Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          y9MChQdjDKF6zGsx3gZhr0MnH+kPf5fKTCYzaVrXAqk=
Subject key identifier:   6B:6D:A0:E8:49:1D:B5:FA:80:9A:BD:E5:15:22:7A:A6:EE:1A:DD:45
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       64844E8AD9083B1C9496796A501DD3F5D902044A
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:35 +0000
ROA not before:           Fri 08 Dec 2023 00:42:35 +0000
ROA not after:            Fri 06 Dec 2024 00:47:35 +0000
asID:                     268296
IP address blocks:        2804:4efc:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:84:4e:8a:d9:08:3b:1c:94:96:79:6a:50:1d:d3:f5:d9:02:04:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:35 2023 GMT
            Not After : Dec  6 00:47:35 2024 GMT
        Subject: CN=6B6DA0E8491DB5FA809ABDE515227AA6EE1ADD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:a8:b4:7d:65:af:05:cb:d0:66:cf:9a:6b:
                    1f:58:8d:d2:ce:b4:8c:da:39:7c:23:5e:74:03:67:
                    65:05:a7:4f:49:0b:ee:00:e7:2f:f5:91:82:f1:74:
                    b3:86:a1:98:50:b4:92:9a:f7:c2:5e:f0:b9:8d:66:
                    7d:a8:2a:2c:ef:87:73:bf:a2:a7:7e:32:19:2e:bf:
                    2b:3a:5b:9c:9f:94:95:8a:2e:a3:dc:2b:d5:07:64:
                    4f:61:06:b5:31:67:ad:dd:38:cd:dd:d8:18:8b:56:
                    48:73:34:7c:76:aa:ee:69:b4:aa:04:fd:3a:f5:61:
                    d6:19:06:2d:63:48:33:0c:b4:ba:72:44:cb:4a:fc:
                    c1:06:bf:02:d6:85:77:e5:e8:f3:1e:ef:70:32:2f:
                    0e:c4:0d:7e:af:95:5b:02:cd:6a:7b:3a:3e:4d:73:
                    69:91:db:b4:88:55:72:00:5e:34:85:9b:76:b3:67:
                    49:7a:2f:e9:d0:b0:10:c0:14:7a:81:46:ba:63:23:
                    0e:d7:e2:22:7f:7a:7e:98:04:cf:8b:4b:58:e1:62:
                    dd:f2:27:fa:75:cd:57:93:4a:3d:35:4d:3d:94:9b:
                    f7:e2:85:c5:7b:61:bb:7a:d1:c8:25:63:38:52:83:
                    bf:23:76:cd:e7:17:d4:45:a2:6a:0c:0f:6a:ce:64:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6D:A0:E8:49:1D:B5:FA:80:9A:BD:E5:15:22:7A:A6:EE:1A:DD:45
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:db:6b:2f:4a:31:cb:7b:d4:6b:0e:d4:f5:77:40:f1:0c:
         3e:77:8f:de:69:c1:33:11:ee:b4:f6:e6:5a:8a:a0:f2:df:16:
         45:8d:5d:f6:65:31:7a:4a:83:47:59:31:65:bb:dc:4e:c9:3a:
         fd:9a:cf:48:9c:47:b7:0a:a3:c2:26:64:9b:74:11:e3:56:01:
         08:5a:e8:be:2c:b8:93:01:39:1f:fa:a0:56:89:03:47:68:18:
         12:b9:14:1a:f4:06:7b:65:cb:ad:30:db:19:87:85:44:55:66:
         b5:3b:6e:d0:73:48:b4:92:70:73:21:5a:91:10:de:32:91:3f:
         24:9d:4d:c9:f0:cb:fc:90:b6:11:05:92:f0:4e:34:66:39:b9:
         71:93:7e:4c:ba:b4:cd:5e:f1:de:5c:22:53:6a:32:e4:95:92:
         68:cb:37:17:27:21:15:02:7d:8b:0b:8c:9c:69:83:2a:c5:eb:
         f2:ed:65:54:64:41:44:88:ee:dd:2d:93:37:75:b3:43:d7:88:
         ed:31:d1:2e:2e:7a:ca:dc:2d:a2:4a:20:26:04:bc:4e:5c:b2:
         b8:89:23:52:1a:c8:aa:ba:18:84:09:69:6a:77:ef:c0:9c:32:
         c0:d0:ac:6a:29:e3:11:89:31:44:48:8a:5e:24:51:13:08:9b:
         5b:2c:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org