Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          bXBoWL+4pTUgTVkj/qH+CxkfReXroUSuEbVpSY/bca8=
Subject key identifier:   72:9F:78:E4:C2:0D:B5:7D:AA:F8:77:94:66:C1:3C:29:A0:93:C5:27
Certificate issuer:       /CN=43BCFB40CE625A70E8B36669C865055B663C87AA
Certificate serial:       2F318FCC6C631E62E48F31D703C924CAAAEC89A8
Authority key identifier: 43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 26 Jan 2024 18:29:28 +0000
ROA not before:           Fri 26 Jan 2024 18:24:28 +0000
ROA not after:            Fri 24 Jan 2025 18:29:28 +0000
asID:                     269261
IP address blocks:        2804:61dc:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:31:8f:cc:6c:63:1e:62:e4:8f:31:d7:03:c9:24:ca:aa:ec:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BCFB40CE625A70E8B36669C865055B663C87AA
        Validity
            Not Before: Jan 26 18:24:28 2024 GMT
            Not After : Jan 24 18:29:28 2025 GMT
        Subject: CN=729F78E4C20DB57DAAF8779466C13C29A093C527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:cc:89:b3:5c:b7:88:82:7d:4f:dc:3e:b5:
                    c1:d4:41:54:49:36:47:60:bb:e3:42:77:38:71:47:
                    4a:39:fe:64:a8:41:6e:2f:4d:43:4e:f8:06:5a:40:
                    d5:0e:95:80:bb:d3:c9:2f:d7:a5:54:12:dd:d9:6d:
                    24:33:d8:50:9d:34:98:20:4f:08:7d:94:e3:52:70:
                    e3:8a:41:74:1e:85:fa:cd:9f:df:81:9d:f2:55:b2:
                    ba:25:03:ff:7b:ec:ef:37:0b:78:37:3d:0d:66:93:
                    de:aa:da:74:1f:c9:af:81:13:75:4b:f8:af:c0:d5:
                    c6:9e:97:22:dd:4c:5e:e7:86:92:1d:d6:ed:56:75:
                    14:0f:75:47:80:fe:b7:fd:81:e0:e9:65:3a:ca:a6:
                    2f:10:ab:8d:34:12:bf:d9:41:29:70:4c:cb:3e:25:
                    61:9e:f2:84:86:fb:64:f6:2f:b5:36:85:5b:cb:38:
                    8b:e1:b4:b2:af:3d:94:3b:81:3d:2f:f0:cf:ff:06:
                    9a:b2:4e:43:f6:e4:69:1e:ad:a5:ec:58:b2:70:ff:
                    b7:d5:a3:72:ff:08:a8:1a:52:9f:18:5f:bb:ef:75:
                    25:b0:a9:f3:70:83:41:48:25:e7:55:a8:d8:ec:6f:
                    03:2c:3f:6f:a3:d8:d2:16:b5:fa:61:f5:5e:56:1a:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9F:78:E4:C2:0D:B5:7D:AA:F8:77:94:66:C1:3C:29:A0:93:C5:27
            X509v3 Authority Key Identifier:
                keyid:43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/43BCFB40CE625A70E8B36669C865055B663C87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:a1:61:1a:7c:3c:8d:4c:99:bd:f3:de:84:b0:49:6f:0f:
         00:d7:be:28:d4:21:e6:0d:7f:61:22:e1:a3:48:14:30:f2:38:
         bb:30:85:9f:0c:03:d7:9f:9b:41:7f:a3:95:37:1b:cc:9c:5d:
         f4:6b:2d:bc:4b:ce:8b:07:e7:6f:bd:6d:3a:94:ff:4a:61:be:
         76:54:71:42:b9:0c:e7:7e:2e:56:33:e7:b5:19:15:19:7b:d5:
         ea:2d:30:a9:29:32:07:19:56:5d:88:1a:3e:ea:d5:fb:ac:da:
         52:09:44:f6:0a:3e:de:92:93:da:44:82:cb:4a:86:a9:2f:8b:
         2f:51:33:c8:3a:65:6c:25:9c:b5:60:05:b9:c7:f0:97:a3:d1:
         2e:fc:5f:60:f4:49:d7:f8:e6:58:6a:df:3c:fd:52:ae:df:1b:
         7c:a7:87:23:6e:3c:fb:fb:d1:78:e5:60:55:75:78:d1:09:a2:
         48:da:e6:f9:7b:bb:c6:04:3b:fb:3a:ae:dc:10:4d:98:94:69:
         e7:3d:62:09:8d:33:d1:20:b5:08:2a:6c:94:63:57:15:62:47:
         4c:e0:9e:84:45:27:18:6d:4c:35:e6:e5:b7:36:04:04:eb:1c:
         96:3b:c2:19:cb:4c:7d:b9:af:d9:04:44:0b:f1:5d:29:36:af:
         5a:e6:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org