Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33322d3332203d3e20323638323936.roa
File:                     323830343a346566633a3a2f33322d3332203d3e20323638323936.roa (raw, json)
Hash identifier:          kyrAqKeazy4GysvYkbu/dsHiuG1LwSGL2PmIqutHwQE=
Subject key identifier:   49:9A:07:B0:B2:C1:78:2C:72:99:D2:71:C6:29:86:60:BD:AC:0D:A0
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       6B22053FCA5BE00404A1BEEAC52AE7004C0B28A2
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33322d3332203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:45:22 +0000
ROA not before:           Fri 08 Dec 2023 00:40:22 +0000
ROA not after:            Fri 06 Dec 2024 00:45:22 +0000
asID:                     268296
IP address blocks:        2804:4efc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:22:05:3f:ca:5b:e0:04:04:a1:be:ea:c5:2a:e7:00:4c:0b:28:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:40:22 2023 GMT
            Not After : Dec  6 00:45:22 2024 GMT
        Subject: CN=499A07B0B2C1782C7299D271C6298660BDAC0DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:b6:b0:6f:fc:e9:36:1b:6f:9b:23:cc:b8:
                    a3:e0:bf:2a:71:4f:a2:8a:1b:0d:cd:88:32:bf:b7:
                    3f:58:1d:f0:e5:04:ee:2d:4f:c1:d1:eb:f1:fc:ad:
                    c0:fd:b0:54:bd:a5:76:b0:11:90:58:3b:41:09:7a:
                    14:11:d3:d9:3a:3b:7e:07:09:fa:7a:82:b9:13:13:
                    94:d2:16:7a:9f:46:80:7a:79:f1:06:4b:e7:08:92:
                    93:c3:6c:fc:91:22:d0:55:fa:05:1f:4b:1c:2d:16:
                    59:9f:2a:28:26:aa:f8:e7:de:24:97:a9:16:5b:32:
                    3b:55:d7:63:37:86:8e:68:53:4c:5c:50:89:7b:29:
                    7d:3a:fc:ba:d0:7d:12:f0:8f:42:a4:e3:72:11:09:
                    99:08:02:f2:09:7d:86:97:c9:dc:c4:e3:df:56:05:
                    23:6e:1b:83:af:38:03:86:be:e8:41:67:14:4d:29:
                    e8:68:2b:be:3d:d3:60:68:c7:ed:0d:17:fd:a4:3b:
                    1a:51:64:7d:bf:db:eb:2b:61:ce:ce:7d:67:74:cc:
                    fb:ba:f7:e1:2a:56:1f:06:7d:32:41:a8:47:9b:00:
                    ce:13:91:cc:3a:df:d7:a9:44:ce:e0:d7:c0:e4:be:
                    55:3b:5e:f4:ba:98:51:4f:7a:12:70:6a:e9:65:d9:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9A:07:B0:B2:C1:78:2C:72:99:D2:71:C6:29:86:60:BD:AC:0D:A0
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33322d3332203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:3b:b0:7b:64:8a:ba:eb:5e:b2:45:5e:0b:01:63:1e:ce:
         d9:4b:7b:3c:c8:5b:9c:a5:bf:a3:31:2c:1a:00:fa:1f:05:5e:
         e8:ff:20:8a:32:38:66:b4:57:f1:43:0c:85:e5:1a:4d:c3:eb:
         87:69:d5:4a:47:38:44:3a:be:c4:f7:ab:92:de:7b:b4:73:2a:
         99:f4:f3:ad:06:79:8c:87:7b:0e:60:59:19:20:33:a9:39:dd:
         59:53:fd:c7:14:7a:31:87:c8:e9:82:d4:f9:bc:e2:c2:9e:02:
         55:97:c3:ec:2d:f4:ae:9b:66:75:7b:0a:7a:e0:4c:d8:e7:db:
         58:cc:e0:8e:a7:59:97:b6:4c:25:f2:13:b3:b5:41:87:81:14:
         a1:0a:62:82:81:3e:da:86:6a:d1:2c:c2:52:47:eb:38:ce:b7:
         1f:60:13:a8:d6:f7:ce:7c:5e:2b:a0:13:64:66:ba:52:22:0b:
         69:22:05:3c:ad:10:b5:2e:07:c6:23:9a:3d:15:4c:b7:50:b8:
         67:ee:34:f9:a6:86:fe:e0:4b:32:af:51:59:e0:de:7d:c1:79:
         26:23:5b:24:93:42:8c:27:ef:1e:0d:cc:f6:2a:a6:74:5a:99:
         11:e6:58:37:17:28:c9:70:df:9d:a2:74:e9:34:5d:35:ef:4c:
         02:63:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org