Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa
File:                     323830343a363164633a3a2f33322d3332203d3e20323639323631.roa (raw, json)
Hash identifier:          wXUu4Kbj0fzgJYrV6ozHuB811LUmD40Muq2vYI2MD5c=
Subject key identifier:   1D:25:96:17:7F:CA:11:3C:01:DB:BF:52:A9:CC:95:D9:4C:29:69:5B
Certificate issuer:       /CN=43BCFB40CE625A70E8B36669C865055B663C87AA
Certificate serial:       1454A8C8AC46CB3839036C795BA17AD2B2B9C387
Authority key identifier: 43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa
Signing time:             Fri 26 Jan 2024 18:29:29 +0000
ROA not before:           Fri 26 Jan 2024 18:24:29 +0000
ROA not after:            Fri 24 Jan 2025 18:29:29 +0000
asID:                     269261
IP address blocks:        2804:61dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:54:a8:c8:ac:46:cb:38:39:03:6c:79:5b:a1:7a:d2:b2:b9:c3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BCFB40CE625A70E8B36669C865055B663C87AA
        Validity
            Not Before: Jan 26 18:24:29 2024 GMT
            Not After : Jan 24 18:29:29 2025 GMT
        Subject: CN=1D2596177FCA113C01DBBF52A9CC95D94C29695B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:59:06:9b:65:00:03:af:1b:59:20:a2:78:
                    4b:07:a8:17:68:ee:21:1b:b0:68:86:7a:e8:36:2e:
                    42:d4:2d:e3:9b:07:5d:b4:93:5a:54:7d:c2:7e:60:
                    e1:5b:07:c1:7a:03:f7:e6:11:d5:df:48:b1:31:c8:
                    2b:36:d5:2c:c1:09:75:e1:e1:b7:fb:4f:2c:56:8b:
                    7c:2b:6c:38:28:2e:cf:5e:eb:4f:ce:44:8f:25:8f:
                    a8:05:83:66:39:c2:85:cc:f9:52:c6:4f:86:73:dc:
                    bc:2f:38:b1:ce:6d:65:1f:5f:de:04:46:9c:5d:89:
                    ce:15:bf:61:33:fd:24:cb:69:51:92:de:a4:73:30:
                    55:9a:be:93:2e:64:46:8f:b0:e1:28:e1:9b:40:8a:
                    82:35:a2:cc:b5:95:fe:aa:97:a7:e0:4f:97:2f:c1:
                    a4:6a:c5:8d:59:f6:f3:7e:32:5f:18:08:bf:c3:a1:
                    3a:4e:48:4f:33:e4:b5:25:fa:d7:fa:86:c6:62:e9:
                    fd:36:d0:a7:22:c6:a9:20:79:2b:d1:e0:52:c7:78:
                    9b:59:8c:47:3e:90:28:0f:f3:70:c0:18:8e:48:4b:
                    70:dd:7b:5f:9b:61:00:1d:d6:af:f2:ea:13:7f:f7:
                    98:6b:7d:02:5e:24:41:ff:36:5f:ee:0b:2f:50:31:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:25:96:17:7F:CA:11:3C:01:DB:BF:52:A9:CC:95:D9:4C:29:69:5B
            X509v3 Authority Key Identifier:
                keyid:43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/43BCFB40CE625A70E8B36669C865055B663C87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:b6:09:c3:be:fb:7b:9d:d0:37:6a:36:c2:57:47:9c:cb:61:
         af:41:e9:8b:18:c3:f2:e4:06:d1:1a:6c:f9:ad:9a:32:f5:04:
         22:72:3b:5a:5c:0e:aa:3a:4b:ff:ec:ca:2f:06:95:73:23:9b:
         3e:19:b0:bb:cd:66:54:ac:a2:04:f2:37:8c:e1:a9:1d:cc:e5:
         fb:b9:40:36:62:80:ad:c4:7d:fd:ed:66:e7:93:e4:fa:72:dd:
         64:9c:85:4a:4d:ed:f3:53:db:74:51:43:b7:ee:27:ca:2d:33:
         7d:83:a4:22:b9:5a:09:89:46:88:29:09:70:5d:04:02:92:16:
         10:ce:96:72:c3:20:16:42:d7:1a:dd:07:79:fd:61:89:27:35:
         24:db:1b:94:81:8f:88:43:75:f0:23:d4:25:ff:4f:5a:d2:c2:
         33:e3:e7:8c:69:e3:b7:22:d5:16:86:db:50:d7:09:06:41:b7:
         34:8e:13:f9:3f:af:56:29:7c:4d:52:f7:80:bb:a5:2e:e8:ec:
         43:b9:2b:81:c9:d6:8c:29:91:b7:91:47:1e:75:7c:05:bf:9e:
         2c:9a:c1:b0:8b:cb:9d:35:45:cd:5e:15:6b:b9:5a:13:d8:59:
         93:a9:8b:35:a6:31:c2:fc:fa:6a:97:25:8b:d6:1e:22:cb:b9:
         65:86:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org