Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          pLqyQE+UDrpigI+R5S6lkzLPT6iIg6b6b3j6uJeNGlc=
Subject key identifier:   7A:1A:25:70:94:8F:1D:49:EC:41:2E:C2:2D:B0:4A:E7:FC:FE:14:7A
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       169182AED38F6F0B2BE8352B495C6C2C734EF479
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:46:51 +0000
ROA not before:           Fri 08 Dec 2023 00:41:51 +0000
ROA not after:            Fri 06 Dec 2024 00:46:51 +0000
asID:                     268296
IP address blocks:        2804:4efc:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:91:82:ae:d3:8f:6f:0b:2b:e8:35:2b:49:5c:6c:2c:73:4e:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:41:51 2023 GMT
            Not After : Dec  6 00:46:51 2024 GMT
        Subject: CN=7A1A2570948F1D49EC412EC22DB04AE7FCFE147A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:2c:99:92:e8:d8:ff:90:6c:d0:f8:75:ba:
                    57:76:4b:4f:50:89:fd:4e:3f:af:89:38:f3:1b:54:
                    fe:27:f9:b5:8d:44:ed:f3:6c:a2:1c:3c:0b:3c:52:
                    69:f8:1c:69:ae:37:29:89:d6:09:6a:87:ab:ba:b0:
                    d7:bf:5c:04:37:89:bb:f4:0e:c7:f2:32:f8:51:bb:
                    95:aa:9d:e7:ac:1f:32:93:00:16:fb:34:c8:4f:48:
                    6f:48:2d:e7:b6:27:b7:68:eb:26:2c:73:a7:6a:36:
                    18:23:09:d9:c2:16:00:84:27:2a:4b:11:27:12:68:
                    ab:57:b9:7e:74:8e:5c:02:59:93:bf:47:57:0d:0f:
                    0e:19:c5:fa:2f:13:e3:1f:a7:c5:08:fd:0f:8d:f7:
                    76:43:c2:77:56:39:b8:70:76:b8:71:32:70:86:f3:
                    cc:c4:ba:ab:dc:f5:9c:d6:57:41:01:f8:69:87:0d:
                    17:68:c4:2f:51:56:ac:21:e5:9d:62:e8:f0:b6:c8:
                    7a:02:ba:7b:04:b4:60:0a:36:51:e3:e7:65:b0:ca:
                    55:1b:db:6b:79:fe:7b:cb:56:2f:64:6b:51:97:5c:
                    c8:08:d0:0c:19:6e:be:b6:ac:31:a9:77:e1:f0:3d:
                    ba:12:7a:07:0a:54:45:05:93:44:89:ce:41:a1:34:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1A:25:70:94:8F:1D:49:EC:41:2E:C2:2D:B0:4A:E7:FC:FE:14:7A
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:2b:50:fb:5e:a6:7a:b5:b3:67:e9:0d:5f:12:78:2f:d5:
         0a:b4:97:4c:22:bf:fc:17:40:79:34:20:04:dd:a0:4d:0a:f7:
         d3:db:ab:10:4b:d1:be:f8:db:92:e9:74:31:74:91:d8:80:31:
         3e:f4:2f:a4:88:8d:61:a6:6d:9b:40:bd:32:98:2b:4c:c9:ee:
         e7:03:08:b4:7d:2a:03:f4:59:57:ef:6f:32:82:ac:00:7a:db:
         2d:8f:42:bf:5d:0a:63:e8:a9:78:95:1e:d6:2c:06:ba:a6:a0:
         e5:34:a4:48:32:c8:4a:1d:86:36:0c:67:e7:04:4f:55:62:a3:
         0c:b0:77:5a:1d:15:68:a5:cd:5f:b2:8a:f7:97:07:d7:18:46:
         99:e1:c6:41:78:d7:d2:cb:ea:c6:99:e3:78:48:c5:b1:dd:11:
         e0:14:0e:96:4e:8b:ee:9d:cd:94:f4:69:0f:b6:84:4d:9d:fd:
         ea:bb:3b:f5:fe:8b:50:b9:6f:96:85:1f:aa:5e:6f:82:5a:88:
         0d:71:33:dd:2e:ce:7f:15:a0:75:f3:2c:58:3a:90:f1:a0:6f:
         0f:e0:d6:ee:4a:53:f2:02:81:32:7c:60:d2:8c:28:c6:18:91:
         c9:08:7b:12:5d:15:88:31:36:f3:91:e1:ac:91:22:95:ac:a3:
         d6:46:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org