Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          kx/tVuXZ9nsPlRs+oPP47oQW+wBNEE1btEpxsfbTUFo=
Subject key identifier:   64:AA:B2:08:0C:F5:2A:E4:BC:7A:AA:A7:9E:A4:43:F7:67:65:73:B5
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       56FDB60F940320B9A11A9D47F01D4A7F6BCF4EA7
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:13 +0000
ROA not before:           Fri 08 Dec 2023 00:42:13 +0000
ROA not after:            Fri 06 Dec 2024 00:47:13 +0000
asID:                     268296
IP address blocks:        2804:4efc:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fd:b6:0f:94:03:20:b9:a1:1a:9d:47:f0:1d:4a:7f:6b:cf:4e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:13 2023 GMT
            Not After : Dec  6 00:47:13 2024 GMT
        Subject: CN=64AAB2080CF52AE4BC7AAAA79EA443F7676573B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:31:c2:bf:f5:62:ac:ff:01:3a:9d:b1:29:
                    ce:1d:85:cb:3f:1d:a2:2e:f3:8b:bb:e3:be:cc:c9:
                    73:ff:88:9c:f1:15:5e:cb:1c:8c:db:b5:6e:67:1d:
                    9a:82:75:ec:1f:72:50:35:0b:b6:76:31:38:fc:c5:
                    60:7c:f1:eb:08:6e:03:2b:b6:22:fa:d6:39:ad:4c:
                    9f:7a:1d:46:8b:93:53:2d:ae:9d:ec:bc:94:f8:8c:
                    5c:ee:62:ab:ea:8d:ec:48:28:71:41:e0:a0:92:74:
                    47:12:49:eb:ea:f9:2e:70:ff:70:1f:f0:0f:5e:61:
                    60:d8:54:28:3b:6c:df:fd:67:5b:c6:55:38:b0:c1:
                    e2:f4:a1:dd:77:3e:11:d8:21:75:32:0f:1a:87:5a:
                    80:59:b8:d9:08:5e:1e:50:6b:ce:96:7c:78:67:58:
                    86:73:75:42:12:97:05:ee:32:84:ee:24:d2:40:1d:
                    2c:08:65:13:50:20:5b:b7:ee:c7:23:49:50:ff:9c:
                    d8:04:a3:bf:d7:74:2c:d7:83:26:d8:12:0f:13:8b:
                    ae:a5:fc:3c:5f:2e:17:97:0f:04:08:60:33:8d:4e:
                    30:2d:ae:4e:46:e1:99:22:fe:66:35:1e:7a:0e:8a:
                    5e:2c:6d:47:fb:eb:34:41:87:cf:27:5d:26:46:05:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AA:B2:08:0C:F5:2A:E4:BC:7A:AA:A7:9E:A4:43:F7:67:65:73:B5
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:8d:33:89:24:5d:5c:68:cc:3e:56:31:c4:fe:ef:50:34:
         f6:10:46:81:15:5e:93:20:e6:16:11:40:c5:4b:7f:2e:90:cd:
         81:19:45:98:db:0f:25:28:bf:bb:77:9a:13:e7:5d:3e:a9:66:
         eb:60:85:38:bf:8a:d8:4d:14:23:52:07:31:ad:3e:13:68:1a:
         c4:9c:ca:a6:2e:40:1b:40:71:92:4b:cb:0a:28:d5:1f:39:54:
         32:cc:e8:5c:17:0f:5d:2a:c8:be:c8:b3:43:dc:b7:bf:0d:e7:
         1c:80:6f:47:44:90:0f:40:07:a4:fe:e1:df:4c:fb:53:6d:54:
         ca:a9:7c:e0:a5:e4:e8:0c:31:4f:51:21:42:eb:d7:e3:8e:56:
         2f:d2:ce:98:6b:ac:b0:27:82:47:1f:96:d2:06:7e:05:c1:4c:
         c3:ca:01:fb:c3:24:c4:03:80:c8:02:02:9d:7e:de:71:74:2c:
         e2:e7:f2:ee:12:3b:53:57:b4:fb:52:78:14:47:c8:f4:56:71:
         31:3f:6f:f7:85:30:f6:d2:7e:b0:58:a1:dc:e2:68:b6:ca:5a:
         4e:93:a5:b3:db:93:5d:71:89:5a:1e:6f:53:77:07:f0:18:fb:
         ec:bd:66:01:7f:7a:c7:1f:08:80:ce:9c:25:64:e8:1a:d1:a2:
         2d:b7:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org