Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa
File:                     323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (raw, json)
Hash identifier:          NGpCrKP/nLCyctYHDtrRFsbYiab+AnUTPUeGKr6NJnw=
Subject key identifier:   95:28:9E:58:BD:88:64:96:6B:E8:8D:C7:0F:35:7E:F3:0F:11:AA:A2
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       2B0B37BB4E1EA9123B707508088594D71879EF85
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa
Signing time:             Wed 17 May 2023 00:47:17 +0000
ROA not before:           Wed 17 May 2023 00:42:17 +0000
ROA not after:            Wed 15 May 2024 00:47:17 +0000
asID:                     269417
IP address blocks:        2804:6444:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:37:bb:4e:1e:a9:12:3b:70:75:08:08:85:94:d7:18:79:ef:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May 17 00:42:17 2023 GMT
            Not After : May 15 00:47:17 2024 GMT
        Subject: CN=95289E58BD8864966BE88DC70F357EF30F11AAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:dc:38:2a:9f:7b:90:5d:2b:46:af:e4:be:
                    37:70:78:5c:aa:1b:d1:f2:b5:57:31:0b:8f:60:ef:
                    4e:bb:9d:4d:f8:2a:24:d1:46:99:f8:97:12:0e:29:
                    90:80:da:14:22:94:a7:0d:6f:fe:26:b1:0a:06:42:
                    b2:49:a9:b5:52:91:75:a4:df:ad:a3:bf:2e:80:35:
                    e5:8f:2f:7d:37:e5:27:0e:57:1b:85:7f:f3:74:0d:
                    1a:e4:b3:16:d7:4c:e2:7d:1f:3c:90:e2:a0:11:b5:
                    4f:6a:95:d3:3a:4b:2e:e3:80:5e:d9:c3:ae:22:f1:
                    9b:59:06:8b:fd:c0:1a:b8:f5:79:86:ba:99:26:1d:
                    e1:b0:1e:f6:72:5d:82:0b:c7:0c:a9:f8:2b:19:eb:
                    2e:59:4c:a8:33:d1:ea:0c:e9:5d:9a:5d:9d:91:43:
                    ba:6f:92:8e:ea:53:ec:ef:f7:33:51:07:14:94:e8:
                    3a:0f:8f:10:19:61:1b:28:53:60:b8:cd:cc:04:97:
                    05:1f:a1:7d:d7:97:2f:4a:66:02:44:71:bb:0c:f6:
                    ac:a3:35:b2:f9:0e:e0:42:70:2b:70:92:b8:76:cb:
                    37:1f:1c:2a:99:53:9f:d1:98:ce:34:cd:95:b2:6a:
                    1e:0c:7f:b9:66:f5:db:4b:e8:e7:8c:88:3a:be:f7:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:28:9E:58:BD:88:64:96:6B:E8:8D:C7:0F:35:7E:F3:0F:11:AA:A2
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:73:34:69:98:64:73:a9:e8:75:7c:16:0a:22:7a:14:45:
         4d:d4:c4:7d:78:dd:1e:9a:72:5d:17:d3:ed:a0:95:d1:8f:51:
         0c:1f:eb:ac:2f:01:47:4f:7a:a8:76:1d:5b:3e:fd:33:60:82:
         f1:b2:e0:45:13:50:f1:70:17:0c:fa:74:09:be:67:e7:f4:bf:
         01:53:f9:1f:d5:e3:7a:81:2b:94:78:b1:e7:bd:38:41:0f:48:
         9c:c5:c0:37:27:91:c7:06:d9:53:29:10:31:ad:b9:9b:ba:a6:
         67:89:03:25:a8:1d:b8:3b:85:31:6a:64:dd:d5:24:5b:15:fb:
         77:fe:8c:e7:9f:52:e5:f2:86:90:17:a0:98:b8:dd:48:c6:36:
         f1:56:0f:ad:e6:c5:07:53:ab:b0:03:b2:f7:3f:d6:b2:44:81:
         e2:59:1e:5f:5e:ef:cd:55:0a:e5:fa:12:b0:ed:d3:95:05:a6:
         77:95:23:e8:ba:bb:3f:81:6c:92:bd:e8:d6:f9:a7:0c:2e:fd:
         7a:fa:d0:7f:a1:c9:a5:70:bf:74:e3:d3:93:83:fb:dc:22:88:
         6e:0b:b3:16:87:ef:e3:4f:16:e7:40:90:a8:2c:68:12:bc:2a:
         47:a9:d9:2e:8c:f3:85:43:48:6c:4f:7c:8d:48:eb:12:7d:a9:
         c8:65:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org