Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          Mf+N5VEJWS3wQVmzu63eFXtzM7SCUlQF62tpkTkUaIQ=
Subject key identifier:   E9:0E:47:4F:AA:80:92:C3:5E:D1:E4:3E:A4:D4:9D:AC:54:25:CE:42
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       12A4CC236333298D668167008D67018EBF03BB21
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:37:57 +0000
ROA not before:           Mon 04 Mar 2024 18:32:57 +0000
ROA not after:            Mon 03 Mar 2025 18:37:57 +0000
asID:                     264936
IP address blocks:        2804:3034:30::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:cc:23:63:33:29:8d:66:81:67:00:8d:67:01:8e:bf:03:bb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:32:57 2024 GMT
            Not After : Mar  3 18:37:57 2025 GMT
        Subject: CN=E90E474FAA8092C35ED1E43EA4D49DAC5425CE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:50:5d:16:e3:e0:75:e3:33:d5:7e:97:8e:
                    c7:e3:46:7a:b2:2f:01:b2:45:45:2e:bf:95:08:b8:
                    04:cc:37:98:08:8c:ff:39:b5:37:53:d4:60:ee:04:
                    98:60:04:78:ce:ff:15:39:00:d5:9a:60:ca:5f:ed:
                    9d:67:11:e1:2e:4a:c8:8d:19:7f:36:4e:a5:30:9f:
                    41:60:a7:a4:8e:26:35:a0:af:e4:d7:bf:9d:35:21:
                    0e:c7:5e:1d:ec:67:1b:fc:7b:1f:56:55:67:50:64:
                    2b:0c:d2:36:99:5e:08:70:ce:5a:0a:43:b7:0b:95:
                    95:c0:84:0f:a6:6e:94:3f:61:ef:b3:db:40:2e:55:
                    a8:a8:a4:fa:27:48:fb:5e:b0:68:28:fd:44:65:d1:
                    dd:5d:78:9d:a8:e3:31:2c:b5:c2:ff:8a:f8:91:9d:
                    1b:9d:b6:27:0f:75:a9:fe:4f:4c:b3:f8:00:91:1b:
                    99:b0:cb:b0:50:37:90:f6:43:15:bb:45:0a:d8:8f:
                    e1:bb:4f:04:3d:69:bb:ab:fc:e3:09:a5:9c:be:25:
                    63:8b:ed:34:eb:1a:4b:ed:b2:37:70:c9:dc:34:f7:
                    81:25:97:71:e4:7d:55:b7:c7:b2:f9:c2:91:51:b0:
                    b7:3f:b4:3c:55:06:56:2c:1a:93:1f:68:96:55:2d:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:47:4F:AA:80:92:C3:5E:D1:E4:3E:A4:D4:9D:AC:54:25:CE:42
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:6d:f6:89:30:00:0b:92:0c:0d:73:75:b3:8f:ac:65:21:
         23:fb:db:af:77:fe:8b:83:ab:31:a7:7f:57:50:07:af:5d:18:
         a3:0f:1d:86:96:f5:ad:06:2f:5b:5f:66:18:91:c9:a3:f5:cb:
         47:25:ca:6d:f2:59:d6:28:bc:dd:83:83:53:e7:1f:bb:96:9d:
         3f:0f:19:01:ec:38:76:77:79:b8:a5:8b:51:2c:1e:d3:ac:37:
         2b:09:90:39:eb:62:41:86:b6:75:55:26:95:a9:ff:09:f1:1e:
         29:8c:cc:3b:b3:2a:97:e6:7e:62:cc:8d:68:13:bc:8c:c8:66:
         5b:d2:b4:6b:1d:1e:46:32:bf:5d:ea:2b:1a:22:4d:69:9b:a8:
         0b:09:86:b0:67:14:e7:e3:40:c3:ca:26:90:63:74:91:73:c2:
         62:2d:1d:d2:8c:10:8c:a0:c9:dd:16:fa:10:67:aa:c4:49:36:
         c1:2d:7a:5f:2c:24:ec:7e:0b:d6:b0:c2:d3:14:6d:0f:51:07:
         b9:04:83:72:ea:a9:56:61:e8:a7:e2:0d:88:e8:8a:88:96:4e:
         32:63:9f:c0:36:7c:d6:e6:82:7b:b5:8b:ac:0a:7f:8c:b6:ac:
         bc:c0:8b:d7:14:87:11:93:a1:af:b8:68:0d:2d:af:02:cf:b6:
         5a:ca:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org