Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          zGpKzd+D/SYRhbmHREh99EFbIQ3WI32q4plzdd3o82g=
Subject key identifier:   5C:54:21:E7:E7:BC:3F:D0:5A:75:14:5F:0A:BC:E5:64:91:9C:51:94
Certificate issuer:       /CN=43BCFB40CE625A70E8B36669C865055B663C87AA
Certificate serial:       4ED6B38C89DDA1F6D85F288213B8794C2310C38D
Authority key identifier: 43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 26 Jan 2024 18:29:28 +0000
ROA not before:           Fri 26 Jan 2024 18:24:28 +0000
ROA not after:            Fri 24 Jan 2025 18:29:28 +0000
asID:                     269261
IP address blocks:        2804:61dc:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d6:b3:8c:89:dd:a1:f6:d8:5f:28:82:13:b8:79:4c:23:10:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BCFB40CE625A70E8B36669C865055B663C87AA
        Validity
            Not Before: Jan 26 18:24:28 2024 GMT
            Not After : Jan 24 18:29:28 2025 GMT
        Subject: CN=5C5421E7E7BC3FD05A75145F0ABCE564919C5194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:ad:07:b4:04:b4:af:e6:08:c3:98:81:aa:
                    af:9a:24:14:de:fb:f3:b6:fe:8e:8e:b1:25:be:03:
                    e0:70:32:f3:a4:4d:1d:86:5d:44:d5:9d:4d:7c:36:
                    bb:94:c7:7f:2e:c4:74:9d:d9:1b:bc:dd:f9:2d:90:
                    12:34:fe:63:b9:d8:eb:c1:ed:a0:b1:3b:48:52:7c:
                    2b:e3:e4:a4:5f:4b:6e:b4:c4:73:a0:c9:51:66:b8:
                    50:2b:3a:72:f0:eb:16:0e:43:e5:98:87:f4:16:5b:
                    f6:01:a7:68:4c:49:73:7a:da:af:3d:d5:6b:1f:65:
                    22:5f:5e:db:8a:ef:1f:e2:6d:83:f8:99:c0:3c:6b:
                    db:55:b3:18:73:ed:2f:33:14:85:e2:f1:4b:b6:df:
                    11:bd:2b:47:70:15:03:d2:46:c6:54:f2:87:92:8d:
                    66:b9:c0:96:05:83:7e:35:96:ee:38:22:60:21:7e:
                    10:e5:61:d6:da:a5:63:bd:8b:fc:95:d2:52:c5:a6:
                    ae:67:8a:f1:ca:8a:77:07:f8:43:16:db:8b:78:3f:
                    17:e4:11:3a:88:37:91:9f:47:8e:50:ee:64:1e:4f:
                    a4:99:59:ea:0e:de:45:74:8b:ae:bb:45:bd:5f:bd:
                    bd:d5:9e:9d:6f:ca:0a:1a:a3:6e:f7:75:b2:35:91:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:21:E7:E7:BC:3F:D0:5A:75:14:5F:0A:BC:E5:64:91:9C:51:94
            X509v3 Authority Key Identifier:
                keyid:43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/43BCFB40CE625A70E8B36669C865055B663C87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:f4:87:f0:cf:08:29:a6:ee:aa:da:5e:1b:c8:94:5a:15:4e:
         04:d6:32:cf:d9:2c:72:92:33:b6:84:d2:d1:de:52:4f:a7:90:
         1d:c6:96:88:9b:4e:02:82:08:48:ef:f5:79:7d:11:f1:22:d4:
         f5:4f:7b:79:1c:e7:c4:78:49:0a:a0:40:6b:32:c8:3b:38:0c:
         9f:72:fc:cd:0b:d9:d7:a9:a5:47:88:31:41:8f:ff:00:87:05:
         5d:d6:50:51:fd:6e:47:a6:d4:28:a1:99:2c:14:51:6d:93:d0:
         f4:1a:4c:46:d0:03:88:42:4d:a0:be:29:b4:17:a7:78:d2:63:
         e3:f1:91:79:ec:33:53:23:95:5e:b9:2c:2b:9c:d4:81:3c:2d:
         10:81:b2:af:98:41:7c:45:fa:76:fe:f8:99:7a:dd:17:55:ec:
         06:07:30:25:ca:84:0a:6e:23:05:76:5e:00:50:3a:de:3a:79:
         96:cf:7f:cf:bd:13:59:bf:9b:60:fb:16:dc:cd:a3:89:66:24:
         66:78:3a:6e:63:92:39:88:64:d9:ef:a4:c0:5a:05:00:0f:d8:
         c5:84:72:9b:25:43:43:19:88:38:25:01:52:ba:c3:e5:16:06:
         0a:49:cc:55:93:10:a0:a3:ba:85:3a:54:86:c2:93:cc:9a:c1:
         1e:ff:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org