Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d3332203d3e20323635343633.roa
File:                     323830343a333438343a3a2f33322d3332203d3e20323635343633.roa (raw, json)
Hash identifier:          U1x9nRb+uVqH1QR/UcM93GTNaIf7qLEFPiRHjyjpxSw=
Subject key identifier:   13:7B:68:10:09:0D:0B:31:D9:5F:DA:BA:19:5A:21:D6:D7:C2:F4:98
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       13B9CFCAF5E0507D137C7372051CEB372D425B95
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d3332203d3e20323635343633.roa
Signing time:             Tue 24 Oct 2023 14:22:22 +0000
ROA not before:           Tue 24 Oct 2023 14:17:22 +0000
ROA not after:            Tue 22 Oct 2024 14:22:22 +0000
asID:                     265463
IP address blocks:        2804:3484::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b9:cf:ca:f5:e0:50:7d:13:7c:73:72:05:1c:eb:37:2d:42:5b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Oct 24 14:17:22 2023 GMT
            Not After : Oct 22 14:22:22 2024 GMT
        Subject: CN=137B6810090D0B31D95FDABA195A21D6D7C2F498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:3f:53:52:05:29:89:cc:17:98:1e:3e:37:
                    ba:4e:60:07:5a:ef:32:aa:d2:8e:16:bc:c3:44:0a:
                    16:87:8b:48:76:31:4a:30:a1:b5:ce:3c:6b:6c:d7:
                    3a:10:78:b3:ce:28:8d:13:73:a5:7b:37:7b:8f:21:
                    df:da:c5:d8:4b:5c:4d:d6:7e:cb:5e:89:2f:ce:c6:
                    e1:5d:f0:4e:14:0a:c5:58:fc:a5:d7:b7:0e:09:a9:
                    78:f1:7c:ca:3a:a0:58:a1:1e:e0:df:f8:11:60:1e:
                    70:51:0b:35:05:8a:a8:74:ab:b2:7b:79:9a:c1:1c:
                    3c:a7:1d:0c:be:aa:aa:68:7d:0a:dc:34:dd:30:b4:
                    d4:a7:4b:c0:b6:87:3e:db:1e:01:62:eb:98:4a:b7:
                    98:94:40:d8:f0:02:a4:1f:4d:cc:7a:de:b6:8e:54:
                    18:82:2d:34:c1:34:1c:35:4a:46:bc:66:61:ff:7d:
                    3a:bd:bf:b7:77:a9:5a:41:fb:ed:21:48:1e:f6:e1:
                    63:c9:2e:96:d9:b7:12:f2:22:08:f6:ae:8b:64:79:
                    28:62:8c:91:9a:0a:34:6a:42:ce:d6:b4:1e:32:08:
                    cd:5e:c7:8a:87:d8:b8:c5:da:11:ff:85:22:04:bb:
                    f9:55:63:f6:17:13:bb:31:aa:4c:f4:13:86:ca:44:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:68:10:09:0D:0B:31:D9:5F:DA:BA:19:5A:21:D6:D7:C2:F4:98
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d3332203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:3a:a7:37:13:e6:36:ae:8f:c9:b2:7e:42:00:1d:f5:a6:
         f1:10:c9:d8:10:e2:20:ad:74:e9:17:12:03:33:80:b2:ca:fe:
         c6:49:29:06:d4:23:c1:c0:1c:a2:e7:79:a0:14:b3:1e:ba:cf:
         2a:5a:88:d1:11:af:4f:29:dc:7c:f6:92:f8:5f:05:ff:ec:f5:
         a1:16:f3:a0:05:0e:33:c4:a6:d5:6d:c0:b4:a5:c1:2e:31:2a:
         71:68:85:d2:9d:a8:72:a8:40:96:52:a3:75:8e:1e:34:4f:e6:
         8b:0e:8b:4c:a5:10:cd:e8:bb:65:4d:83:8d:2a:bc:58:f2:cb:
         1e:4b:3c:0c:38:2c:cb:80:82:15:63:9c:dd:bf:47:14:76:c9:
         8f:5f:2f:07:79:14:5b:39:e2:f5:57:89:f3:6a:99:db:33:99:
         5e:53:d3:c6:fd:4b:67:30:99:bb:5f:22:a8:b3:16:60:47:b3:
         be:e9:67:81:92:40:de:9f:e6:32:66:29:a8:69:9d:30:8c:24:
         87:7c:1f:eb:06:1e:43:25:fb:2e:ea:c5:8e:09:eb:b3:a1:51:
         c7:cb:76:d5:1c:db:f8:7c:fa:50:fd:28:d3:b3:50:5e:f3:7f:
         82:01:5a:86:f9:fb:58:78:c3:ae:c3:ae:e9:f7:e6:a6:2f:3d:
         0b:20:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org