Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33362d3336203d3e20323639343137.roa
File:                     323830343a363434343a3a2f33362d3336203d3e20323639343137.roa (raw, json)
Hash identifier:          2CQZarD37yFwooYJUI6WO1qwzoFZ/IqvGUiyk/DizCs=
Subject key identifier:   F1:A5:6E:2A:C9:5D:29:C6:C4:D1:39:59:24:2E:22:51:92:1F:6E:79
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       14C44B2AA8D7F8D386D4FDCDF7BCC1BD88AFF109
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33362d3336203d3e20323639343137.roa
Signing time:             Tue 02 May 2023 13:47:47 +0000
ROA not before:           Tue 02 May 2023 13:42:47 +0000
ROA not after:            Tue 30 Apr 2024 13:47:47 +0000
asID:                     269417
IP address blocks:        2804:6444::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c4:4b:2a:a8:d7:f8:d3:86:d4:fd:cd:f7:bc:c1:bd:88:af:f1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May  2 13:42:47 2023 GMT
            Not After : Apr 30 13:47:47 2024 GMT
        Subject: CN=F1A56E2AC95D29C6C4D13959242E2251921F6E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:33:5f:32:20:50:17:ac:e9:df:e2:8f:99:
                    20:a1:9c:3a:f1:a8:ab:d8:e7:e3:1f:d4:cc:f5:a7:
                    ca:80:7f:ad:80:d4:fa:0d:5c:7e:78:d3:de:2f:3d:
                    40:0f:1a:c6:82:e0:ff:75:8c:18:a6:1a:a1:8c:4a:
                    4c:19:da:97:cb:64:b9:96:0f:52:22:f9:e5:23:8f:
                    09:a6:2f:9f:66:e6:22:9b:fa:39:91:cb:fe:a0:d3:
                    74:2a:f4:67:9f:cb:ef:6c:58:70:a1:9c:78:4e:b7:
                    84:be:7c:f8:c5:37:12:22:c3:aa:01:53:6f:d5:83:
                    45:26:6e:4f:8b:82:24:0b:3a:ce:dc:0c:ca:60:a8:
                    d9:3b:f4:89:05:57:fc:a7:a2:98:53:45:a9:c3:84:
                    85:4f:c7:a3:c3:a3:22:e4:fd:07:11:01:6d:c7:43:
                    10:66:b0:6e:60:21:03:7d:cb:76:cf:df:a4:46:0d:
                    c1:f5:b0:41:ff:79:21:1f:d6:3c:48:00:50:b5:e5:
                    75:e7:5f:3d:0e:23:fc:94:89:a3:8b:f6:fa:50:0a:
                    33:5f:da:d9:58:38:2f:84:d9:0a:74:2c:0d:72:d5:
                    26:de:4d:11:02:90:4e:59:7d:65:8a:33:3a:52:9b:
                    63:bc:72:f8:67:c0:f3:16:04:6b:48:4c:39:01:08:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A5:6E:2A:C9:5D:29:C6:C4:D1:39:59:24:2E:22:51:92:1F:6E:79
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33362d3336203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:c7:b7:d8:42:82:0e:7b:f3:b1:3a:c3:97:20:34:19:10:
         19:44:13:12:9e:9c:0a:db:8a:3c:8e:66:85:6f:37:3c:62:e9:
         da:f4:a6:44:4a:7d:08:e2:ba:5d:06:bc:d0:79:01:ab:ca:89:
         70:21:ce:be:e4:d6:53:e8:a6:eb:d8:9c:77:96:82:cc:09:00:
         88:83:0f:eb:40:44:fc:0f:f6:de:e8:79:32:33:ff:cd:5a:1a:
         93:08:44:37:01:1a:3b:89:d5:a6:91:ea:51:8e:3a:77:c9:02:
         21:1b:27:0d:0f:7f:b5:6e:4f:69:e4:a5:13:0d:93:0a:95:92:
         40:9b:e9:53:7f:8d:87:cb:09:06:36:3c:79:e3:c3:ef:db:d1:
         f2:33:bb:87:8c:40:24:37:f1:06:5a:72:33:25:9a:32:15:ad:
         29:bf:1f:54:48:ba:41:77:ab:7e:46:2d:66:6d:2a:a2:92:1d:
         6e:96:ad:e7:d5:ef:a8:e1:b1:78:9e:3c:b1:b6:88:76:78:3c:
         55:e9:2a:cc:43:52:3a:9b:71:97:cc:92:60:77:ad:49:e6:3f:
         c2:ca:29:0e:55:9c:20:80:b3:d7:aa:24:30:72:78:78:c1:34:
         01:32:0f:ed:37:09:b1:2d:c2:b7:b1:d6:88:14:81:1d:4c:e0:
         0a:8d:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org