Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          qvAZmkGGSJcH2nnP/ceTQ7hsdbmm+q1Ck3OGbcqDcYA=
Subject key identifier:   80:5D:35:8D:73:4C:1B:FB:E1:4E:D7:E2:AE:69:62:F8:1E:2A:2B:15
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       0896A11C8416AB87A8C89437A03D2541EF49A631
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:28 +0000
ROA not before:           Fri 08 Dec 2023 00:42:28 +0000
ROA not after:            Fri 06 Dec 2024 00:47:28 +0000
asID:                     268296
IP address blocks:        2804:4efc:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:96:a1:1c:84:16:ab:87:a8:c8:94:37:a0:3d:25:41:ef:49:a6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:28 2023 GMT
            Not After : Dec  6 00:47:28 2024 GMT
        Subject: CN=805D358D734C1BFBE14ED7E2AE6962F81E2A2B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:c2:0b:1b:c8:67:7a:86:ec:e2:46:24:ed:
                    5c:57:82:25:79:69:c3:61:a2:02:b8:91:e1:55:d6:
                    54:ab:36:f5:83:86:16:02:6e:34:dc:c3:41:80:f0:
                    87:c3:e8:bf:92:bd:d5:6f:fc:7f:e9:33:c2:b5:5b:
                    48:76:be:d6:94:97:cb:05:d3:07:a1:54:87:32:61:
                    61:7e:96:94:1e:d0:37:78:b3:55:03:b7:62:d6:89:
                    8e:00:eb:bf:e3:c1:3b:16:1d:5b:de:60:f1:48:a3:
                    4c:0e:66:a2:d2:9d:ee:e2:df:16:5a:81:92:2f:42:
                    11:71:01:db:3d:49:3b:1d:9e:bf:2a:8b:63:88:0b:
                    74:c6:05:6a:e7:a7:b4:42:71:c8:4e:ac:33:20:78:
                    01:bf:5b:4a:50:41:a1:38:94:6a:50:cb:1e:c8:0c:
                    a6:35:cc:a0:8c:bb:c3:04:2a:d1:7d:84:78:aa:a8:
                    f3:07:79:28:80:11:1d:1a:68:40:24:94:91:26:61:
                    84:8a:18:11:67:be:3f:9e:67:d2:2f:b8:c8:2e:f2:
                    39:73:14:ee:f2:45:8e:19:43:e8:c3:2d:05:cd:b2:
                    4c:7f:34:1b:b5:3e:60:c1:b4:8b:fd:d6:62:30:9d:
                    2b:b7:78:98:24:49:cb:e7:d4:52:94:31:0b:4c:ba:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5D:35:8D:73:4C:1B:FB:E1:4E:D7:E2:AE:69:62:F8:1E:2A:2B:15
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b0:bf:a4:7d:b5:77:91:73:95:a0:af:18:56:a5:12:84:31:0e:
         7d:00:99:d1:7d:de:b2:db:11:86:40:22:3c:a4:05:76:3f:e2:
         5c:b3:4a:ad:4f:83:9c:5e:af:7c:85:4b:8f:72:10:d5:1b:3f:
         80:26:84:ea:40:8d:01:04:36:a0:14:ec:90:39:f1:04:25:52:
         30:51:e7:89:55:71:90:82:a0:fe:30:31:a8:21:ef:ea:f9:7d:
         81:47:b2:9f:0b:f1:9f:b3:e9:cc:2e:b0:9d:aa:a6:dd:8c:05:
         4e:ac:19:ae:3e:65:d4:04:3d:00:e8:1b:6b:57:4f:54:80:5b:
         d5:4b:96:82:11:90:af:7f:0b:73:3e:75:1b:71:c8:63:2d:7c:
         f2:b5:a6:4e:9d:40:4e:b0:38:d4:6c:99:b1:72:9a:8c:1e:5c:
         d5:a5:a5:f0:e7:78:4f:0b:08:d8:e6:5c:5d:da:c5:e0:58:62:
         6a:d2:89:07:d5:79:fd:ee:4e:47:50:6b:6e:ab:a1:ec:fd:24:
         07:bf:4a:c8:7f:de:3e:97:b9:5b:34:71:3e:a8:bb:0c:e9:81:
         38:85:4d:f2:88:73:f4:51:15:94:e2:71:db:a9:1a:8d:6a:d1:
         73:e0:10:90:fd:9b:cd:8c:4a:d8:87:dd:ca:99:45:a2:19:49:
         86:3b:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org