Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          IixcB4y9Zz7j5sdd/PO6WbGTna3FBKwLHkgJC7aopbk=
Subject key identifier:   FF:85:A9:7A:4B:FA:C5:08:3C:37:DD:F4:28:1B:DD:F7:83:89:96:08
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       35742B8D7CB70753A5C8731F256EE3A049A89751
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:38 +0000
ROA not before:           Tue 02 Apr 2024 14:35:38 +0000
ROA not after:            Tue 01 Apr 2025 14:40:38 +0000
asID:                     264936
IP address blocks:        2804:3034:50::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:2b:8d:7c:b7:07:53:a5:c8:73:1f:25:6e:e3:a0:49:a8:97:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:38 2024 GMT
            Not After : Apr  1 14:40:38 2025 GMT
        Subject: CN=FF85A97A4BFAC5083C37DDF4281BDDF783899608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:ce:70:19:b9:f0:1a:2e:ea:80:9e:77:dd:
                    2d:7a:65:7f:f7:da:4c:db:98:25:5e:1b:fb:dd:70:
                    0f:be:e3:78:c0:ab:b6:ca:ce:47:51:12:3b:62:b3:
                    8a:28:d9:09:24:ac:3f:92:47:9c:07:14:1c:9c:12:
                    36:28:d3:6e:dd:62:88:af:1b:08:f1:d1:22:19:d5:
                    bb:5f:5c:84:d0:41:dc:a7:86:0e:bc:e1:f5:0a:67:
                    75:57:bc:1b:58:cb:89:12:5a:60:e2:73:61:6a:23:
                    7d:6a:70:4c:15:00:68:08:5f:74:6d:52:0f:2f:b0:
                    5a:74:24:cf:db:93:0c:d2:4d:d9:be:86:57:cf:c8:
                    06:19:65:10:2e:a4:35:0a:8a:c5:2b:69:0c:bd:00:
                    f4:63:f4:73:f0:95:6e:86:0a:89:3a:9c:a8:d2:47:
                    52:13:ca:7d:06:73:39:c6:8e:1f:08:3e:f1:64:ea:
                    b8:23:6f:97:23:46:85:c4:f1:d2:23:b6:ab:6c:31:
                    b1:0d:b5:6d:ec:f5:40:7c:42:9a:c8:23:7c:86:5d:
                    86:43:a0:d1:7d:d9:72:e8:fc:b0:63:82:a9:b8:98:
                    28:19:f4:b2:ae:b3:2b:7c:10:6f:a8:5c:09:f2:f5:
                    10:e1:4f:42:fa:44:1f:6d:e7:84:b7:51:aa:06:b6:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:A9:7A:4B:FA:C5:08:3C:37:DD:F4:28:1B:DD:F7:83:89:96:08
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:f8:ba:ff:dd:3a:50:b5:25:cd:6f:71:82:b7:9c:df:53:a4:
         dd:8a:12:cf:92:60:95:cb:11:ea:0d:f7:b3:71:27:57:d1:2a:
         54:5b:1d:c9:05:7f:f7:af:36:94:5f:f0:69:67:0c:50:22:01:
         41:a6:99:65:f2:a1:b8:7a:00:dd:f3:30:41:df:5c:26:66:f2:
         6a:60:63:23:03:aa:b6:89:53:4c:14:11:ac:be:3f:42:22:a8:
         cd:00:ba:6c:85:7c:15:af:ff:dc:cb:fa:8c:03:45:db:83:14:
         c7:d1:11:6c:bd:97:04:e9:68:a8:cd:b5:6f:be:e4:b1:1f:c6:
         fc:cd:2b:4a:dc:48:a2:e3:37:40:c1:6d:55:09:00:ba:0e:4c:
         99:0b:b5:6a:16:45:c3:d1:7b:c6:ae:f5:db:ee:09:49:5f:b5:
         c8:96:4f:2e:b7:a2:03:3e:c4:44:5a:23:aa:cb:0d:b3:97:bc:
         6a:bd:71:53:86:68:d0:df:05:3b:af:b1:4e:32:01:d0:fc:f7:
         8d:46:47:cd:18:b0:02:77:22:4e:01:ad:2d:49:7a:61:f7:83:
         d5:1b:32:fe:87:eb:6c:db:87:a7:47:48:df:79:74:e0:25:78:
         f4:bd:a3:39:8d:a5:f9:4c:e0:42:2b:05:91:b9:f4:b3:44:f2:
         8f:db:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org