Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d3438203d3e20323635313131.roa
File:                     323830343a333330343a3a2f33322d3438203d3e20323635313131.roa (raw, json)
Hash identifier:          dNIPVioSnfeUB6oSD2ZDbjXuNLaXJgKmANbmaIPKG9Y=
Subject key identifier:   99:BE:D4:27:AD:70:A6:46:08:4C:1E:FE:5C:D4:A7:77:77:B6:C9:FB
Certificate issuer:       /CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
Certificate serial:       03C356B6F4CC80693617D7B49F286701AEE47763
Authority key identifier: 43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d3438203d3e20323635313131.roa
Signing time:             Mon 05 Feb 2024 19:37:52 +0000
ROA not before:           Mon 05 Feb 2024 19:32:52 +0000
ROA not after:            Mon 03 Feb 2025 19:37:52 +0000
asID:                     265111
IP address blocks:        2804:3304::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c3:56:b6:f4:cc:80:69:36:17:d7:b4:9f:28:67:01:ae:e4:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
        Validity
            Not Before: Feb  5 19:32:52 2024 GMT
            Not After : Feb  3 19:37:52 2025 GMT
        Subject: CN=99BED427AD70A646084C1EFE5CD4A77777B6C9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:b2:9d:e1:15:f0:a3:c3:a5:06:8d:98:00:
                    8f:8b:10:3d:79:e7:00:04:d4:ec:f7:4f:ea:ec:5a:
                    59:b4:75:cc:04:f6:b9:cd:c3:08:f1:bd:76:99:b3:
                    ff:7c:c9:72:ee:bd:c1:e2:4d:ed:79:41:40:f2:cb:
                    00:f2:1e:69:4f:e3:17:77:38:ad:2b:2e:60:36:55:
                    d1:07:57:36:bf:bd:54:9a:87:ac:eb:cf:71:3b:9f:
                    95:b4:1d:1c:4c:d6:44:18:11:80:9a:6a:2a:6c:eb:
                    18:bc:0f:aa:93:a6:c9:cd:98:86:1f:e2:c3:7e:73:
                    9b:50:9b:14:37:30:18:b2:22:91:ba:24:57:9b:94:
                    ad:a3:e6:9e:b7:10:76:b2:f7:fd:3f:23:fd:c6:90:
                    09:1e:41:64:03:c2:f5:df:09:ad:2e:91:b2:4c:ec:
                    13:49:6a:e2:8b:ba:55:8e:3f:78:37:69:ae:fb:18:
                    13:56:b9:72:62:a7:86:4e:c4:a5:9c:51:c2:c7:b0:
                    e4:33:f4:ca:83:f8:13:ec:fb:c9:03:66:36:36:da:
                    f7:55:ac:bc:6a:8b:c8:3f:08:96:37:b6:94:82:7d:
                    a2:ab:8d:99:70:3a:93:4d:70:2a:3b:90:08:36:6b:
                    1f:b9:00:99:c2:51:dd:e4:b2:52:52:14:c8:e9:d5:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:D4:27:AD:70:A6:46:08:4C:1E:FE:5C:D4:A7:77:77:B6:C9:FB
            X509v3 Authority Key Identifier:
                keyid:43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d3438203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3304::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:00:b6:7e:34:7d:ce:ec:99:11:7b:8e:cb:73:57:d1:88:
         d8:94:a5:81:5c:96:57:a9:f8:7b:d4:d5:31:f6:9e:6c:ee:d1:
         56:39:b0:56:5d:26:ae:1f:60:cc:e0:91:99:23:a6:90:36:b8:
         31:81:b6:fc:9c:e4:b9:bc:bb:da:06:da:bd:8e:cf:de:bb:70:
         77:00:03:42:20:9d:7b:76:f3:96:8d:18:e8:a1:99:da:6d:8e:
         92:ec:69:e5:b6:54:2b:2a:87:b8:8f:50:d1:eb:6c:17:2a:46:
         64:c6:05:13:fd:9e:05:67:d2:58:0f:49:ab:8a:0d:5b:96:1a:
         a0:71:6f:dd:81:bd:f2:f6:6e:20:1f:d3:5a:d0:79:7c:9f:49:
         82:f1:6f:84:3e:2c:16:35:0e:07:f4:f3:f4:85:8b:dc:57:0c:
         ac:b0:1f:c7:92:be:84:09:16:3c:df:3c:29:17:63:ab:e7:36:
         10:55:9f:87:ab:cf:08:e9:cf:78:68:f5:18:46:98:5d:52:69:
         4b:04:54:81:86:f8:e7:dc:cb:d6:87:be:1e:e3:4e:8d:d2:46:
         31:1e:d0:1f:58:c4:5f:eb:71:aa:1c:05:ca:f2:5f:a2:de:d3:
         ed:fd:3d:fe:82:69:9d:c4:a5:0a:78:a0:dd:83:68:aa:91:dc:
         4f:92:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org