Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          7Zp1EYZZItkxFIDH6TuJpR+rbvI6VM55rxG2Y6sZEyc=
Subject key identifier:   F6:8D:2F:24:E0:BF:84:29:80:54:CB:35:2D:D7:E1:3B:25:37:CA:51
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       2BB47C353DEBC305D4C3F35EBCC8703424834C0E
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:21 +0000
ROA not before:           Fri 08 Dec 2023 00:42:21 +0000
ROA not after:            Fri 06 Dec 2024 00:47:21 +0000
asID:                     268296
IP address blocks:        2804:4efc:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:7c:35:3d:eb:c3:05:d4:c3:f3:5e:bc:c8:70:34:24:83:4c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:21 2023 GMT
            Not After : Dec  6 00:47:21 2024 GMT
        Subject: CN=F68D2F24E0BF84298054CB352DD7E13B2537CA51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:c8:34:18:00:3e:ce:5d:d3:cf:2b:8f:d5:
                    5f:a2:6f:73:d1:52:8b:04:ac:f7:c9:e6:9d:3c:32:
                    71:27:8b:87:c6:53:8c:75:44:ae:d5:94:49:9e:64:
                    b7:fd:9b:46:d3:88:79:5e:c9:7f:84:ad:2e:85:56:
                    96:56:2d:39:38:1f:45:ea:a2:c1:71:0a:53:ad:ad:
                    ef:36:6f:20:27:98:07:6a:dc:55:9d:b4:92:35:17:
                    73:2c:5c:82:67:90:d2:78:af:b8:62:86:71:8d:89:
                    3e:a3:17:0c:89:26:90:89:a6:35:28:44:e0:80:7b:
                    01:5f:8e:23:e7:2a:c8:7c:55:ac:3e:46:02:64:a7:
                    9f:88:cd:9a:fd:7c:d3:68:d2:9b:ce:20:66:13:67:
                    f1:e0:d8:f1:a7:05:60:fe:c3:77:d6:5d:c8:2c:bf:
                    37:ba:8b:67:36:7c:1c:8e:4d:04:c5:bd:a4:7a:8c:
                    05:9a:82:f6:cc:7d:1c:4b:89:c4:09:ec:76:1f:a3:
                    ee:d1:92:ff:9b:c7:f8:6a:1b:e7:ab:0b:0d:ea:91:
                    03:89:35:98:22:40:19:d3:d4:c8:7c:b4:69:68:96:
                    ac:d0:18:2a:6e:06:ff:e8:4b:4d:c0:1d:62:2d:a5:
                    cb:71:3a:fc:c4:b8:2d:55:97:25:20:16:f1:ed:09:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8D:2F:24:E0:BF:84:29:80:54:CB:35:2D:D7:E1:3B:25:37:CA:51
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:08:9a:aa:5c:65:74:68:fb:53:91:6e:fd:a2:b8:79:2c:
         ad:ed:71:b7:77:af:e9:2d:81:e2:54:c0:23:67:ac:ac:fb:e0:
         91:2c:b4:8a:47:2e:59:c8:d4:c5:6f:d3:ae:84:64:e4:b6:0d:
         48:78:ee:d5:fb:99:48:c6:db:ea:96:e6:7e:35:12:a1:35:80:
         ba:c7:63:7a:e7:fb:1c:de:11:b0:ae:c3:ad:25:3d:67:10:af:
         c3:20:e3:f6:16:b7:f4:0a:dc:54:e0:1f:cf:33:8e:fc:d8:ab:
         fe:a4:bf:08:e7:c3:78:ec:b6:7a:94:2c:13:9b:fb:db:ba:28:
         16:c3:51:2e:0d:13:da:80:fb:dd:ef:0f:53:99:39:f0:ce:e6:
         d7:a0:49:c3:d8:92:39:70:8d:73:3d:bb:55:74:6d:50:19:da:
         83:9e:0f:b6:af:ea:7b:9b:ed:d0:78:4e:f0:28:37:7a:00:05:
         90:6a:a6:b7:ab:6a:4e:bd:82:b5:7d:0e:2a:98:33:82:95:0f:
         3f:f3:72:e3:fd:b5:bc:78:2f:fc:3c:c7:96:f2:d3:cb:0f:65:
         7e:39:ee:d6:9e:2e:c9:0c:6a:3f:e9:cc:6d:39:cb:0c:93:c8:
         e2:c1:64:d7:69:f5:3f:c7:fd:68:8b:67:76:d7:f2:7a:71:4d:
         a5:a5:f6:b6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK7R8NT3rwwXUw/NevMhwNCSDTA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0M0NEODE1REE1OEQ4MEQ4QTRDODgwMjA1NTZDNDc0
QzE1MjBGMTAeFw0yMzEyMDgwMDQyMjFaFw0yNDEyMDYwMDQ3MjFaMDMxMTAvBgNV
BAMTKEY2OEQyRjI0RTBCRjg0Mjk4MDU0Q0IzNTJERDdFMTNCMjUzN0NBNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI48g0GAA+zl3TzyuP1V+ib3PR
UosErPfJ5p08MnEni4fGU4x1RK7VlEmeZLf9m0bTiHleyX+ErS6FVpZWLTk4H0Xq
osFxClOtre82byAnmAdq3FWdtJI1F3MsXIJnkNJ4r7hihnGNiT6jFwyJJpCJpjUo
ROCAewFfjiPnKsh8Vaw+RgJkp5+IzZr9fNNo0pvOIGYTZ/Hg2PGnBWD+w3fWXcgs
vze6i2c2fByOTQTFvaR6jAWagvbMfRxLicQJ7HYfo+7Rkv+bx/hqG+erCw3qkQOJ
NZgiQBnT1Mh8tGlolqzQGCpuBv/oS03AHWItpctxOvzEuC1VlyUgFvHtCR+nAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9o0vJOC/hCmAVMs1LdfhOyU3ylEwHwYDVR0j
BBgwFoAULUPNgV2ljYDYpMiAIFVsR0wVIPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8yRDQzQ0Q4MTVEQTU4RDgwRDhBNEM4ODAyMDU1NkM0NzRDMTUyMEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENDNDRDgxNURBNThEODBE
OEE0Qzg4MDIwNTU2QzQ3NEMxNTIwRjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvywMA0GCSqGSIb3DQEBCwUA
A4IBAQCT1QiaqlxldGj7U5Fu/aK4eSyt7XG3d6/pLYHiVMAjZ6ys++CRLLSKRy5Z
yNTFb9OuhGTktg1IeO7V+5lIxtvqluZ+NRKhNYC6x2N65/sc3hGwrsOtJT1nEK/D
IOP2Frf0CtxU4B/PM4782Kv+pL8I58N47LZ6lCwTm/vbuigWw1EuDRPagPvd7w9T
mTnwzubXoEnD2JI5cI1zPbtVdG1QGdqDng+2r+p7m+3QeE7wKDd6AAWQaqa3q2pO
vYK1fQ4qmDOClQ8/83Lj/bW8eC/8PMeW8tPLD2V+Oe7Wni7JDGo/6cxtOcsMk8ji
wWTXafU/x/1oi2d21/J6cU2lpfa2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org