Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a383030303a3a2f33342d3334203d3e20323635343633.roa
File:                     323830343a333438343a383030303a3a2f33342d3334203d3e20323635343633.roa (raw, json)
Hash identifier:          VAQ51EdEAofrBLvImvpiyhf1lU/505R/Xf+AdlZckgA=
Subject key identifier:   AD:33:F6:3A:A1:F3:86:46:65:61:CA:12:6A:39:38:F8:36:EC:96:A3
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       2A9E7B9E1D5C3202191F004A3701B5DF5C640406
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a383030303a3a2f33342d3334203d3e20323635343633.roa
Signing time:             Fri 24 Nov 2023 12:44:48 +0000
ROA not before:           Fri 24 Nov 2023 12:39:48 +0000
ROA not after:            Fri 22 Nov 2024 12:44:48 +0000
asID:                     265463
IP address blocks:        2804:3484:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:7b:9e:1d:5c:32:02:19:1f:00:4a:37:01:b5:df:5c:64:04:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Nov 24 12:39:48 2023 GMT
            Not After : Nov 22 12:44:48 2024 GMT
        Subject: CN=AD33F63AA1F386466561CA126A3938F836EC96A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:8a:24:19:86:b0:1f:87:d9:27:4d:7d:46:
                    36:84:4b:a0:0b:37:54:20:96:6a:b2:13:1b:03:91:
                    0f:d5:fc:cb:90:33:f8:2c:94:38:7f:91:86:60:9b:
                    ce:ce:d3:e5:6b:24:38:28:2e:33:5b:db:6c:6e:05:
                    45:4e:38:e1:18:b7:24:21:dc:de:81:97:b6:84:76:
                    f1:b5:8e:4b:a2:29:86:77:d4:81:e6:ab:ea:3a:e6:
                    53:12:fb:c0:83:1c:f0:21:87:68:49:b8:1d:3b:39:
                    94:d3:4e:82:60:38:ad:76:cd:89:42:5d:af:c9:f2:
                    1b:a2:7b:52:40:0a:ea:b6:4c:8e:88:c3:68:dc:2c:
                    30:2a:80:93:35:df:89:8f:60:98:e4:c5:fc:af:0f:
                    8d:8b:de:c5:1d:6b:3d:09:b0:fe:17:7e:5f:0c:db:
                    f1:98:8f:aa:fa:cd:d2:76:51:fa:7b:02:a9:ef:48:
                    65:4e:d6:28:9e:4a:25:38:8d:83:9a:03:4d:a1:f6:
                    c5:79:c9:73:98:02:2d:fd:e0:01:ab:b1:b9:45:65:
                    67:07:78:cf:2d:d9:67:49:77:68:34:b8:ee:d0:a9:
                    94:cb:6e:da:42:4d:8f:c1:6e:ef:5f:ca:62:5f:b8:
                    33:21:71:fc:94:ff:f1:69:75:3c:14:84:07:fe:2c:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:33:F6:3A:A1:F3:86:46:65:61:CA:12:6A:39:38:F8:36:EC:96:A3
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a383030303a3a2f33342d3334203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:d1:ca:b6:f7:ee:7c:93:e0:f2:70:f0:9f:88:ee:57:d5:
         02:ec:6a:22:66:c9:2b:41:d6:4d:87:37:d2:ff:1d:30:30:63:
         13:6e:a9:a9:14:35:28:b8:73:df:f8:75:28:bd:5d:fb:2f:2d:
         94:f7:60:8c:4c:15:82:9c:02:0c:2f:cf:56:50:45:27:d2:31:
         e6:9c:25:54:4f:ef:e5:48:a6:b6:51:b7:e7:85:d9:5f:ec:fb:
         ef:b7:b7:0b:50:c8:b8:a0:5e:6c:81:59:72:d3:ba:82:02:22:
         ef:e0:21:49:1c:3b:6c:6b:b6:07:7e:3d:21:df:63:27:a2:ed:
         7f:63:ab:8d:d5:e7:2f:af:7a:66:67:a8:4a:84:a8:c8:5f:84:
         dd:82:5f:78:c9:73:fb:b4:c3:5d:0a:15:1c:26:30:3e:f7:73:
         1e:9d:80:d4:a1:e3:7f:ca:07:0e:ca:98:a3:af:60:93:5d:b3:
         3f:ec:e5:1e:64:ec:82:80:77:62:08:33:bf:14:32:fc:4a:5a:
         8b:de:20:0b:6f:09:b9:9c:9b:7d:03:e6:81:d5:e6:72:32:88:
         e3:ae:df:ae:ad:5e:7e:3d:f1:2a:e4:98:c2:cb:90:16:6c:ab:
         cd:74:0e:03:cd:e3:7e:90:ec:24:b5:d4:9c:e9:f0:2d:e3:cc:
         d6:f9:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org