Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          bfdzibvuYhJWE+v4V9frS8PMd75B+iQiwXT7Q6fc820=
Subject key identifier:   4C:9E:57:65:3C:73:7F:99:BF:34:6A:33:30:02:DC:AF:80:72:6A:BA
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       6CC6A50EAC85DCAF94AB7C1CC0EA242FEE0D6AEF
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:08 +0000
ROA not before:           Fri 08 Dec 2023 00:42:08 +0000
ROA not after:            Fri 06 Dec 2024 00:47:08 +0000
asID:                     268296
IP address blocks:        2804:4efc:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:a5:0e:ac:85:dc:af:94:ab:7c:1c:c0:ea:24:2f:ee:0d:6a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:08 2023 GMT
            Not After : Dec  6 00:47:08 2024 GMT
        Subject: CN=4C9E57653C737F99BF346A333002DCAF80726ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:c7:57:40:3f:d1:9a:14:b0:b0:de:fa:6f:
                    bc:51:58:d9:1b:a8:24:2d:d7:a7:16:f2:b3:1c:c9:
                    4e:40:28:f5:94:71:3a:80:22:27:d8:c1:49:46:1e:
                    99:85:d3:25:2c:9e:92:bc:8f:68:27:41:a1:15:1b:
                    20:7a:32:0a:5c:ba:6c:53:be:8a:d9:b0:05:56:b6:
                    25:2f:a8:6d:62:f0:7c:35:4e:32:d1:d0:a4:69:43:
                    4e:c6:74:c0:a9:18:0e:3a:d4:4c:de:d4:2d:17:5b:
                    51:28:28:21:c2:5d:60:31:62:2c:c1:31:88:bc:8e:
                    6b:36:dd:8f:eb:56:b9:4b:ad:45:e4:f3:9f:53:64:
                    8d:07:db:39:44:15:d7:e6:09:e1:fa:f3:4f:0a:7c:
                    1f:d4:fb:39:8a:1d:0a:36:f5:50:97:b3:9d:cf:d3:
                    b8:40:36:01:53:22:ab:0c:25:af:87:7f:37:51:d6:
                    e2:72:34:e4:b3:89:c9:0c:37:87:55:b1:68:16:f5:
                    7e:53:38:e1:fa:0e:0e:f2:84:c1:3d:3f:6c:07:5a:
                    22:12:ad:78:69:8e:3c:6a:cd:c5:4f:18:34:50:2b:
                    5d:c3:23:f4:ba:f3:53:bd:bc:86:6a:69:fd:1c:6b:
                    25:5c:ff:fc:81:9b:68:e3:c5:f4:9b:59:93:aa:84:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:57:65:3C:73:7F:99:BF:34:6A:33:30:02:DC:AF:80:72:6A:BA
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:3c:38:9a:11:14:0c:aa:79:37:e9:da:6d:51:f3:76:9a:
         52:a3:36:ee:27:5d:44:51:c8:f0:10:8a:e3:4f:b8:af:78:c2:
         f7:d0:e9:76:da:db:34:85:53:31:f1:ad:48:5a:61:46:70:41:
         b2:03:25:39:c9:e6:28:00:5b:ae:97:8a:42:73:3c:ad:e5:fe:
         d5:6c:10:60:c9:78:b3:ad:86:a6:26:66:3e:e6:2b:8c:57:87:
         1a:7c:d5:3d:c8:0d:6f:e1:53:ca:ce:77:96:6a:90:15:f4:a2:
         8b:ed:14:73:62:5a:63:a1:6e:bf:61:51:3e:fe:94:be:70:64:
         f1:ea:46:0e:67:ba:61:c8:b6:50:2d:b1:0b:4b:8c:24:4b:3a:
         c9:23:c8:ee:2c:d9:da:a0:ac:e1:90:83:22:67:39:b9:32:f5:
         a9:60:a0:aa:49:df:64:e2:19:af:c4:9d:a4:6f:a7:94:de:80:
         65:24:d8:27:e4:14:95:eb:21:e3:b9:f4:11:3c:08:57:17:2b:
         2e:6e:be:d8:c4:83:70:0a:a2:21:e3:31:48:e8:2f:5c:83:27:
         6d:26:3e:b6:06:1c:bd:f4:79:94:2c:05:ba:2e:94:5d:dc:a1:
         4f:48:93:1a:06:65:aa:62:aa:64:0f:e3:a4:f1:a7:f8:b8:c2:
         76:78:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org