Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          nT94zrbEey24KByP8zHOj7TyimPQ7Vmycix9UfZGU9s=
Subject key identifier:   9E:16:C7:7B:1B:E8:DB:E8:02:3B:10:FD:D6:DF:0D:0C:77:94:27:8C
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       7379F5C3F8ADA397272957227E10A930D62D1306
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:46:40 +0000
ROA not before:           Fri 08 Dec 2023 00:41:40 +0000
ROA not after:            Fri 06 Dec 2024 00:46:40 +0000
asID:                     268296
IP address blocks:        2804:4efc:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:79:f5:c3:f8:ad:a3:97:27:29:57:22:7e:10:a9:30:d6:2d:13:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:41:40 2023 GMT
            Not After : Dec  6 00:46:40 2024 GMT
        Subject: CN=9E16C77B1BE8DBE8023B10FDD6DF0D0C7794278C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:bc:7f:b7:e4:88:0a:43:af:2f:d6:33:c8:
                    8b:91:42:a9:96:ea:a7:49:fc:82:01:d2:7a:ea:e8:
                    35:72:9c:b0:5e:b4:1b:66:8d:88:f4:5c:81:e4:32:
                    ed:91:f9:8e:01:c1:57:de:18:d6:5c:9b:1f:07:34:
                    1e:52:eb:27:e5:ed:a6:06:f1:04:8b:d4:2c:c8:9e:
                    6b:5c:af:75:91:37:3c:6d:e3:c5:cb:28:e1:bb:81:
                    d9:36:89:3a:c6:f7:85:fb:ff:0a:dd:b7:44:3d:97:
                    f6:db:a1:94:82:1f:b5:6c:6e:eb:90:9f:e0:4e:3c:
                    ef:f2:aa:eb:38:41:e1:7a:19:16:99:8b:ae:6b:4d:
                    61:a8:c0:1c:5f:df:01:9c:04:49:8b:0b:fd:1a:69:
                    4e:06:cf:a4:aa:52:ab:e7:ad:c9:39:10:f4:e7:ca:
                    6d:47:6e:27:b6:55:ce:bd:cc:99:21:89:1e:3f:30:
                    9a:02:5f:4a:2f:3d:e1:07:19:c0:ff:3b:f4:d7:59:
                    06:c1:f7:2f:9a:d5:b4:f8:f9:8c:00:92:00:ba:38:
                    fc:4d:44:1a:2c:e0:15:ee:21:71:ed:71:4a:de:62:
                    fd:27:9e:c7:94:6c:fb:38:9a:7f:7d:96:42:1f:fc:
                    05:a1:f6:3e:9c:31:66:f4:91:c3:fa:48:45:f8:9c:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:16:C7:7B:1B:E8:DB:E8:02:3B:10:FD:D6:DF:0D:0C:77:94:27:8C
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:80:d5:62:96:08:9f:89:7c:b6:26:2f:ae:e2:c1:c8:85:
         95:37:3b:b4:59:78:b0:fe:2e:90:75:a7:bb:42:e0:76:8b:06:
         5c:3d:9d:22:b4:4e:79:a2:30:ad:b4:41:1b:c1:cb:7a:34:17:
         b9:12:4c:42:ee:22:49:58:bb:78:e5:44:9e:f2:38:9b:73:84:
         56:3a:70:7b:11:02:a6:1e:d6:ec:24:ad:c9:dd:6f:1b:d8:28:
         1c:f1:30:03:9e:13:36:a8:0e:3b:e4:6d:b9:d0:7b:95:33:46:
         a9:dd:94:40:33:77:eb:88:22:21:2a:16:f7:82:97:d0:d2:49:
         54:87:80:27:3f:3a:27:e2:f8:d3:e2:b8:a4:b4:1c:dc:d1:ef:
         1e:c1:32:f4:2d:dd:4a:21:48:c9:6c:de:da:72:cd:3f:8d:4e:
         a4:ef:40:ca:3d:af:6a:3f:32:a1:fc:cc:37:2b:c7:03:74:50:
         ea:82:55:fc:59:09:05:d4:6d:5c:91:ae:d4:a6:7d:96:f2:f0:
         b1:ac:63:db:c6:60:7c:46:e9:32:e3:8b:55:76:45:c0:a2:ae:
         65:8a:73:1a:3d:de:9e:a0:67:c4:99:c0:bf:d2:5d:ea:a0:0f:
         4b:7f:cc:7a:81:14:1d:3b:d3:9f:99:46:b0:d7:04:db:0d:52:
         8c:cd:88:2b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUc3n1w/ito5cnKVcifhCpMNYtEwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0M0NEODE1REE1OEQ4MEQ4QTRDODgwMjA1NTZDNDc0
QzE1MjBGMTAeFw0yMzEyMDgwMDQxNDBaFw0yNDEyMDYwMDQ2NDBaMDMxMTAvBgNV
BAMTKDlFMTZDNzdCMUJFOERCRTgwMjNCMTBGREQ2REYwRDBDNzc5NDI3OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcbx/t+SICkOvL9YzyIuRQqmW
6qdJ/IIB0nrq6DVynLBetBtmjYj0XIHkMu2R+Y4BwVfeGNZcmx8HNB5S6yfl7aYG
8QSL1CzInmtcr3WRNzxt48XLKOG7gdk2iTrG94X7/wrdt0Q9l/bboZSCH7VsbuuQ
n+BOPO/yqus4QeF6GRaZi65rTWGowBxf3wGcBEmLC/0aaU4Gz6SqUqvnrck5EPTn
ym1Hbie2Vc69zJkhiR4/MJoCX0ovPeEHGcD/O/TXWQbB9y+a1bT4+YwAkgC6OPxN
RBos4BXuIXHtcUreYv0nnseUbPs4mn99lkIf/AWh9j6cMWb0kcP6SEX4nO6ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnhbHexvo2+gCOxD91t8NDHeUJ4wwHwYDVR0j
BBgwFoAULUPNgV2ljYDYpMiAIFVsR0wVIPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8yRDQzQ0Q4MTVEQTU4RDgwRDhBNEM4ODAyMDU1NkM0NzRDMTUyMEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENDNDRDgxNURBNThEODBE
OEE0Qzg4MDIwNTU2QzQ3NEMxNTIwRjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvwQMA0GCSqGSIb3DQEBCwUA
A4IBAQCb2YDVYpYIn4l8tiYvruLByIWVNzu0WXiw/i6Qdae7QuB2iwZcPZ0itE55
ojCttEEbwct6NBe5EkxC7iJJWLt45USe8jibc4RWOnB7EQKmHtbsJK3J3W8b2Cgc
8TADnhM2qA475G250HuVM0ap3ZRAM3friCIhKhb3gpfQ0klUh4AnPzon4vjT4rik
tBzc0e8ewTL0Ld1KIUjJbN7acs0/jU6k70DKPa9qPzKh/Mw3K8cDdFDqglX8WQkF
1G1cka7Upn2W8vCxrGPbxmB8Ruky44tVdkXAoq5linMaPd6eoGfEmcC/0l3qoA9L
f8x6gRQdO9OfmUaw1wTbDVKMzYgr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org