Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa
File:                     323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (raw, json)
Hash identifier:          GK93MgIzRVj3cHvfBj3ow84qaoGFodGKoHin/x5cHqI=
Subject key identifier:   16:35:75:D1:7A:A2:79:FD:79:BB:FC:45:53:AD:4E:0C:89:8B:E5:A2
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       71D1F192323B7225D587861CD4B5A03F1C24EEF6
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:16 +0000
ROA not before:           Mon 04 Mar 2024 18:33:16 +0000
ROA not after:            Mon 03 Mar 2025 18:38:16 +0000
asID:                     264936
IP address blocks:        2804:3034:120::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d1:f1:92:32:3b:72:25:d5:87:86:1c:d4:b5:a0:3f:1c:24:ee:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:16 2024 GMT
            Not After : Mar  3 18:38:16 2025 GMT
        Subject: CN=163575D17AA279FD79BBFC4553AD4E0C898BE5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:ef:46:8d:61:b4:01:76:75:2f:08:9f:01:
                    d6:7a:01:3e:7d:94:77:c1:dc:29:35:ca:bf:d2:9c:
                    d8:49:cd:70:c3:1e:5a:a9:93:ee:2c:f4:0d:75:fb:
                    3f:2c:b3:59:b1:40:69:22:3b:40:a4:27:5a:1f:b1:
                    0a:0b:93:0d:eb:da:4e:9f:a0:57:a3:99:5b:a9:55:
                    33:26:c6:05:80:6e:20:8d:34:b5:f3:09:02:ce:7a:
                    62:37:2c:d8:6c:5e:1e:0b:9f:7f:93:b6:26:07:12:
                    45:22:56:89:95:0e:17:fa:3b:a8:58:8d:c4:91:b3:
                    dd:1e:48:a5:0e:4e:d1:69:fd:23:2d:f6:60:6d:4e:
                    52:44:f4:6e:34:1b:10:57:1b:d4:6c:c1:13:a9:0d:
                    64:60:c4:79:69:d6:93:6d:83:03:7a:89:af:9a:66:
                    e3:56:4c:31:af:e8:a3:a5:70:00:4a:4d:97:3a:fe:
                    a3:c0:15:2e:b1:c4:86:19:d5:a4:2c:05:7f:15:d7:
                    74:ec:a1:59:51:a8:1b:7b:03:ca:bf:47:5f:31:5f:
                    71:d5:32:b8:f7:7c:2e:97:21:2b:2e:71:76:31:3d:
                    73:5d:31:33:c0:33:f7:1a:89:b8:90:8a:fe:1f:d2:
                    8c:ff:8a:ce:e6:03:70:05:6d:7d:c1:5a:e5:93:10:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:35:75:D1:7A:A2:79:FD:79:BB:FC:45:53:AD:4E:0C:89:8B:E5:A2
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:120::/43

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:45:9e:16:e1:e8:29:ba:51:a9:49:3a:ad:bf:81:6a:0b:
         c5:4a:11:c7:47:b2:f6:f0:c3:70:fb:08:04:e4:56:56:b8:2e:
         87:f9:eb:f9:f3:ac:d7:81:8a:ef:f5:a0:47:91:63:99:87:04:
         aa:3c:a4:49:19:13:a6:8c:bf:e7:37:e0:ed:8f:f5:1d:d1:6f:
         6b:24:fb:54:96:79:cb:b6:ef:b2:80:e1:78:02:63:94:2e:e8:
         b7:18:59:9b:d8:98:1f:65:7d:dc:cb:14:43:65:88:16:c7:a9:
         1b:7e:15:63:35:3a:17:83:15:3a:3d:4e:75:14:cd:8a:91:e0:
         85:c0:88:fe:dd:b7:39:69:80:1d:fd:4a:9b:c4:ff:81:aa:43:
         bb:c9:36:8d:8b:41:30:17:84:38:4a:92:42:e0:2c:e0:24:af:
         aa:08:b0:7f:14:8a:0e:5d:a1:f4:e8:2a:0a:cc:43:82:2f:fd:
         05:b8:eb:e0:69:78:ed:d4:f2:2d:d4:de:18:de:b8:15:7f:95:
         ae:c9:ec:9e:95:bf:29:c6:d3:7a:65:0d:32:bd:12:02:6c:01:
         55:5d:40:c8:20:89:68:b4:25:5d:93:e4:b0:51:ea:08:51:07:
         f8:57:33:93:fa:bc:8d:8a:22:61:d8:27:80:bd:34:0e:9f:87:
         99:d0:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org