Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a643030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a643030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          eA7izFKrBOv7E0RtmNLNkuVhu4rSFIr7W15Jmk+iDSk=
Subject key identifier:   D2:5C:5B:3F:BE:26:CE:B0:91:70:D1:1D:A6:ED:14:D0:9C:F4:EF:9A
Certificate issuer:       /CN=43BCFB40CE625A70E8B36669C865055B663C87AA
Certificate serial:       4C101BEA04597CD3696B5727E73913622B4325DE
Authority key identifier: 43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a643030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 26 Jan 2024 18:29:26 +0000
ROA not before:           Fri 26 Jan 2024 18:24:26 +0000
ROA not after:            Fri 24 Jan 2025 18:29:26 +0000
asID:                     269261
IP address blocks:        2804:61dc:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:10:1b:ea:04:59:7c:d3:69:6b:57:27:e7:39:13:62:2b:43:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BCFB40CE625A70E8B36669C865055B663C87AA
        Validity
            Not Before: Jan 26 18:24:26 2024 GMT
            Not After : Jan 24 18:29:26 2025 GMT
        Subject: CN=D25C5B3FBE26CEB09170D11DA6ED14D09CF4EF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:3f:d6:55:fe:3f:64:8d:78:d8:06:f5:7a:
                    02:ba:6b:ef:5a:8f:93:41:9e:38:9e:70:32:bf:fe:
                    41:32:0b:b2:d0:ea:78:75:d2:99:00:43:00:ea:ce:
                    5a:00:99:92:b1:79:53:1d:be:ab:12:ca:e5:57:12:
                    88:68:3f:45:b2:a2:ac:5f:31:a8:3e:4f:b3:e7:09:
                    5f:82:5c:ec:9c:2a:ed:8b:e1:42:f1:ef:e1:07:28:
                    f0:3d:0a:e6:2c:22:0b:99:bb:2f:32:a1:c8:5c:e2:
                    eb:07:28:41:0b:99:90:56:1f:61:26:18:e8:3b:eb:
                    81:ba:3d:86:03:9c:39:9a:b4:30:b2:2d:02:4b:b9:
                    a8:fe:a6:99:4c:a1:d3:8b:36:47:ee:aa:52:63:b8:
                    86:80:c9:a5:87:86:ce:df:f8:ce:28:30:db:65:81:
                    79:45:dd:67:85:2a:f4:f1:ab:e1:fc:91:e7:a8:56:
                    dc:f0:dd:c2:33:35:42:6a:6e:2b:a6:cf:1a:9c:f3:
                    9d:9d:3f:1a:4f:8b:e1:2b:10:e8:a3:37:9a:f5:05:
                    7f:a0:bd:cb:8d:ab:2f:d2:b8:4c:e3:8c:57:b6:bf:
                    e8:93:a5:4c:57:f4:b0:a0:5e:e2:d4:f1:72:31:e6:
                    01:d3:a6:da:1a:56:f2:a5:76:90:a0:65:ff:2a:4c:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5C:5B:3F:BE:26:CE:B0:91:70:D1:1D:A6:ED:14:D0:9C:F4:EF:9A
            X509v3 Authority Key Identifier:
                keyid:43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/43BCFB40CE625A70E8B36669C865055B663C87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a643030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:e1:da:cd:dd:ea:61:73:7b:55:e1:fa:6e:9a:94:bf:fb:
         4f:cd:14:44:cf:24:ff:ac:a3:89:dd:e0:91:ad:a4:51:7a:9c:
         ac:4f:fe:5d:3b:ac:c2:67:25:4b:80:b0:99:c2:90:f0:03:c1:
         4c:a5:96:eb:4b:d7:e9:02:a8:e8:66:3e:1c:d5:17:37:b7:db:
         f7:3d:b1:51:cb:58:be:98:f9:e9:6c:e1:15:c9:72:10:d8:1a:
         7f:d0:4b:c2:9f:57:8e:31:04:6a:c3:7b:30:08:fe:a7:0c:ad:
         40:fc:6c:15:3b:88:63:a2:f3:97:f0:df:13:c9:46:d2:b4:03:
         36:89:f6:45:ae:df:9c:94:39:74:b4:a9:fc:d7:cb:cc:50:87:
         64:00:f9:68:c2:04:22:c4:75:9f:d6:71:12:3e:47:5b:4f:22:
         2c:a2:f5:05:2b:90:2f:49:43:78:05:c5:64:18:3f:55:85:13:
         d7:06:77:31:17:b9:24:29:b0:3c:f1:65:1b:b2:56:cf:04:93:
         8f:24:16:08:ac:c0:84:a5:62:77:4c:1d:c4:fb:48:75:ca:70:
         ba:4a:d3:7b:c5:cf:a1:f1:18:8e:5d:0a:ae:62:93:a9:c7:82:
         c9:18:45:f4:ce:ac:bf:b1:1b:56:da:c8:39:59:0d:93:e1:8b:
         37:62:e1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org