Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          mUrs/hTh+YTcmGPQ1EqaQcxZLAAR5u11LpaWlipkYqg=
Subject key identifier:   00:B8:A5:DC:70:E2:8E:66:8E:C9:09:A2:3B:A1:21:79:27:8B:DF:02
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       5009102B788EBB04FCBA0179EA1152BA8482F5A2
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:46:37 +0000
ROA not before:           Fri 08 Dec 2023 00:41:37 +0000
ROA not after:            Fri 06 Dec 2024 00:46:37 +0000
asID:                     268296
IP address blocks:        2804:4efc::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:09:10:2b:78:8e:bb:04:fc:ba:01:79:ea:11:52:ba:84:82:f5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:41:37 2023 GMT
            Not After : Dec  6 00:46:37 2024 GMT
        Subject: CN=00B8A5DC70E28E668EC909A23BA12179278BDF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:a2:a1:0f:5f:bc:9b:e7:1a:3c:8c:bf:9d:
                    75:27:75:51:3d:a2:b7:a8:f6:c2:82:f3:53:00:f5:
                    a4:09:93:51:01:b5:e6:e6:46:f3:f7:03:eb:ce:81:
                    46:83:1f:0e:30:b1:b8:02:0d:76:ba:bf:9f:5e:a9:
                    21:b3:95:a8:cf:1d:8d:34:ae:fd:6a:16:08:1e:5a:
                    f6:c8:08:95:9b:be:45:3d:06:65:ee:7a:b3:87:d5:
                    ae:10:0d:b0:12:4c:e2:d5:c3:28:3d:b8:7c:09:3f:
                    ee:bc:77:03:1f:21:f0:88:da:fc:ef:42:4f:8b:57:
                    ba:5f:bc:65:0d:a4:7a:24:95:77:29:92:1f:ac:ee:
                    c1:0c:d5:83:1a:de:a0:eb:76:ac:bd:ff:bb:01:2e:
                    20:cc:bc:29:43:14:a3:2e:77:2e:cd:fc:28:55:3d:
                    cf:0e:8b:86:3e:a7:63:9a:fa:b0:6f:29:37:55:1b:
                    6c:a9:28:76:f8:eb:03:13:56:21:9d:db:8e:eb:b0:
                    76:6f:09:99:ca:f7:fb:bc:6d:ea:0e:74:a4:4b:05:
                    7f:9c:b4:1f:f8:0e:f9:fb:03:1b:46:66:73:14:ea:
                    c7:15:f4:12:44:1c:bc:c4:18:94:7a:c8:21:47:98:
                    8f:e5:3f:d9:dc:90:d4:7f:35:67:58:9d:ed:a1:94:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:A5:DC:70:E2:8E:66:8E:C9:09:A2:3B:A1:21:79:27:8B:DF:02
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:86:8e:9c:c3:97:d0:6f:9e:12:24:a9:e5:54:33:d6:0d:65:
         88:ba:76:04:6d:a8:ad:0f:d4:e0:60:ad:8c:ea:d7:6c:95:3e:
         e9:d8:c3:61:b1:1c:0c:0a:5e:8d:b5:a0:48:15:2f:50:8c:53:
         a9:61:40:6b:1a:4c:b1:85:c8:57:cd:f0:e3:94:8b:31:d1:59:
         6e:fc:76:b6:2e:93:bc:e7:05:bc:1a:16:63:f9:89:2a:87:ba:
         6c:63:57:97:90:59:86:d0:3c:cb:7f:ad:cd:b8:1b:15:f4:be:
         23:61:99:5a:9a:23:3a:e5:9f:f3:35:bf:cf:42:d8:72:1c:14:
         3d:d9:2e:37:69:99:93:f8:0d:5a:73:cb:82:2f:98:3f:c3:d4:
         02:0b:87:02:00:ed:1a:03:b2:bd:23:93:84:59:23:d6:9c:e0:
         36:3b:19:f0:2d:2d:ee:e3:af:d3:39:f8:06:16:d8:a9:70:0a:
         e8:90:5a:64:01:b2:2c:83:80:1f:bd:f8:dd:e8:a6:30:9c:b9:
         fe:6d:b5:eb:4a:20:cf:03:59:aa:66:ec:9a:52:73:1b:c2:b7:
         7e:91:44:3c:17:d7:78:19:ff:53:12:2c:f8:f2:b2:69:2d:dc:
         9a:da:f4:0d:b4:de:fe:cb:62:7b:27:29:6e:06:0e:71:a7:45:
         87:00:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org