Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          au/73HokeYmcJhn7aUv6kb5ea2NTVWskz+HfcuHXgUk=
Subject key identifier:   D3:48:34:75:58:A0:8A:14:14:6B:9D:D9:9C:9D:C0:AB:3A:AB:BB:43
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       7CBAD3F5945B93AD2AFD5B0A1A5EA453C47F7FB4
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:26 +0000
ROA not before:           Tue 02 Apr 2024 14:35:26 +0000
ROA not after:            Tue 01 Apr 2025 14:40:26 +0000
asID:                     264936
IP address blocks:        2804:3034:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ba:d3:f5:94:5b:93:ad:2a:fd:5b:0a:1a:5e:a4:53:c4:7f:7f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:26 2024 GMT
            Not After : Apr  1 14:40:26 2025 GMT
        Subject: CN=D348347558A08A14146B9DD99C9DC0AB3AABBB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:8a:68:e1:1b:15:6c:30:80:c7:0b:06:75:
                    50:70:36:5b:89:85:25:55:c8:5f:54:69:45:49:cf:
                    ec:0f:16:23:98:ba:b5:d2:25:29:c0:63:3d:cf:3b:
                    fc:02:73:42:b8:05:af:d7:12:0a:ab:90:b7:f0:04:
                    fd:74:ff:e7:16:54:df:31:32:e3:fe:80:69:ad:a4:
                    73:99:36:d7:f3:5b:66:f4:ee:ec:85:ef:91:9d:48:
                    0e:9a:b8:0a:cb:71:03:eb:2f:89:42:a6:d0:93:7d:
                    0d:7e:b9:55:9d:0a:3e:ae:55:03:49:b4:c7:d7:ca:
                    5a:59:41:64:4c:b6:2d:96:22:4a:07:62:97:0e:fe:
                    52:6a:7f:87:72:09:fa:48:ad:f8:1f:42:36:09:c6:
                    52:37:14:64:a5:24:4c:58:be:f0:64:94:f6:81:30:
                    e5:79:a5:be:08:c4:0a:61:f9:10:49:e2:e2:66:af:
                    9b:e2:a7:5d:0e:81:ea:d8:dc:69:f2:54:20:fb:c7:
                    ab:66:51:b8:86:a3:26:ad:9a:10:ce:ee:01:f3:18:
                    ba:cd:af:d5:9b:22:59:12:00:58:77:44:93:b6:dd:
                    92:77:0a:ea:b2:10:8a:68:b6:be:4f:c7:d9:d5:d7:
                    88:d5:6a:3b:83:3f:e9:02:60:40:9a:c5:cb:d1:d9:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:48:34:75:58:A0:8A:14:14:6B:9D:D9:9C:9D:C0:AB:3A:AB:BB:43
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:c8:b5:4e:65:d5:3f:41:0c:1b:40:a1:d4:3d:9a:a4:ee:
         7a:08:5d:36:bb:42:6f:d0:3c:36:0f:68:71:43:1e:fe:cd:90:
         00:cf:ac:3d:e2:51:44:5a:80:b6:e3:f1:2e:77:c8:fd:d7:b2:
         40:90:4c:4f:0c:65:e7:c1:9f:4b:37:f8:c7:ee:50:d2:ff:e2:
         73:a0:b6:60:fc:41:7b:c6:c9:33:81:1c:49:e8:1d:15:88:13:
         3c:b0:7e:57:a7:f9:ef:02:91:24:88:20:ac:6e:d6:a0:41:ca:
         50:a0:1d:91:29:d2:20:3e:34:fe:9a:7d:f7:bc:8e:07:ac:b1:
         c2:fb:53:4a:47:60:c6:68:28:2f:21:c8:fc:77:c5:b1:d5:f9:
         fd:2b:f1:18:4a:97:1b:e5:e9:72:24:60:79:cf:30:eb:41:d1:
         5a:ad:41:0b:f3:56:03:12:2a:5f:52:88:cd:db:b9:6d:4e:a2:
         58:81:22:ef:b3:e7:59:85:f5:71:0d:de:ab:c1:de:1f:5c:46:
         a3:2e:1e:1a:f8:9e:f1:86:9e:5b:ee:a1:98:da:8e:22:99:2c:
         02:68:6e:b5:5e:de:f7:2f:34:3f:7c:db:e7:f8:1d:72:40:7c:
         f9:e2:e3:26:90:e1:2d:0e:14:f5:f2:6f:33:01:ae:64:24:77:
         4a:81:38:ba
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUfLrT9ZRbk60q/VsKGl6kU8R/f7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGREFDREMyRjE2NDFBQUVGMjY2NEMyQzE5OTI3NjI0
MTIyQTZBNTAeFw0yNDA0MDIxNDM1MjZaFw0yNTA0MDExNDQwMjZaMDMxMTAvBgNV
BAMTKEQzNDgzNDc1NThBMDhBMTQxNDZCOUREOTlDOURDMEFCM0FBQkJCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUIpo4RsVbDCAxwsGdVBwNluJ
hSVVyF9UaUVJz+wPFiOYurXSJSnAYz3PO/wCc0K4Ba/XEgqrkLfwBP10/+cWVN8x
MuP+gGmtpHOZNtfzW2b07uyF75GdSA6auArLcQPrL4lCptCTfQ1+uVWdCj6uVQNJ
tMfXylpZQWRMti2WIkoHYpcO/lJqf4dyCfpIrfgfQjYJxlI3FGSlJExYvvBklPaB
MOV5pb4IxAph+RBJ4uJmr5vip10OgerY3GnyVCD7x6tmUbiGoyatmhDO7gHzGLrN
r9WbIlkSAFh3RJO23ZJ3CuqyEIpotr5Px9nV14jVajuDP+kCYECaxcvR2bpNAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU00g0dVigihQUa53ZnJ3Aqzqru0MwHwYDVR0j
BBgwFoAUE/2s3C8WQarvJmTCwZknYkEipqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC8xM0ZEQUNEQzJGMTY0MUFBRUYyNjY0QzJDMTk5Mjc2MjQxMjJBNkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzRkRBQ0RDMkYxNjQxQUFF
RjI2NjRDMkMxOTkyNzYyNDEyMkE2QTUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjM0MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQwNAAQMA0GCSqGSIb3DQEBCwUAA4IB
AQBg1Mi1TmXVP0EMG0Ch1D2apO56CF02u0Jv0Dw2D2hxQx7+zZAAz6w94lFEWoC2
4/Eud8j917JAkExPDGXnwZ9LN/jH7lDS/+JzoLZg/EF7xskzgRxJ6B0ViBM8sH5X
p/nvApEkiCCsbtagQcpQoB2RKdIgPjT+mn33vI4HrLHC+1NKR2DGaCgvIcj8d8Wx
1fn9K/EYSpcb5elyJGB5zzDrQdFarUEL81YDEipfUojN27ltTqJYgSLvs+dZhfVx
Dd6rwd4fXEajLh4a+J7xhp5b7qGY2o4imSwCaG61Xt73LzQ/fNvn+B1yQHz54uMm
kOEtDhT18m8zAa5kJHdKgTi6
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org