Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d3438203d3e20323635343633.roa
File:                     323830343a333438343a3a2f33322d3438203d3e20323635343633.roa (raw, json)
Hash identifier:          fVPjXPYoIZMh877AOd/moeZG3lWJWQ5Uv+KZJWD/az0=
Subject key identifier:   5E:29:0B:3A:02:B1:E6:03:4C:82:BE:F7:5A:CE:74:7C:1E:BE:74:73
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       41493DB41EAC6CD623C786D7E47ACBD98184D106
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d3438203d3e20323635343633.roa
Signing time:             Fri 15 Mar 2024 15:49:30 +0000
ROA not before:           Fri 15 Mar 2024 15:44:30 +0000
ROA not after:            Fri 14 Mar 2025 15:49:30 +0000
asID:                     265463
IP address blocks:        2804:3484::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:49:3d:b4:1e:ac:6c:d6:23:c7:86:d7:e4:7a:cb:d9:81:84:d1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Mar 15 15:44:30 2024 GMT
            Not After : Mar 14 15:49:30 2025 GMT
        Subject: CN=5E290B3A02B1E6034C82BEF75ACE747C1EBE7473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:d1:ef:a8:5c:f8:95:7f:87:d1:b5:9b:52:
                    03:22:29:ea:d6:49:b7:32:a1:18:a3:d6:7e:db:48:
                    8f:c6:09:d0:8f:32:02:62:10:c9:79:24:ec:61:58:
                    53:8c:d8:2b:d5:0d:fd:76:7e:6f:3d:39:56:cd:90:
                    42:60:7e:cf:63:a0:fb:09:eb:b2:93:ff:a2:78:d1:
                    32:33:54:53:27:b8:0e:ce:5b:f9:a4:c6:eb:e7:6c:
                    83:fa:a1:29:75:b2:25:32:d9:a3:38:ea:4f:18:3b:
                    f3:98:47:83:95:95:08:2e:7d:29:96:6f:e7:4b:12:
                    bb:43:17:16:89:b1:8f:b6:ee:4b:fd:68:63:03:65:
                    1e:39:65:52:32:0b:a7:d8:01:dc:b8:97:1b:5f:50:
                    0a:0b:24:2d:13:84:b5:9c:f8:e6:b0:97:b5:af:ac:
                    d2:36:48:81:c6:64:b4:e7:dc:c9:e9:84:d2:f2:e4:
                    a8:da:df:75:ab:f3:69:f1:f8:ef:cc:93:18:06:51:
                    f1:59:11:e5:60:2b:03:be:09:c9:bc:9e:b9:ac:22:
                    3f:00:70:42:1e:10:74:d5:16:ef:60:df:83:f3:3a:
                    03:b8:e6:41:5e:d0:f1:bc:6b:51:14:0d:c3:77:d8:
                    1b:52:70:bb:c4:65:73:e0:20:68:32:53:de:88:46:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:0B:3A:02:B1:E6:03:4C:82:BE:F7:5A:CE:74:7C:1E:BE:74:73
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d3438203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:3f:7d:6a:62:59:dc:7b:3e:65:bc:dc:7f:01:c5:15:67:
         a1:4a:69:a5:7c:24:c1:a9:d9:30:29:59:ee:2f:7c:3a:1f:f2:
         52:4b:f0:aa:0b:c4:ac:a9:8a:6d:bb:bd:f4:9d:92:cf:b4:19:
         00:85:0b:35:38:a6:7b:7d:7c:4e:81:fe:fd:54:c1:b0:5f:9e:
         27:d7:ad:a8:91:8e:69:a2:dd:c6:28:df:f1:5b:0f:3f:59:67:
         5e:3a:e1:9c:b2:6f:b9:c0:2b:7a:78:50:2c:d3:58:00:ca:25:
         62:1a:81:e4:3e:bc:ce:d1:84:fb:5b:dd:73:42:45:07:09:35:
         8b:23:ab:da:01:0d:ce:97:f6:39:d9:26:cd:60:2d:00:94:60:
         48:53:bb:e0:ad:fa:ce:98:a3:31:a2:d4:36:ab:3f:8b:03:56:
         8a:72:91:f3:39:36:7d:dc:27:c3:58:c6:ba:09:fc:8f:7b:41:
         8c:df:dd:af:38:ac:43:a8:15:26:ea:1f:93:cd:8f:8a:37:41:
         c7:64:9c:fc:8f:f3:48:6c:23:b9:f6:a7:f6:6e:1d:45:a0:a0:
         b8:f9:b5:95:14:99:22:a6:d6:c3:47:d9:83:64:97:35:a4:95:
         29:7b:20:d6:2f:57:26:17:66:59:b2:4a:77:61:81:2d:0d:28:
         09:dc:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org