Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          h8tu1XtsWwY+IFl+scz10WMttjzqFuu9cagcNdxiAs4=
Subject key identifier:   9C:96:19:3A:DB:8D:0B:C4:C5:0E:59:EC:5A:F0:BF:A1:38:70:11:3F
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       412C174C9E93DB2AC5386688BBC00E7F8D3BEBCF
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:05 +0000
ROA not before:           Fri 08 Dec 2023 00:42:05 +0000
ROA not after:            Fri 06 Dec 2024 00:47:05 +0000
asID:                     268296
IP address blocks:        2804:4efc:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2c:17:4c:9e:93:db:2a:c5:38:66:88:bb:c0:0e:7f:8d:3b:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:05 2023 GMT
            Not After : Dec  6 00:47:05 2024 GMT
        Subject: CN=9C96193ADB8D0BC4C50E59EC5AF0BFA13870113F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:e7:b5:ea:b7:38:d6:ef:58:7f:66:56:14:
                    d2:86:b9:43:02:0e:e8:7b:0c:2c:ee:88:a2:f3:67:
                    6d:84:cc:59:15:a4:92:4f:25:78:4b:fe:61:38:c6:
                    5f:d8:3d:d8:29:22:f4:fd:8e:73:c9:b1:92:25:46:
                    7c:40:8d:63:23:e3:74:af:fe:60:fc:95:cd:71:94:
                    a4:b9:4f:2c:42:38:8b:f5:b9:75:41:e1:45:54:45:
                    1b:f7:b0:22:92:98:dc:a0:53:b1:32:1e:97:0f:05:
                    ac:0d:58:a2:29:63:c7:3b:3f:f5:a3:c0:1b:79:d3:
                    6e:7a:97:cd:fa:76:e5:17:b6:b9:63:43:9d:72:0b:
                    86:99:fb:ef:3e:4d:0b:fe:5d:4e:81:e0:a7:2c:81:
                    1d:6c:3a:73:cf:71:00:21:bd:24:8b:5f:5c:58:be:
                    77:80:d9:53:80:00:28:d7:b7:ae:dd:83:c1:8e:04:
                    f3:ea:91:fc:9f:91:23:d1:e6:21:01:54:b3:f6:65:
                    c2:f1:df:23:a0:61:dc:f6:1e:25:8d:f9:2c:db:ec:
                    9e:c6:31:33:f2:fe:10:01:ef:60:9c:83:25:83:c1:
                    e6:b9:f5:a3:47:03:01:ed:93:3f:9b:b2:32:cb:48:
                    42:3b:72:35:bd:36:ad:7e:2b:d3:40:6c:32:a6:ef:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:19:3A:DB:8D:0B:C4:C5:0E:59:EC:5A:F0:BF:A1:38:70:11:3F
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:61:3e:1a:c2:c8:3d:da:e3:9a:43:ae:71:9f:19:2f:65:91:
         d3:a7:c5:c1:57:bd:88:8a:91:b7:fb:b2:8d:13:74:84:e2:b5:
         ba:b9:7f:6c:1d:86:a3:28:43:d9:6e:e9:24:08:e0:b3:07:e3:
         2c:1d:cc:25:63:f3:1c:56:80:c0:01:52:48:04:d0:76:22:11:
         99:f1:5f:e7:bc:eb:4b:39:8e:d2:3e:33:0a:c5:e8:22:aa:aa:
         75:5c:80:4a:42:b6:8e:a3:38:65:05:27:58:33:0e:62:04:96:
         50:4c:5e:92:37:ac:05:39:0c:29:d3:07:25:1d:89:32:6f:2b:
         8a:b2:18:4a:b7:d1:85:73:be:47:3b:6c:93:29:53:e4:54:87:
         d8:69:33:ef:de:da:23:29:8c:f1:34:22:08:b7:98:a5:c0:d3:
         08:43:54:16:a1:85:82:19:60:40:48:ce:0a:7c:28:3a:33:79:
         51:fa:73:8c:28:ef:ce:92:6b:60:6f:d0:ec:4d:43:84:ea:5a:
         d7:c1:61:4e:1e:1a:ec:ef:9f:18:28:df:b8:a2:f9:cf:4e:93:
         63:6c:99:35:d1:57:77:a9:94:db:9c:09:ad:f0:cc:1b:1d:7e:
         fe:4b:4a:32:46:d2:f4:2f:bb:49:60:3e:63:ce:98:21:d9:d8:
         49:49:b9:91
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQSwXTJ6T2yrFOGaIu8AOf407688wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0M0NEODE1REE1OEQ4MEQ4QTRDODgwMjA1NTZDNDc0
QzE1MjBGMTAeFw0yMzEyMDgwMDQyMDVaFw0yNDEyMDYwMDQ3MDVaMDMxMTAvBgNV
BAMTKDlDOTYxOTNBREI4RDBCQzRDNTBFNTlFQzVBRjBCRkExMzg3MDExM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdue16rc41u9Yf2ZWFNKGuUMC
Duh7DCzuiKLzZ22EzFkVpJJPJXhL/mE4xl/YPdgpIvT9jnPJsZIlRnxAjWMj43Sv
/mD8lc1xlKS5TyxCOIv1uXVB4UVURRv3sCKSmNygU7EyHpcPBawNWKIpY8c7P/Wj
wBt50256l836duUXtrljQ51yC4aZ++8+TQv+XU6B4KcsgR1sOnPPcQAhvSSLX1xY
vneA2VOAACjXt67dg8GOBPPqkfyfkSPR5iEBVLP2ZcLx3yOgYdz2HiWN+Szb7J7G
MTPy/hAB72CcgyWDwea59aNHAwHtkz+bsjLLSEI7cjW9Nq1+K9NAbDKm713LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnJYZOtuNC8TFDlnsWvC/oThwET8wHwYDVR0j
BBgwFoAULUPNgV2ljYDYpMiAIFVsR0wVIPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8yRDQzQ0Q4MTVEQTU4RDgwRDhBNEM4ODAyMDU1NkM0NzRDMTUyMEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENDNDRDgxNURBNThEODBE
OEE0Qzg4MDIwNTU2QzQ3NEMxNTIwRjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvxwMA0GCSqGSIb3DQEBCwUA
A4IBAQCQYT4awsg92uOaQ65xnxkvZZHTp8XBV72IipG3+7KNE3SE4rW6uX9sHYaj
KEPZbukkCOCzB+MsHcwlY/McVoDAAVJIBNB2IhGZ8V/nvOtLOY7SPjMKxegiqqp1
XIBKQraOozhlBSdYMw5iBJZQTF6SN6wFOQwp0wclHYkybyuKshhKt9GFc75HO2yT
KVPkVIfYaTPv3tojKYzxNCIIt5ilwNMIQ1QWoYWCGWBASM4KfCg6M3lR+nOMKO/O
kmtgb9DsTUOE6lrXwWFOHhrs758YKN+4ovnPTpNjbJk10Vd3qZTbnAmt8MwbHX7+
S0oyRtL0L7tJYD5jzpgh2dhJSbmR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org