Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          cL2qcTbQfYfN1a3odVme+Yth7Cxq2n1haztQ2s0J4bs=
Subject key identifier:   FF:9E:E8:D2:F6:5F:65:A5:04:22:62:B8:43:9A:89:0E:43:5F:E5:C4
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       60A38D392E52865F82984859AE862EB39CC2CB65
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:03 +0000
ROA not before:           Mon 04 Mar 2024 18:33:03 +0000
ROA not after:            Mon 03 Mar 2025 18:38:03 +0000
asID:                     264936
IP address blocks:        2804:3034:50::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:8d:39:2e:52:86:5f:82:98:48:59:ae:86:2e:b3:9c:c2:cb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:03 2024 GMT
            Not After : Mar  3 18:38:03 2025 GMT
        Subject: CN=FF9EE8D2F65F65A5042262B8439A890E435FE5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:97:91:c1:fc:6c:37:72:d9:84:b2:4d:c8:
                    c4:d8:28:d9:cb:e9:be:55:68:8b:27:5d:c9:38:66:
                    24:e6:b3:71:4b:af:1b:c7:4f:35:ab:29:4a:98:eb:
                    28:a0:ce:6a:3e:a6:eb:7b:c4:64:4d:06:a9:17:fd:
                    07:96:e9:ff:f0:f7:6a:8b:bd:83:a4:0e:f6:8a:84:
                    d3:32:8b:2b:f6:1a:b8:9d:47:07:36:a0:48:bd:64:
                    95:63:80:f2:cc:8b:55:e1:22:d5:d4:ab:3a:8f:e0:
                    69:af:bc:a9:7a:d0:41:90:31:2d:c8:d5:3d:b7:7d:
                    a3:3c:52:85:3a:1d:a3:f7:89:67:b5:70:fc:8a:3a:
                    8d:70:d3:84:d0:41:5e:4a:07:1e:3d:c3:be:a6:2d:
                    d6:a0:94:63:db:6f:35:64:94:1f:5f:a6:52:e7:0d:
                    3f:8a:c6:c8:16:9c:67:6e:71:35:78:c7:51:ec:a9:
                    c7:5a:4c:85:7f:19:fb:9c:cc:96:be:77:02:93:e5:
                    6a:2f:9c:4f:b1:cd:a6:02:93:5c:5e:c4:b2:53:28:
                    29:75:11:21:26:ac:c2:37:a1:54:f8:88:59:c2:51:
                    ca:e1:6a:9c:23:c0:9e:1a:fe:4c:0c:26:35:ca:f5:
                    71:a1:ac:00:34:0c:eb:b7:44:ad:b6:d1:b4:61:33:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:E8:D2:F6:5F:65:A5:04:22:62:B8:43:9A:89:0E:43:5F:E5:C4
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:3a:f4:25:76:0b:30:6a:1f:a9:41:c3:1a:69:91:fc:a3:19:
         c8:6a:58:8a:ef:36:8e:2e:5b:cb:6f:85:cf:d6:fe:31:45:d8:
         15:78:18:5d:0a:ff:2b:bb:94:7c:1e:54:79:1e:36:47:90:5f:
         e6:79:dd:f5:46:4b:70:92:8f:c2:4f:31:98:15:db:96:3e:8b:
         5b:55:ab:6e:2c:d1:4f:7f:f2:d0:b1:f2:7d:ca:95:a7:48:bb:
         7f:14:1f:1d:67:d2:de:65:92:75:e7:21:76:7b:91:00:5f:1a:
         89:07:7f:3c:77:2a:1b:27:5f:41:cc:d7:d2:9a:17:98:8b:a9:
         dd:e9:60:86:73:b1:3a:39:22:4a:16:d1:76:12:10:35:1d:07:
         f6:ad:5b:f5:64:31:52:d1:e3:12:07:48:fc:b4:e7:44:6e:6a:
         c7:2f:59:11:e7:18:eb:fc:0b:c6:c9:ed:f0:d7:cb:f1:d3:70:
         f1:97:39:56:a7:0b:95:95:34:50:bc:1b:e7:04:79:7b:6a:f3:
         16:a0:7d:e2:ab:9b:90:b4:d5:c0:a6:b1:f5:ff:4f:46:a2:20:
         4b:50:74:8f:0c:c1:9d:4d:49:f4:c0:32:ca:14:8e:b8:7d:02:
         7a:c7:c7:5d:75:a9:7e:1c:aa:34:fa:e6:86:e5:85:36:4c:0a:
         2c:4b:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org