Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          yyaWwesQqv7rHX1v7/wl2mX/S1g5huRoLQFbKK8Bleg=
Subject key identifier:   0C:5C:EF:5B:E5:80:B4:98:3C:82:C3:22:5C:F6:A1:02:0D:BC:00:E0
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       3461505CEF1668DC3183FA3035DE718C9A0330DF
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:02 +0000
ROA not before:           Fri 08 Dec 2023 00:42:02 +0000
ROA not after:            Fri 06 Dec 2024 00:47:02 +0000
asID:                     268296
IP address blocks:        2804:4efc:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:61:50:5c:ef:16:68:dc:31:83:fa:30:35:de:71:8c:9a:03:30:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:02 2023 GMT
            Not After : Dec  6 00:47:02 2024 GMT
        Subject: CN=0C5CEF5BE580B4983C82C3225CF6A1020DBC00E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:f0:6d:2a:0c:3b:77:24:f0:b9:ee:84:36:
                    12:e8:5f:15:ca:1f:b1:d1:42:e0:e6:97:4f:e6:42:
                    0a:b3:13:4d:ed:09:3e:64:f8:96:cf:07:b8:38:53:
                    d9:c8:c9:0d:66:ee:03:fb:3f:b8:de:8c:de:f3:fc:
                    45:dc:93:68:cc:76:91:aa:e5:81:ea:a9:50:91:41:
                    47:42:82:d7:d6:a2:30:ef:88:94:02:6e:5d:38:0b:
                    4f:5e:d0:fe:97:59:39:7f:73:f5:b1:e9:fb:0c:03:
                    9d:a0:ee:31:81:f3:51:2d:7f:c3:cd:8a:81:67:b9:
                    56:48:e1:d0:a6:4c:c1:aa:f2:39:1a:c4:87:7d:78:
                    17:f2:42:04:9f:8e:3c:9d:67:6f:de:bd:92:b0:4a:
                    48:40:5f:82:cd:70:07:7f:4b:10:9c:82:dd:90:88:
                    14:b4:30:17:8e:10:80:b9:c2:97:d9:4b:3e:3f:1f:
                    20:d0:ba:a7:34:e0:e0:eb:86:f0:eb:7d:15:2a:6a:
                    86:eb:d5:4a:aa:0e:91:d1:66:71:ef:c1:84:50:01:
                    75:3b:87:c0:13:3b:8b:74:0d:08:87:09:44:cf:22:
                    10:7b:19:c8:ef:b1:6b:d9:d8:ba:fc:c1:ab:96:70:
                    9a:f0:54:a5:94:d5:e8:a5:ff:37:56:86:e8:7d:76:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:EF:5B:E5:80:B4:98:3C:82:C3:22:5C:F6:A1:02:0D:BC:00:E0
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:bf:36:a3:9c:d9:e4:50:8a:f2:6d:fc:47:72:1d:04:e9:
         bd:14:09:a8:fb:fa:5f:02:37:2b:a7:30:66:12:6b:9a:99:95:
         98:ca:c4:21:21:1a:a4:16:9f:23:e8:f5:3c:4c:51:d9:f9:a1:
         cf:f9:db:68:ab:b2:4a:d2:90:84:cc:9a:4f:2f:57:26:af:2e:
         9b:37:63:c4:f3:0d:8a:3c:1e:2d:83:bc:30:1c:1b:a3:33:a2:
         03:94:c4:18:01:a6:0f:4a:b2:96:31:98:25:a6:28:f3:31:04:
         f4:62:6d:7b:aa:2c:5e:cf:08:03:ba:cf:77:3a:6f:ca:3b:01:
         dd:a9:37:09:76:37:28:48:06:2b:4e:17:cc:24:16:9c:91:95:
         36:65:13:cf:91:b5:98:2e:9a:6c:0f:5f:4e:e3:e0:b9:01:be:
         e5:a4:54:3f:55:72:d8:e3:c3:1b:68:2c:22:b0:7d:a0:53:8e:
         63:29:f3:54:bf:99:75:c4:8e:84:82:08:86:1f:7e:c8:c3:33:
         fb:a1:ff:11:10:6f:4d:81:90:4a:a8:16:6f:20:c9:75:f2:3d:
         b3:50:d7:13:75:bc:6b:13:6b:7e:c9:75:0f:4e:fc:69:30:b0:
         a7:d0:90:0b:0a:26:c9:d2:0c:7d:ac:2e:32:4e:15:17:de:d6:
         90:8f:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org