Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a383030303a3a2f33332d3333203d3e20323635343633.roa
File:                     323830343a333438343a383030303a3a2f33332d3333203d3e20323635343633.roa (raw, json)
Hash identifier:          3nSjPlWu/JqDfa/5Bao/PubLRqNSeRseGt/OejNirgw=
Subject key identifier:   E3:95:57:99:70:DB:1A:6E:5E:37:35:C5:83:8E:11:4F:9D:55:9C:FD
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       3CD79766C860ECD4C731F0E9FA8F3F2995469322
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a383030303a3a2f33332d3333203d3e20323635343633.roa
Signing time:             Tue 24 Oct 2023 14:22:22 +0000
ROA not before:           Tue 24 Oct 2023 14:17:22 +0000
ROA not after:            Tue 22 Oct 2024 14:22:22 +0000
asID:                     265463
IP address blocks:        2804:3484:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d7:97:66:c8:60:ec:d4:c7:31:f0:e9:fa:8f:3f:29:95:46:93:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Oct 24 14:17:22 2023 GMT
            Not After : Oct 22 14:22:22 2024 GMT
        Subject: CN=E395579970DB1A6E5E3735C5838E114F9D559CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:f2:27:d7:a4:73:4b:71:db:c0:8a:ee:90:
                    ae:d1:b0:e8:e3:11:4d:ef:55:0e:2c:00:86:2c:dc:
                    ac:e4:87:45:55:b1:a2:b6:f5:98:16:89:09:a4:98:
                    13:4e:fe:3a:5c:9b:93:d8:23:09:66:4b:50:8d:27:
                    de:92:66:cf:f5:45:41:85:7e:dd:b5:6d:2b:b3:41:
                    79:c6:1a:82:cf:61:1f:24:fd:e3:d5:0e:ed:d6:05:
                    62:88:d7:a3:79:e0:0c:5d:8a:d1:f3:a8:d7:3c:5c:
                    39:f6:87:44:05:bc:54:72:26:a7:07:27:24:02:43:
                    27:5b:4a:c9:f6:8a:42:2e:87:33:6c:60:49:e5:8c:
                    ed:40:a6:cb:cf:65:4b:32:2f:ea:06:ab:6b:f3:1c:
                    08:9c:53:1f:01:55:59:4a:22:aa:04:63:57:c0:f2:
                    a4:7a:a5:66:84:16:1d:a5:8d:cd:c5:32:49:ee:63:
                    ee:34:e4:d9:81:45:06:d1:4e:7a:10:b4:d1:3f:32:
                    8f:50:70:40:21:0b:5e:f5:a7:a4:53:ae:bb:62:60:
                    c1:68:de:29:f4:c5:9d:4f:78:55:6b:65:b5:34:c6:
                    8b:74:f4:86:50:34:41:1e:2f:22:53:21:c8:38:38:
                    ec:72:b3:6f:a9:53:7f:c0:b2:e8:a6:11:60:89:19:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:57:99:70:DB:1A:6E:5E:37:35:C5:83:8E:11:4F:9D:55:9C:FD
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a383030303a3a2f33332d3333203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:df:f8:f4:7f:17:98:cb:c8:6f:7b:9a:fb:66:41:6a:d9:
         ce:91:dd:21:b3:f8:5f:01:6d:95:fc:f0:98:28:a1:0b:86:ce:
         ca:5d:ec:1c:18:4e:d6:9c:f8:09:99:76:22:33:15:82:df:d3:
         62:1e:db:17:ae:b2:ce:3d:cc:bf:5a:52:30:bf:d1:37:33:69:
         bd:16:e2:96:b6:24:c0:a1:3f:49:c7:04:80:9d:66:f0:4a:af:
         81:df:95:79:08:75:e7:ff:0c:c2:04:54:67:96:ae:49:4e:3c:
         ae:56:43:07:72:e0:78:d0:d1:3e:fb:7c:63:59:d2:fd:a0:3b:
         e7:e8:5b:c9:7f:8c:4b:16:09:92:1a:46:e0:b7:b4:ec:59:ab:
         4a:8b:a7:6f:6b:d7:c7:9a:9f:40:65:9d:05:9e:8a:d4:4b:4d:
         56:19:66:66:e9:38:1b:1c:36:2e:8a:9d:20:ad:3a:62:e8:46:
         34:c0:ba:05:84:12:18:26:5e:62:2a:9c:76:a9:19:dc:af:b3:
         8b:a0:24:f0:83:8d:61:5f:80:b0:75:a5:2a:53:85:fc:2e:c7:
         57:e1:a0:d7:5f:20:ac:99:ab:66:d6:cf:44:07:3b:27:83:a7:
         dd:ff:aa:5e:ee:34:db:da:fd:be:71:2a:96:75:0e:39:cd:0e:
         f5:cf:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org