Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          cianX/f0aiIKHJI8uQ10jwDvtoOiI2unBMpJpjjHAIw=
Subject key identifier:   BC:94:81:00:1C:82:10:B3:3F:28:C9:84:16:7B:EE:3E:C6:D9:FD:1F
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       2F95948EAECDE54DC7CA8AF1E90087E1BC28CD21
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:42 +0000
ROA not before:           Tue 02 Apr 2024 14:35:42 +0000
ROA not after:            Tue 01 Apr 2025 14:40:42 +0000
asID:                     264936
IP address blocks:        2804:3034:60::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:95:94:8e:ae:cd:e5:4d:c7:ca:8a:f1:e9:00:87:e1:bc:28:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:42 2024 GMT
            Not After : Apr  1 14:40:42 2025 GMT
        Subject: CN=BC9481001C8210B33F28C984167BEE3EC6D9FD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:0a:b9:07:88:9a:c7:c2:e7:1b:1a:d5:ce:
                    60:f6:a3:3c:77:89:e1:09:66:f7:f5:a3:2e:86:d8:
                    cb:da:f1:fe:d4:ff:c4:7f:f8:b4:47:6c:a0:91:6a:
                    23:a4:74:cf:0b:dd:81:d4:3a:d2:8e:f8:3b:1e:f1:
                    86:ce:1a:72:37:89:ce:2a:38:b1:97:9d:0d:c3:6f:
                    21:c3:d4:22:1e:b3:b6:9a:3e:66:85:73:e8:28:d9:
                    b5:bd:da:30:78:4c:2f:d9:da:41:00:8a:1b:3a:19:
                    3e:e7:1e:48:66:b9:1d:91:b7:75:ae:47:3e:3b:55:
                    85:af:8a:49:3b:35:1e:9f:1e:5b:c1:00:dd:87:ca:
                    ad:ad:e2:f1:d5:32:b8:0f:e8:d3:32:00:75:91:92:
                    fa:a3:d7:78:75:de:f3:46:16:3a:da:0d:d1:fe:08:
                    95:0e:eb:56:32:8c:40:69:4b:d5:1a:50:84:64:f9:
                    32:50:fd:91:e8:ff:1b:15:f6:c4:e4:e3:55:78:51:
                    86:56:43:2f:9d:be:3f:a4:c4:94:e8:17:e7:be:e5:
                    e0:ee:02:be:32:d9:4e:17:82:3f:85:41:79:67:fa:
                    cd:b5:d2:89:fe:5d:5a:57:d4:a7:f4:c3:3d:92:d1:
                    8e:78:82:87:90:5a:fc:e4:b0:55:2e:ac:a1:92:e5:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:94:81:00:1C:82:10:B3:3F:28:C9:84:16:7B:EE:3E:C6:D9:FD:1F
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:de:0f:fb:6b:96:f0:65:a0:a7:6b:82:09:f0:60:5c:b8:
         c2:6f:30:96:a8:5d:49:26:f2:ae:d4:ec:4d:3c:d3:04:53:ad:
         6e:7d:27:d7:63:a8:b2:2e:ce:09:98:30:c6:35:1d:61:b2:51:
         86:e8:17:c5:51:8a:e6:de:e0:19:b7:18:9a:dd:7e:46:bb:58:
         e6:ab:91:9e:76:1c:07:a2:39:01:d8:66:3a:5c:9c:12:e4:58:
         14:2c:74:c3:85:4c:dc:d9:a6:eb:4a:d8:38:ad:9e:3c:50:56:
         15:83:e0:cf:04:24:6c:ce:15:b4:53:ea:77:3f:de:5f:ec:d2:
         9c:52:38:44:54:43:ee:85:a4:6b:5a:16:95:35:73:1c:9c:3d:
         26:71:18:27:af:96:06:db:ec:36:c9:b8:bd:4f:48:29:0e:f5:
         b2:3b:35:7a:e5:c5:00:b2:11:b9:ce:ed:28:ee:a8:92:76:e6:
         37:b1:d5:80:73:38:1e:5d:b9:25:4f:19:03:7c:b2:2f:03:e0:
         79:26:77:ef:c1:1c:23:b3:f6:0c:39:74:1b:70:1c:5d:57:24:
         aa:b6:77:55:c8:8e:fc:55:7d:10:56:55:9f:7a:52:56:ef:6b:
         3c:b5:d5:66:02:f0:98:5f:a0:a6:f4:69:1b:f2:19:3e:bf:93:
         a8:5e:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org