Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33362d3430203d3e20323639343137.roa
File:                     323830343a363434343a3a2f33362d3430203d3e20323639343137.roa (raw, json)
Hash identifier:          CzPISikxKRvwhmjIKXAP2DciH+NAJDMAYgIRT3rn9lY=
Subject key identifier:   50:DD:03:52:95:33:F5:1E:E2:EE:2A:5F:EC:20:38:96:89:C1:5A:BA
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       43912C6A19E498439B14B1172B7FB2427B24E396
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33362d3430203d3e20323639343137.roa
Signing time:             Wed 17 May 2023 00:46:57 +0000
ROA not before:           Wed 17 May 2023 00:41:57 +0000
ROA not after:            Wed 15 May 2024 00:46:57 +0000
asID:                     269417
IP address blocks:        2804:6444::/36 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:2c:6a:19:e4:98:43:9b:14:b1:17:2b:7f:b2:42:7b:24:e3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May 17 00:41:57 2023 GMT
            Not After : May 15 00:46:57 2024 GMT
        Subject: CN=50DD03529533F51EE2EE2A5FEC20389689C15ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:25:88:1f:ef:5a:eb:b2:ed:41:8c:2d:e5:
                    a0:55:67:bb:57:62:b6:47:58:c7:8e:3e:3c:9b:15:
                    01:f9:46:43:b4:6c:08:9b:02:da:06:a4:ff:b1:42:
                    40:f8:29:72:64:9e:ac:8f:01:5b:25:73:39:65:90:
                    33:c8:fd:d6:3d:b7:83:54:36:ba:eb:5b:de:cc:9c:
                    41:9c:bc:93:29:5d:c4:19:e1:1e:0e:5c:98:0c:94:
                    8d:94:75:5e:61:57:12:ed:7a:51:c1:58:43:fa:24:
                    3c:13:91:e0:1a:ab:e5:a6:dd:81:f7:cc:f9:1a:72:
                    c1:bf:be:e6:56:46:69:ad:a4:c7:db:c5:84:5d:43:
                    9c:9a:4d:81:f1:34:43:28:a1:1b:d3:44:a0:c5:d8:
                    53:bf:ec:78:d4:06:e3:52:6b:51:0f:3b:f1:88:d5:
                    d1:15:e4:59:ca:d2:ee:e7:dd:a3:64:0f:24:49:68:
                    0c:aa:0d:b5:32:90:47:7c:a6:d7:f3:dd:62:72:8d:
                    7a:11:60:81:e4:ff:ad:4d:53:7e:2a:75:99:b2:ee:
                    07:53:2c:bd:4b:dd:c0:67:87:a1:f9:bc:e1:5d:3d:
                    3e:c0:97:8a:1f:37:81:58:a8:b5:44:a4:ca:b9:ea:
                    10:62:06:fc:e9:62:07:48:09:b6:76:27:f2:fd:1d:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DD:03:52:95:33:F5:1E:E2:EE:2A:5F:EC:20:38:96:89:C1:5A:BA
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33362d3430203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:46:83:b2:4d:96:53:e6:a4:71:69:c4:c5:b9:79:14:5b:
         18:b6:00:61:c6:e5:3a:1a:4e:6d:07:4f:f9:ed:d3:94:b2:17:
         66:36:ae:6e:62:83:c5:2f:48:1f:28:5e:22:7b:69:ce:15:a1:
         6d:21:3b:fc:43:05:84:bf:8f:b3:f2:bf:92:84:db:c7:a9:39:
         d6:39:68:52:80:ec:81:35:69:a6:59:74:bd:b5:34:f8:95:6e:
         44:00:9e:aa:16:f9:dd:a5:a9:9c:85:73:1d:b3:c3:23:17:b4:
         ab:86:bd:35:35:80:a9:67:1a:fc:03:b2:6d:8e:4f:90:69:74:
         c7:3a:95:64:96:0b:d2:55:bc:12:08:97:3a:be:5b:10:c0:6c:
         bd:e8:30:7b:1e:b0:74:04:5d:16:27:92:ab:b7:76:7d:24:b0:
         c5:16:14:37:fa:ed:6d:e6:3a:01:29:87:11:4e:b5:a4:48:ee:
         57:02:42:c1:9a:47:84:4c:16:3e:e7:38:12:59:a4:ff:8d:8e:
         5e:24:88:69:09:a0:61:ef:d7:8b:e7:d0:b6:a5:0a:23:c9:32:
         a8:17:a9:d3:2f:c9:d3:10:53:a6:5e:44:a3:27:27:4d:71:14:
         e8:98:7a:fb:eb:be:65:58:d6:9c:7d:c6:64:0d:21:ab:ee:62:
         b4:9d:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org