d8:36:fc:8d:50:e9:f6:95:
         58:98:d9:ad:8f:fa:fb:b1:ea:a5:de:24:09:74:ad:a3:65:86:
         cd:53:cb:4a:be:03:65:2a:b9:f8:a7:9f:25:2a:c5:01:52:51:
         3b:01:0b:58:5e:17:a5:4f:ca:2c:41:9c:f4:24:b5:f9:06:66:
         07:5a:5e:da:b2:f2:a9:8b:d4:94:2c:4d:4c:02:34:6b:25:94:
         12:09:77:61:0e:3d:c7:a5:60:f7:f4:53:01:03:10:df:4e:08:
         51:44:21:03:7f:0f:a5:52:ec:92:2e:33:ca:70:e8:7c:09:6f:
         3b:15:b7:9d:00:f1:68:fa:51:43:c3:ee:29:2d:ca:bd:95:12:
         63:ea:cf:50:6e:c4:61:bd:18:34:14:61:d9:4a:ad:bc:5e:c5:
         ac:65:4d:0a:73:70:46:a2:22:16:01:1a:e2:7f:cb:31:4c:93:
         22:78:d4:d0:d3:2e:e3:8f:d7:92:63:d8:fa:ca:5f:c4:9a:1f:
         22:69:92:a5:d7:20:3b:c5:0a:0a:95:36:7a:cc:f9:83:f7:da:
         29:9d:d9:4f:de:7e:bc:b7:19:e3:79:da:54:83:68:a6:b9:6a:
         39:7f:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org