Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          A6fVkseoVpKr1fVMOHAK942MEiyluK67P4By4LMiIis=
Subject key identifier:   60:E2:6A:28:8E:78:67:3E:9D:72:9F:32:5B:54:A7:C2:E8:81:98:C4
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       5F98B7284A941D2BED88FCAA4D417C8B2717A881
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:00 +0000
ROA not before:           Mon 04 Mar 2024 18:33:00 +0000
ROA not after:            Mon 03 Mar 2025 18:38:00 +0000
asID:                     264936
IP address blocks:        2804:3034:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:98:b7:28:4a:94:1d:2b:ed:88:fc:aa:4d:41:7c:8b:27:17:a8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:00 2024 GMT
            Not After : Mar  3 18:38:00 2025 GMT
        Subject: CN=60E26A288E78673E9D729F325B54A7C2E88198C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:c7:51:f7:67:6f:37:61:dc:4f:80:b8:d5:
                    db:14:c0:5d:91:80:56:9c:bf:cb:75:3d:1c:ae:bf:
                    af:18:ab:87:23:b5:af:99:3b:8d:20:ea:58:a2:a1:
                    99:dc:25:4e:16:90:7a:a2:82:e0:4f:65:78:88:4e:
                    f1:89:cf:65:fb:08:b6:2a:d8:a7:72:fa:fb:c5:25:
                    af:27:95:ae:3c:f5:f9:73:a3:3b:7d:a6:83:3c:fd:
                    e6:aa:24:56:56:f8:b3:bf:6f:8e:e7:91:92:48:88:
                    3f:29:ad:77:94:4f:29:e2:f9:d3:1f:6a:49:ef:df:
                    f6:ed:ac:13:39:e9:f6:6d:92:bb:ac:a8:dc:0b:89:
                    a3:fa:33:15:58:28:ae:e3:01:d2:a3:62:95:e8:7e:
                    fd:1f:04:b9:4b:fd:b0:46:85:2d:4c:11:f0:ca:90:
                    5d:a8:5a:01:96:54:b9:fe:c5:2c:d3:6c:b2:91:bb:
                    fb:18:78:70:71:af:91:f6:67:2f:26:11:89:5d:ef:
                    f1:c0:c3:a0:48:7a:5a:5e:49:28:b7:79:25:e5:ac:
                    ff:e8:cf:a4:71:a3:0e:8d:35:55:2b:35:f0:1f:40:
                    48:29:cc:be:cf:4c:ec:dc:2f:24:53:71:b9:01:c8:
                    24:1b:6c:fc:c7:a6:f6:cc:cc:0a:7a:ae:10:cc:54:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:6A:28:8E:78:67:3E:9D:72:9F:32:5B:54:A7:C2:E8:81:98:C4
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         d0:0f:ca:1e:aa:32:82:3d:7b:0a:41:b4:b2:b4:2e:f4:f9:b5:
         91:7d:c0:6b:a7:e2:f9:a0:47:fb:6c:c4:03:fb:67:0e:93:a6:
         e6:a8:86:1b:71:ff:c0:35:d3:76:46:a9:9e:6e:1c:30:2c:07:
         bf:9d:18:dd:25:9d:a8:e0:73:44:35:b7:58:e0:3e:56:b1:ef:
         c8:41:9e:3e:09:a9:b9:08:e5:42:dd:46:79:8b:45:c5:1c:a7:
         ce:1b:33:cd:50:1f:78:b9:d9:12:fc:10:5b:c9:7d:2b:f7:81:
         0b:9d:f5:ec:3a:d3:e7:56:d0:5b:a7:5d:d3:53:0e:1a:66:12:
         8b:e9:42:55:67:97:53:3d:24:28:fe:4f:b4:87:5c:14:c2:66:
         0b:84:40:a9:86:62:32:45:78:a2:d5:c2:cd:ce:52:01:15:33:
         45:e6:e5:3c:54:a5:c1:28:82:75:54:f1:21:1d:9e:37:49:03:
         81:3a:9c:60:21:40:f4:e6:0d:cf:57:05:3d:1f:5d:49:a8:78:
         6b:a3:d5:e6:f9:05:59:5c:d9:0b:68:2d:9b:1b:49:14:a5:41:
         ed:13:0b:73:43:f8:00:11:c6:bd:3d:cd:16:f0:f8:fd:22:7a:
         6f:9e:4e:62:37:68:a7:25:1a:ad:d8:09:1d:bf:04:89:68:2d:
         fb:90:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org