Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/323830343a333766343a3a2f33322d313238203d3e20323636343436.roa
File:                     323830343a333766343a3a2f33322d313238203d3e20323636343436.roa (raw, json)
Hash identifier:          DO4eo1zv6Sa6rDsG+ldp9vRFToKy4U0bdm8RL7IASv0=
Subject key identifier:   3D:0A:7B:71:A4:1D:6B:87:B3:5B:CB:10:BA:A8:66:53:29:D4:33:FF
Certificate issuer:       /CN=125CBECECAD354CA7573FC1CC176552F49EEDC6D
Certificate serial:       3886C90F9B96C0B1DD03E9E322AB7B28E7A948B7
Authority key identifier: 12:5C:BE:CE:CA:D3:54:CA:75:73:FC:1C:C1:76:55:2F:49:EE:DC:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/323830343a333766343a3a2f33322d313238203d3e20323636343436.roa
Signing time:             Thu 04 Apr 2024 04:27:26 +0000
ROA not before:           Thu 04 Apr 2024 04:22:26 +0000
ROA not after:            Thu 03 Apr 2025 04:27:26 +0000
asID:                     266446
IP address blocks:        2804:37f4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:c9:0f:9b:96:c0:b1:dd:03:e9:e3:22:ab:7b:28:e7:a9:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125CBECECAD354CA7573FC1CC176552F49EEDC6D
        Validity
            Not Before: Apr  4 04:22:26 2024 GMT
            Not After : Apr  3 04:27:26 2025 GMT
        Subject: CN=3D0A7B71A41D6B87B35BCB10BAA8665329D433FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:2c:ab:ef:dd:e0:2b:b2:9a:23:ae:f9:f4:
                    37:54:69:8d:c4:e1:04:7a:47:29:8d:27:34:f4:3d:
                    1a:91:30:af:bd:76:3c:a0:a8:3d:20:22:c2:d4:e1:
                    12:d4:1c:f5:7c:e1:6d:e4:ae:86:14:76:0d:a3:7d:
                    4c:8f:77:59:75:33:72:03:9e:c6:e9:20:28:6f:c7:
                    e7:e1:dc:ab:51:7f:aa:fb:41:5b:ac:9f:27:45:9e:
                    a3:fd:a7:99:dd:49:7d:1b:4d:9c:e1:c9:66:a7:e4:
                    a7:a0:c6:0f:d2:d7:13:7e:16:5d:d1:bf:94:1f:16:
                    88:33:07:22:81:a6:79:72:4c:97:d5:a1:0b:bf:e7:
                    3e:4f:e0:97:81:94:46:5e:53:70:c9:23:1a:30:ef:
                    92:cb:d9:e3:a0:b0:37:6d:a2:6c:e6:b9:47:3b:46:
                    c0:aa:af:14:8e:9b:b0:10:06:fe:15:27:0b:47:53:
                    7d:5e:5e:a1:88:b5:42:6a:e9:72:11:ca:68:cd:42:
                    a8:b5:e6:be:3e:54:bb:4a:25:8a:9e:b5:dc:dc:42:
                    23:96:9a:a8:35:3c:66:85:08:6e:2d:43:98:f9:92:
                    eb:4f:d9:c7:04:62:d1:f6:46:a8:02:f1:44:10:c2:
                    f5:06:6d:6b:e9:de:e7:02:10:b4:0f:bb:13:e4:09:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:7B:71:A4:1D:6B:87:B3:5B:CB:10:BA:A8:66:53:29:D4:33:FF
            X509v3 Authority Key Identifier:
                keyid:12:5C:BE:CE:CA:D3:54:CA:75:73:FC:1C:C1:76:55:2F:49:EE:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/323830343a333766343a3a2f33322d313238203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:bd:0e:7a:8f:6d:08:22:f9:5f:c9:bc:4c:47:6e:28:f6:
         73:99:3f:6e:98:f2:f7:aa:35:ac:54:41:10:54:b4:fe:47:02:
         92:bf:03:e4:8e:a9:39:d4:35:11:a4:19:da:67:6b:0e:4c:67:
         81:4e:e3:e1:d9:7c:38:7d:52:5d:57:0d:38:02:ee:ac:3d:61:
         97:a1:a7:33:7a:1c:2f:d3:39:da:bc:54:b7:22:d3:42:62:ec:
         19:cb:3f:20:1a:64:4d:a3:17:53:47:78:de:b6:56:69:8d:af:
         cd:08:75:3a:7f:17:a7:e7:fc:69:bf:f4:04:f3:bc:ce:26:b6:
         35:ac:a8:a2:e6:1d:29:fe:b6:0a:a7:6d:79:d3:9c:5e:6e:0d:
         2b:fe:3a:cb:a3:9b:99:0c:70:ef:8d:c3:0d:17:76:2e:90:57:
         ae:0f:26:9e:5d:e4:54:2c:dd:6f:0d:ae:6c:b9:c0:67:1d:ac:
         3c:63:ec:5e:a6:96:33:a6:86:36:72:7f:f8:60:c2:26:27:84:
         4d:d2:a0:3e:1a:74:f5:20:4b:53:38:70:a7:12:41:ce:69:d6:
         72:7d:83:8f:c9:17:12:ba:5f:29:06:00:27:2b:d2:a5:34:ec:
         1d:58:88:62:0e:a4:e9:61:b6:d2:54:56:f6:5f:4b:6e:55:a5:
         61:ab:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org