Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          K73i8vZncASAyOyXI1fZbvRCUgG8dlZlNA8Gi5C73jQ=
Subject key identifier:   89:DC:5E:88:44:7E:FF:E7:41:9A:1D:DD:5A:2C:54:43:1E:D1:CD:94
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       3AC702C2013A00426F2497D742BACAACE5AB0731
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:35 +0000
ROA not before:           Tue 02 Apr 2024 14:35:35 +0000
ROA not after:            Tue 01 Apr 2025 14:40:35 +0000
asID:                     264936
IP address blocks:        2804:3034:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:02:c2:01:3a:00:42:6f:24:97:d7:42:ba:ca:ac:e5:ab:07:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:35 2024 GMT
            Not After : Apr  1 14:40:35 2025 GMT
        Subject: CN=89DC5E88447EFFE7419A1DDD5A2C54431ED1CD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:13:91:c7:83:79:59:ac:1c:60:11:96:29:
                    6b:d9:6f:95:10:ca:1a:8c:4b:87:a4:f3:ec:d0:cc:
                    41:48:7b:42:e3:06:de:61:dc:0e:56:40:4f:10:31:
                    8a:c0:87:e3:27:92:1c:ba:43:ef:ae:47:ca:90:95:
                    d9:42:70:36:3a:eb:c2:df:5e:10:65:9e:b7:c0:bc:
                    35:cd:dd:d1:f4:63:8f:e4:4f:15:9c:36:9f:3b:45:
                    be:a6:03:e6:30:d3:a0:d2:42:9a:5d:d6:46:60:f4:
                    d8:f1:e5:72:9c:1a:d9:47:46:68:18:10:01:d5:e8:
                    2c:79:00:7e:7b:bc:b9:4e:9a:00:de:8d:8b:00:93:
                    cf:87:45:39:45:e2:a8:90:ff:ff:e3:3f:40:c5:d7:
                    a5:63:53:39:a0:03:d9:8e:8e:98:45:80:b5:32:8d:
                    79:e5:64:b6:d1:7c:6d:42:05:c9:ce:cd:f0:c9:1d:
                    5d:45:38:e6:f0:9a:8a:b0:99:16:bc:aa:c7:32:bb:
                    ad:93:30:ce:b2:17:7f:63:96:21:db:be:43:21:69:
                    8f:5e:94:0e:07:4f:e6:6e:0b:aa:51:b5:f9:ef:9f:
                    da:3c:bc:02:c7:b3:38:6a:37:7d:24:9e:97:ee:6b:
                    c0:b1:ad:15:4b:a1:c0:82:d9:bf:d8:57:76:a1:91:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:5E:88:44:7E:FF:E7:41:9A:1D:DD:5A:2C:54:43:1E:D1:CD:94
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:0c:f1:28:88:0d:9d:6f:e5:cd:cd:bc:d3:62:9c:eb:ff:16:
         a9:6d:42:91:d9:4c:f6:62:87:a3:23:da:8e:a4:58:38:30:0c:
         f8:03:eb:66:3e:06:2a:3c:e4:4f:46:a0:03:35:f5:01:0d:d6:
         fb:a0:32:d3:58:82:24:2e:99:a3:84:66:52:71:81:aa:0d:d7:
         72:1d:82:23:b6:6d:83:5b:d4:b7:89:c9:d3:da:36:e3:f8:62:
         5b:fe:e3:a7:be:c0:6b:81:87:c9:04:8b:14:f7:83:e4:01:f5:
         5f:15:2b:fe:9d:59:30:ca:25:af:06:78:66:42:e5:e3:eb:b4:
         e4:d9:e6:0f:09:39:52:62:a4:cc:d6:20:35:3a:3a:17:92:88:
         dd:cd:0f:2a:12:bb:d2:74:ff:7f:65:80:9f:7e:d8:5c:d5:91:
         aa:18:b6:9e:c8:1f:6a:17:cc:ae:0a:40:83:eb:9d:06:1e:e3:
         bb:3f:41:af:82:f8:9e:0a:c6:55:c5:5f:6e:aa:f6:97:6c:c8:
         b0:47:c5:c4:81:f2:a3:ab:f6:90:55:7f:dd:d9:2e:34:32:61:
         c8:f2:8c:ee:6d:6b:06:a0:a6:be:1a:05:73:15:90:2f:e7:75:
         4d:7e:90:c1:24:6c:95:57:f2:e3:25:c0:1d:40:a9:6d:a0:9f:
         d7:82:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org