Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a633030303a3a2f33342d3334203d3e20323635343633.roa
File:                     323830343a333438343a633030303a3a2f33342d3334203d3e20323635343633.roa (raw, json)
Hash identifier:          vnvrsCOMhIxe3eozwNkXEqG53R3vknFHPm04gxHVVC8=
Subject key identifier:   DD:83:D1:94:BD:AA:F5:83:76:D8:0C:12:06:39:C5:D8:B8:D3:DB:C5
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       1F169F73A80329E44E870EE99876795B2AD648DC
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a633030303a3a2f33342d3334203d3e20323635343633.roa
Signing time:             Fri 24 Nov 2023 12:44:51 +0000
ROA not before:           Fri 24 Nov 2023 12:39:51 +0000
ROA not after:            Fri 22 Nov 2024 12:44:51 +0000
asID:                     265463
IP address blocks:        2804:3484:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:16:9f:73:a8:03:29:e4:4e:87:0e:e9:98:76:79:5b:2a:d6:48:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Nov 24 12:39:51 2023 GMT
            Not After : Nov 22 12:44:51 2024 GMT
        Subject: CN=DD83D194BDAAF58376D80C120639C5D8B8D3DBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:0a:a0:4a:1e:59:c6:76:8b:fe:e8:cf:8b:
                    02:a4:73:69:df:bc:46:d3:70:86:d3:48:46:e8:25:
                    19:1b:5e:cb:0c:13:49:34:7e:72:34:00:a0:e7:e2:
                    22:45:54:f9:ff:c4:06:ad:e4:05:30:6f:d1:cb:cd:
                    51:15:28:d5:7d:26:f5:eb:70:58:5a:8d:8c:5e:bb:
                    7d:bd:dc:08:fe:1a:2d:53:3a:00:ee:46:75:80:d1:
                    51:d4:9a:42:45:f2:d2:4f:5a:db:85:95:d1:82:3a:
                    07:d6:41:64:99:fb:5a:7f:f9:af:88:5c:12:08:67:
                    09:92:58:c9:a7:f6:ed:c4:b1:7c:b6:02:d8:03:c8:
                    8d:00:fc:36:a8:8e:6f:92:b4:dc:32:24:b0:ed:b9:
                    49:3a:6c:07:d6:ea:eb:ef:9b:aa:df:8e:de:4f:11:
                    24:4d:72:cc:1f:e3:fd:96:22:0b:b2:39:65:95:f7:
                    75:08:e6:52:46:2a:54:dd:90:51:56:08:1a:57:16:
                    89:4c:29:26:ec:e6:2f:44:03:92:48:5a:38:37:c0:
                    b9:34:cd:6f:aa:85:08:12:1d:42:3b:f5:ef:d7:f8:
                    07:3e:32:a9:91:cb:19:29:30:f9:2d:61:2b:04:2b:
                    7e:6d:47:7e:aa:81:d0:6c:cf:13:53:3d:49:2d:27:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:83:D1:94:BD:AA:F5:83:76:D8:0C:12:06:39:C5:D8:B8:D3:DB:C5
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a633030303a3a2f33342d3334203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:55:ef:f3:ad:64:a6:ac:9b:fa:6f:f3:6b:ff:f3:e4:7e:
         7e:b5:24:24:21:48:df:e9:f5:a0:2c:2f:fd:97:8f:60:20:78:
         26:5c:66:a5:1a:5f:2b:be:cd:4f:34:6c:a8:f3:e5:8f:17:74:
         d1:a8:5f:e9:92:6f:5f:51:cc:4d:0a:a4:ea:21:de:e5:a3:29:
         19:6d:2e:9f:c4:d8:26:c8:45:29:47:29:f3:17:ce:58:e3:eb:
         a3:07:24:a4:a3:58:2c:cf:a9:0c:57:d2:81:67:e2:46:cb:3d:
         ce:c6:a6:01:dd:2b:25:be:28:1b:a3:e5:cc:b6:8c:a8:ba:40:
         40:43:76:67:c6:18:7c:bd:a3:68:f2:65:e9:6e:20:de:5c:42:
         c0:c3:38:4d:5f:2f:d7:26:e9:c2:c9:a0:54:43:9f:6b:f3:2b:
         73:d4:93:56:32:9c:68:a3:6a:b2:32:97:77:da:9a:6f:74:fa:
         e8:24:c5:1c:07:c3:b4:99:21:ce:06:0c:17:3b:bc:ee:73:4c:
         f4:aa:da:fa:01:45:4f:4f:75:fc:9a:65:d0:91:0b:fe:a8:5e:
         37:3f:a3:df:5b:8e:80:7c:19:67:8e:1f:73:14:13:77:fc:71:
         94:42:93:d5:6a:05:53:28:af:9a:ec:82:bb:77:79:f7:6a:a9:
         5d:5b:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org