Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          SCzf2i5ClRqLvvglZ+1+j5A0OqgGcErLr5YU+6MDSDc=
Subject key identifier:   44:96:25:3C:4F:10:EC:ED:07:19:02:69:D2:70:E2:AF:E1:E4:6F:BA
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       69267D10F83B33D1A005A093E27D23226D921AAC
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:46:59 +0000
ROA not before:           Fri 08 Dec 2023 00:41:59 +0000
ROA not after:            Fri 06 Dec 2024 00:46:59 +0000
asID:                     268296
IP address blocks:        2804:4efc:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:26:7d:10:f8:3b:33:d1:a0:05:a0:93:e2:7d:23:22:6d:92:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:41:59 2023 GMT
            Not After : Dec  6 00:46:59 2024 GMT
        Subject: CN=4496253C4F10ECED07190269D270E2AFE1E46FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:bc:53:c4:42:a3:0d:66:13:b2:a1:fd:55:
                    b9:dd:5c:22:0f:27:fe:be:f5:5e:12:d0:22:b7:20:
                    e8:c6:56:0a:d8:9f:78:ff:a2:75:a5:64:35:9d:f6:
                    5f:89:91:8a:e9:e4:bc:5f:52:84:53:67:37:ed:50:
                    38:91:64:62:0b:b8:b0:de:9b:1d:f7:58:d9:d3:d8:
                    9b:52:a8:1a:2e:08:9f:26:4f:73:3f:83:ad:67:75:
                    08:89:38:3d:4d:e0:23:1c:2e:54:ca:b2:98:e5:39:
                    80:7b:3b:8c:18:7b:32:31:83:4c:65:98:1d:cc:91:
                    bf:c0:67:a7:b8:b8:e1:9a:e8:9f:e8:86:72:55:39:
                    0f:65:35:2d:ac:ca:0f:e6:57:1f:60:1c:8b:f9:8c:
                    f6:fd:53:f5:7c:38:c0:35:99:97:56:36:0b:39:ca:
                    66:de:78:4a:9a:8b:70:f3:a5:ec:c6:8a:10:e1:1c:
                    ba:e1:e0:2a:d9:6a:1f:25:b5:b5:b4:5d:1c:c8:0e:
                    17:01:78:a7:09:1a:74:a8:99:1e:b3:0f:ed:ea:4b:
                    23:58:3f:39:0e:df:64:a9:4f:dd:61:bb:5f:c8:74:
                    51:4e:f5:b0:a1:0b:51:dd:b9:60:de:ab:23:10:17:
                    81:27:1c:56:16:31:c7:f5:31:55:f1:75:e0:48:11:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:25:3C:4F:10:EC:ED:07:19:02:69:D2:70:E2:AF:E1:E4:6F:BA
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:14:2d:e8:11:3f:20:0e:cc:59:20:e9:b7:29:33:b8:8a:
         1b:e4:0f:64:43:9b:9f:12:a0:d7:90:7e:26:86:cb:13:76:db:
         b3:a1:bd:21:08:ad:ea:70:c7:e7:5d:cb:41:77:96:ef:33:9f:
         cf:8f:65:9c:58:48:db:41:d9:5e:5d:25:45:d2:6f:61:1c:42:
         46:aa:0a:77:9d:cd:2b:7a:2c:af:5c:b0:d6:fa:35:9d:93:b0:
         6c:b0:24:83:fd:40:9c:84:84:7d:e6:be:33:b3:11:a8:11:97:
         78:43:22:f9:af:3b:1d:7a:a3:c8:5c:48:bc:39:1e:9d:39:ef:
         4b:d1:f1:03:44:b6:75:ca:36:76:f7:c0:20:7d:ef:4c:c7:eb:
         bd:af:a0:8f:1e:34:1e:70:6d:f7:ca:29:c1:4c:1e:51:1d:b6:
         d4:bc:2b:07:17:5d:bb:bc:e1:ed:c4:7a:5e:67:38:5a:57:84:
         64:cd:02:b1:57:1b:cb:d0:af:16:eb:45:db:b8:03:d7:c1:1f:
         c5:97:93:81:1b:06:06:ea:a7:c0:fa:cb:7d:a2:61:07:b6:ba:
         46:03:5a:ef:d5:36:5e:27:3e:8b:64:a4:d6:d4:be:90:7c:4b:
         ad:e9:49:b8:b0:01:39:34:f7:6b:61:12:2b:0c:9a:07:ec:f0:
         ce:30:6b:18
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaSZ9EPg7M9GgBaCT4n0jIm2SGqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0M0NEODE1REE1OEQ4MEQ4QTRDODgwMjA1NTZDNDc0
QzE1MjBGMTAeFw0yMzEyMDgwMDQxNTlaFw0yNDEyMDYwMDQ2NTlaMDMxMTAvBgNV
BAMTKDQ0OTYyNTNDNEYxMEVDRUQwNzE5MDI2OUQyNzBFMkFGRTFFNDZGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQ7xTxEKjDWYTsqH9VbndXCIP
J/6+9V4S0CK3IOjGVgrYn3j/onWlZDWd9l+JkYrp5LxfUoRTZzftUDiRZGILuLDe
mx33WNnT2JtSqBouCJ8mT3M/g61ndQiJOD1N4CMcLlTKspjlOYB7O4wYezIxg0xl
mB3Mkb/AZ6e4uOGa6J/ohnJVOQ9lNS2syg/mVx9gHIv5jPb9U/V8OMA1mZdWNgs5
ymbeeEqai3DzpezGihDhHLrh4CrZah8ltbW0XRzIDhcBeKcJGnSomR6zD+3qSyNY
PzkO32SpT91hu1/IdFFO9bChC1HduWDeqyMQF4EnHFYWMcf1MVXxdeBIEdiDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURJYlPE8Q7O0HGQJp0nDir+Hkb7owHwYDVR0j
BBgwFoAULUPNgV2ljYDYpMiAIFVsR0wVIPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8yRDQzQ0Q4MTVEQTU4RDgwRDhBNEM4ODAyMDU1NkM0NzRDMTUyMEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENDNDRDgxNURBNThEODBE
OEE0Qzg4MDIwNTU2QzQ3NEMxNTIwRjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvxQMA0GCSqGSIb3DQEBCwUA
A4IBAQAiqxQt6BE/IA7MWSDptykzuIob5A9kQ5ufEqDXkH4mhssTdtuzob0hCK3q
cMfnXctBd5bvM5/Pj2WcWEjbQdleXSVF0m9hHEJGqgp3nc0reiyvXLDW+jWdk7Bs
sCSD/UCchIR95r4zsxGoEZd4QyL5rzsdeqPIXEi8OR6dOe9L0fEDRLZ1yjZ298Ag
fe9Mx+u9r6CPHjQecG33yinBTB5RHbbUvCsHF127vOHtxHpeZzhaV4RkzQKxVxvL
0K8W60XbuAPXwR/Fl5OBGwYG6qfA+st9omEHtrpGA1rv1TZeJz6LZKTW1L6QfEut
6Um4sAE5NPdrYRIrDJoH7PDOMGsY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org