Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa
File:                     323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa (raw, json)
Hash identifier:          pK3U0XkkxPuqJ0GQmht09CrCZdTKYnYwxK3hYPFeU8o=
Subject key identifier:   9A:D8:99:05:90:D3:BF:CD:48:77:E6:D1:DC:2F:C2:8F:85:F6:12:76
Certificate issuer:       /CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
Certificate serial:       76EE4729AE10A35C290B286E4AEF60D191A3079B
Authority key identifier: 91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa
Signing time:             Sat 09 Dec 2023 17:51:36 +0000
ROA not before:           Sat 09 Dec 2023 17:46:36 +0000
ROA not after:            Sat 07 Dec 2024 17:51:36 +0000
asID:                     267629
IP address blocks:        2804:4460:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ee:47:29:ae:10:a3:5c:29:0b:28:6e:4a:ef:60:d1:91:a3:07:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
        Validity
            Not Before: Dec  9 17:46:36 2023 GMT
            Not After : Dec  7 17:51:36 2024 GMT
        Subject: CN=9AD8990590D3BFCD4877E6D1DC2FC28F85F61276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:1a:29:6f:73:14:d4:ca:4a:c3:38:89:f8:
                    0d:c3:8e:e9:df:67:70:b3:da:96:77:e3:7e:72:de:
                    e2:83:0b:46:44:ee:1a:9c:8e:1a:ab:0d:8d:cd:00:
                    00:d6:74:9a:7c:3b:c9:d5:77:90:b5:e4:fb:97:19:
                    8d:34:ba:f3:aa:37:1f:03:32:c8:50:67:c3:ae:68:
                    fa:d2:08:d0:b3:fb:48:48:86:27:00:11:fe:f2:c9:
                    fc:bd:91:3b:a3:89:4d:be:70:a6:d2:d2:3f:8a:6c:
                    75:b5:da:fc:eb:0e:25:d7:1a:1e:5f:a7:03:4d:b5:
                    fc:ea:e2:ee:6a:7f:a0:90:de:18:9a:92:15:dc:57:
                    13:3f:83:99:18:3c:ac:bb:ce:95:e4:0f:b6:c0:b6:
                    c2:a0:1e:e6:c5:de:89:4a:db:d2:3d:1f:a8:f1:00:
                    e3:07:c5:9b:b7:b1:29:7c:a8:a0:21:0b:d3:21:17:
                    64:fd:dc:7a:7b:1e:24:8a:a2:e3:cd:01:97:a3:35:
                    c0:01:b5:45:d3:ba:27:ba:10:aa:8b:15:da:6b:cb:
                    e5:99:51:37:19:bc:82:e3:0b:26:84:80:f8:6f:d9:
                    41:1b:dc:1c:f0:7d:68:d0:3b:0a:4c:2e:61:77:08:
                    3c:66:b0:26:9f:91:4b:15:d9:a5:29:0b:1a:99:80:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D8:99:05:90:D3:BF:CD:48:77:E6:D1:DC:2F:C2:8F:85:F6:12:76
            X509v3 Authority Key Identifier:
                keyid:91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4460:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:11:70:cd:25:14:04:d0:3c:02:37:2c:e6:0b:06:30:1e:
         09:86:b8:a8:78:31:b4:3c:ff:15:6c:82:8f:9a:f5:af:59:c7:
         29:21:ea:6b:1e:df:72:88:74:90:97:3b:42:ff:bc:51:3b:1e:
         d8:d3:71:ca:54:e7:a7:d0:c5:8e:dc:6b:0a:f6:52:89:6f:04:
         ca:8e:9b:f1:8e:c2:0f:5d:cf:7f:b7:77:69:c5:13:34:ec:38:
         34:78:06:31:0b:dc:57:c0:c8:cf:c8:4d:46:4d:c3:a4:f6:d2:
         d6:dc:64:af:61:f8:b9:91:1b:8a:92:d9:66:54:c9:7f:32:d6:
         0b:a6:4a:ce:c7:ad:17:82:dd:84:5e:9d:bc:f0:1d:4d:c3:3e:
         75:18:48:38:4c:05:a7:86:c3:b5:8a:4f:92:e5:19:a6:31:ae:
         59:f0:fe:e7:f5:81:53:4f:0c:1a:9c:26:e6:01:f4:77:46:e2:
         29:96:a5:5b:d4:ee:0f:f0:18:28:dd:f7:8c:ef:85:09:1e:66:
         f9:48:4e:75:57:6a:99:e3:74:bf:cd:65:bb:d9:a0:b1:7d:f4:
         f3:1a:d4:e4:d3:c2:0e:70:77:00:b2:e8:53:3e:ee:d5:f5:63:
         b2:38:b5:6c:6b:08:64:2d:73:b6:30:6a:b0:52:8f:bb:dd:ef:
         b3:08:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org