Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          iwnYFSsjQrGcDD6DrF+QZKyjwvv1Ey85rDqfDu/gmkY=
Subject key identifier:   E5:4D:04:3A:F9:56:CF:01:D0:B5:0D:84:83:39:47:A5:C0:F1:2B:73
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       19F0EE4812AA414E060B015D4FB30FF7B4E93405
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:13 +0000
ROA not before:           Mon 04 Mar 2024 18:33:13 +0000
ROA not after:            Mon 03 Mar 2025 18:38:13 +0000
asID:                     264936
IP address blocks:        2804:3034:110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f0:ee:48:12:aa:41:4e:06:0b:01:5d:4f:b3:0f:f7:b4:e9:34:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:13 2024 GMT
            Not After : Mar  3 18:38:13 2025 GMT
        Subject: CN=E54D043AF956CF01D0B50D84833947A5C0F12B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:74:ca:91:ab:ff:4e:af:c4:5a:46:da:b4:
                    c4:04:4d:af:b1:7f:7a:2f:64:54:5e:74:98:64:e0:
                    a9:6e:7d:5e:e9:a0:35:78:d4:fe:93:fe:65:ca:50:
                    c3:8b:b9:2b:57:12:60:2f:e8:78:8b:4e:93:9a:fe:
                    f2:99:47:f2:53:91:93:f4:d2:a3:88:60:47:04:82:
                    19:7d:38:44:3a:97:0c:cf:da:2f:5f:e7:45:62:86:
                    ff:fe:76:a9:ce:f8:6e:77:84:48:85:f1:3d:b4:f2:
                    b3:67:f9:93:a4:69:9d:d8:96:62:a1:93:c1:26:f9:
                    23:34:17:f0:b9:0c:af:b6:0f:ee:6c:e6:f2:4b:10:
                    8d:13:77:34:e0:ab:ae:79:b7:5d:eb:a3:5f:0c:ce:
                    db:e4:6c:b9:dd:e6:a3:39:c2:e5:96:81:de:09:6b:
                    0f:5e:8e:b6:87:d7:1f:7f:a1:21:dc:f8:56:aa:69:
                    d8:ce:82:74:4b:5b:0e:cb:60:67:61:f2:4e:8b:0d:
                    4e:01:b8:51:6d:4d:c5:9e:16:d0:4a:bd:37:9f:e3:
                    81:a2:33:b0:93:51:d3:20:fa:1c:d0:40:68:04:9a:
                    25:4f:93:16:0c:1f:90:46:ef:46:47:85:76:bb:a5:
                    77:48:a6:55:9d:bf:da:e3:c7:56:97:4c:08:28:0d:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:04:3A:F9:56:CF:01:D0:B5:0D:84:83:39:47:A5:C0:F1:2B:73
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         cc:35:28:a3:50:9c:92:8f:db:49:07:ed:f2:1e:b8:42:36:94:
         e6:3c:da:31:e5:ae:04:ec:bd:c7:7b:25:28:15:73:55:9f:2f:
         88:23:fe:73:46:00:ce:23:d4:d0:a9:a0:67:d5:95:f2:17:e0:
         04:de:71:c0:39:f3:b7:eb:79:f9:71:99:93:2c:5e:24:1b:69:
         5c:a8:02:fb:98:3f:e8:34:90:d2:7c:6f:ba:0b:8b:cd:82:2f:
         06:dc:58:5a:43:90:b9:aa:a4:b9:59:8a:69:a4:a2:d9:b2:1c:
         1b:d7:d3:43:e3:df:43:a8:b2:a5:38:8f:a5:c7:d6:d2:f1:30:
         6b:7a:67:38:62:36:be:95:7c:ae:25:7e:1a:e4:e3:5d:37:64:
         51:25:57:29:ab:8f:2d:9b:57:8e:da:42:a6:4a:8e:4e:2a:81:
         48:9b:da:d6:b6:32:78:ba:27:27:8d:36:3e:2a:a4:e2:e2:4f:
         2c:14:42:7e:87:f0:f3:55:26:13:1b:4b:3a:05:3d:73:c5:6a:
         5f:ea:5b:fc:51:8b:d3:b6:41:f8:1c:e8:7b:a8:03:fc:9b:da:
         25:11:ca:4a:3f:7f:bc:dd:3a:77:4f:d1:5a:ee:23:0a:ea:10:
         aa:53:71:26:a6:35:03:73:26:cf:5a:0d:c3:54:d1:60:ab:4d:
         70:d5:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org