Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa
File:                     323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa (raw, json)
Hash identifier:          kw9B5LtNvpbiop26jZiU4+XpPjPbHdjI+0pvzgsOgHM=
Subject key identifier:   97:52:D0:68:27:15:45:ED:CD:E4:D8:16:42:D6:15:87:C7:69:C7:BF
Certificate issuer:       /CN=4D7068B77BEBEC7F14EDF2C09A731A5359106274
Certificate serial:       4DC14A0CBC44FA9F44873CFD4CE7053D62CA23F1
Authority key identifier: 4D:70:68:B7:7B:EB:EC:7F:14:ED:F2:C0:9A:73:1A:53:59:10:62:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D7068B77BEBEC7F14EDF2C09A731A5359106274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa
Signing time:             Wed 06 Sep 2023 14:23:04 +0000
ROA not before:           Wed 06 Sep 2023 14:18:04 +0000
ROA not after:            Wed 04 Sep 2024 14:23:04 +0000
asID:                     264936
IP address blocks:        2804:3034:200::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c1:4a:0c:bc:44:fa:9f:44:87:3c:fd:4c:e7:05:3d:62:ca:23:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7068B77BEBEC7F14EDF2C09A731A5359106274
        Validity
            Not Before: Sep  6 14:18:04 2023 GMT
            Not After : Sep  4 14:23:04 2024 GMT
        Subject: CN=9752D068271545EDCDE4D81642D61587C769C7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:fe:be:a5:c1:12:3d:5b:35:75:44:80:c2:
                    34:90:cc:ae:7c:26:8a:c4:42:e8:dd:80:5e:10:42:
                    27:63:71:e6:fe:08:f4:af:3d:ba:91:e1:54:e6:f4:
                    24:0e:5f:58:bc:01:24:d5:b6:45:6f:91:e8:8e:be:
                    f5:e0:5d:95:21:66:38:3d:ae:63:e4:21:ea:24:e7:
                    c3:d3:d7:cd:6e:8f:5b:a9:8b:2c:b5:9b:ce:ae:da:
                    26:7d:2e:44:7f:2f:e1:26:df:31:f6:ce:a7:89:00:
                    5e:30:7a:b5:9f:69:ef:be:fe:e4:44:f1:a8:e2:63:
                    d1:c6:09:d4:e2:d0:b2:49:78:7a:9e:1a:99:4a:e6:
                    e7:fe:7c:cc:7b:86:49:34:35:a0:f5:73:43:ca:c7:
                    c0:9f:48:94:ea:ec:03:a6:91:15:11:e5:d3:99:c8:
                    68:c4:ba:f5:71:99:96:f5:5d:de:16:20:d0:95:e0:
                    11:c8:25:a3:44:64:aa:4f:27:0b:03:90:68:7c:16:
                    84:72:03:6a:a8:d9:40:87:82:3b:ef:0e:c4:ae:ad:
                    19:a9:2a:b7:c6:e0:ab:56:78:0b:a0:c0:b4:82:2d:
                    e9:68:f1:00:d3:07:c0:6b:3c:2d:99:23:35:03:ca:
                    bf:45:72:5d:d9:69:f1:17:8f:94:e1:6b:81:98:c2:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:D0:68:27:15:45:ED:CD:E4:D8:16:42:D6:15:87:C7:69:C7:BF
            X509v3 Authority Key Identifier:
                keyid:4D:70:68:B7:7B:EB:EC:7F:14:ED:F2:C0:9A:73:1A:53:59:10:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/4D7068B77BEBEC7F14EDF2C09A731A5359106274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D7068B77BEBEC7F14EDF2C09A731A5359106274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:54:aa:fd:e1:f6:58:80:d5:7e:c7:b9:ba:95:39:6c:33:
         64:c7:3d:37:a5:18:c3:e5:1c:25:1a:80:1c:f1:e2:fd:34:f0:
         c3:8a:05:98:de:5a:82:c9:8c:27:b5:67:0b:dc:c7:a4:39:f3:
         ad:7c:b7:66:a0:ab:88:95:3c:cc:a7:62:93:38:b1:49:e7:e4:
         1d:a8:85:a1:2c:d3:33:ca:11:97:37:7c:cd:e2:1a:0b:46:9d:
         89:ed:fa:a4:2a:0c:99:1e:d4:61:c9:6d:2a:b3:07:98:78:56:
         43:db:e5:42:94:23:9d:f5:3f:93:0e:07:53:96:d0:f9:8c:c2:
         9b:d0:3a:ef:8f:31:7e:fe:de:8d:af:6f:28:7a:1e:d3:96:3f:
         97:0c:9e:aa:9d:5b:78:05:7e:ef:e5:f9:16:25:68:c7:55:e6:
         b2:f3:57:cf:14:1a:e3:68:43:3a:a5:3d:65:fc:69:86:d9:8b:
         e4:07:f2:a8:94:b0:f3:4b:68:0e:20:17:76:f3:15:07:41:d0:
         17:78:ed:81:14:1b:3f:99:2d:df:cb:c3:aa:73:7f:06:e2:d6:
         47:ea:cc:9a:b8:fb:10:7c:04:c7:a3:3d:f6:aa:96:38:73:3d:
         ae:56:eb:26:75:8f:0d:62:77:24:07:d5:9f:65:c0:7a:97:57:
         c3:e8:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org