Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          RUZ4lMvdkF3TL0RX0NwWA0SWJ+G8K1qur2wRUn8c8/0=
Subject key identifier:   14:D3:5B:09:EB:AE:AD:A3:B2:D3:BA:11:B0:A1:BF:5D:98:6D:8F:C4
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       479BA8EC88933BCF825A75EB5DDC39E857B5D508
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:46:55 +0000
ROA not before:           Fri 08 Dec 2023 00:41:55 +0000
ROA not after:            Fri 06 Dec 2024 00:46:55 +0000
asID:                     268296
IP address blocks:        2804:4efc:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:a8:ec:88:93:3b:cf:82:5a:75:eb:5d:dc:39:e8:57:b5:d5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:41:55 2023 GMT
            Not After : Dec  6 00:46:55 2024 GMT
        Subject: CN=14D35B09EBAEADA3B2D3BA11B0A1BF5D986D8FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:10:69:a6:1c:db:b0:81:8a:06:4f:6e:3e:
                    16:5d:a0:38:75:ae:c4:c2:62:ab:a9:e0:6e:0d:63:
                    19:86:27:aa:75:3e:6a:ab:6d:dd:e3:78:ed:ac:f2:
                    fb:4c:27:33:91:ab:0c:d4:81:dc:fa:e7:df:b9:79:
                    27:0d:b1:6c:fe:c0:c4:53:89:e5:04:48:b5:fd:d4:
                    4a:fc:21:25:16:de:cd:c7:36:fc:2a:ff:ac:6b:fa:
                    42:78:d7:31:42:a0:4b:99:29:c0:e1:3c:cd:e7:1a:
                    a8:b5:0f:cf:68:02:33:7d:ee:6f:bf:5b:a4:ec:b4:
                    a8:ac:b6:25:d8:95:2a:07:b6:e8:38:54:3b:fb:4a:
                    ea:41:33:83:18:18:4e:f1:92:02:ca:0a:c4:de:df:
                    05:e8:30:1f:97:e1:70:d8:4a:a3:a8:d8:9a:37:a4:
                    a0:80:11:34:78:d7:5a:b7:47:e2:9d:be:86:3b:dc:
                    31:b7:db:6d:cb:8d:72:af:72:e9:4c:2e:3b:35:97:
                    d0:e6:c8:81:70:64:87:a8:56:89:a3:1a:c4:4b:62:
                    9c:e2:97:72:a8:19:00:c3:2c:2a:11:06:e5:37:24:
                    1b:55:82:60:11:48:46:90:15:62:30:a3:e9:04:80:
                    78:5d:b4:f2:73:f0:35:bb:e5:9d:03:99:83:be:44:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D3:5B:09:EB:AE:AD:A3:B2:D3:BA:11:B0:A1:BF:5D:98:6D:8F:C4
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:58:45:a4:b2:fe:9a:87:d5:2c:53:74:62:bd:f8:f9:a9:40:
         74:c5:bf:b2:ae:45:73:8f:86:ef:5d:e0:5b:3f:b2:2a:6d:38:
         0f:15:05:af:73:ef:e3:0b:4f:7c:9e:10:da:d3:42:5a:04:04:
         6c:21:9e:4b:6b:3d:0b:88:e7:37:a0:29:c7:c2:69:d6:11:64:
         e7:e9:a0:f3:10:c3:c3:77:ae:df:d4:59:b4:a6:2b:56:34:34:
         eb:2a:e6:91:63:24:f0:a1:c4:be:45:0c:12:24:bc:91:2f:84:
         55:ac:a6:02:8c:4d:d2:41:a3:c8:3a:0c:d3:6a:41:17:7a:9f:
         d3:56:4c:e4:85:39:1b:ed:7f:c8:84:59:ba:e1:78:6e:e6:96:
         ba:9a:34:c7:36:cd:e6:65:a8:68:3a:b0:2e:bc:34:4e:fc:28:
         77:89:71:8b:a8:ed:d5:8c:3a:ae:8e:99:f5:1f:1a:1e:52:73:
         df:cc:36:22:fa:ff:46:e9:7f:ec:2f:4f:ef:2f:a5:08:b2:b3:
         2a:1e:6a:01:52:04:80:72:94:09:d9:4f:21:84:c2:06:f0:9d:
         a9:7f:4f:14:d5:c8:7a:7a:86:96:ef:b2:b4:8a:1d:c5:d5:ad:
         80:6b:34:b3:03:50:98:77:8e:18:41:c6:c8:da:13:9d:8c:27:
         fb:26:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org