Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          FpaPgKhO71BmXRF8QkAVMJm0gjcg9NQxbigm5eItQvI=
Subject key identifier:   73:5F:B8:83:DA:D0:C2:F2:DC:6B:CC:26:DF:DB:3E:10:66:29:6C:6C
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       6A4D6DCD605AC9BC054DA06CDFD8001D965DBB65
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:09 +0000
ROA not before:           Mon 04 Mar 2024 18:33:09 +0000
ROA not after:            Mon 03 Mar 2025 18:38:09 +0000
asID:                     264936
IP address blocks:        2804:3034:60::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4d:6d:cd:60:5a:c9:bc:05:4d:a0:6c:df:d8:00:1d:96:5d:bb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:09 2024 GMT
            Not After : Mar  3 18:38:09 2025 GMT
        Subject: CN=735FB883DAD0C2F2DC6BCC26DFDB3E1066296C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:ad:d0:04:a9:c5:ad:54:21:4f:86:95:47:
                    c1:9e:b1:32:54:40:17:01:94:bb:1c:b1:f5:9c:91:
                    21:fa:19:b6:d6:34:c9:ae:36:3a:13:47:42:7b:a9:
                    09:17:47:72:e5:86:19:a6:aa:29:c4:8b:ff:e3:66:
                    dc:94:b5:97:68:98:d7:1b:01:9e:7b:1f:60:37:c8:
                    57:1a:a5:88:3c:23:b7:a7:f6:56:bb:08:83:af:b0:
                    78:4d:d0:c0:f1:3e:45:ab:4d:d3:dc:71:74:ce:e4:
                    20:50:39:0f:36:f4:45:d2:d3:5e:7d:ee:85:d4:bf:
                    e4:76:a4:f0:e5:81:1f:1d:f5:ef:44:ef:f0:d8:01:
                    f0:e2:eb:2f:62:17:94:32:7b:7e:d7:17:2b:33:34:
                    0c:e9:d2:3e:cf:5b:9b:6b:51:22:31:70:1f:aa:3a:
                    ee:ce:eb:82:5b:ad:08:86:2b:14:c9:c4:c2:39:f1:
                    c1:f1:df:aa:71:d8:93:b3:1b:fe:de:24:af:3c:bd:
                    cc:81:3f:74:ce:41:e0:47:76:00:af:e5:c0:69:30:
                    d6:c3:e3:74:03:23:29:a0:c9:dd:2d:d3:9d:e1:6f:
                    f0:53:15:04:70:8e:97:12:75:d6:c4:60:aa:5b:55:
                    ff:d5:22:95:08:ab:cf:77:1a:a2:2a:ab:f0:94:fc:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:B8:83:DA:D0:C2:F2:DC:6B:CC:26:DF:DB:3E:10:66:29:6C:6C
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:e9:ca:72:80:50:fc:25:63:26:25:13:ea:37:35:d2:13:8d:
         74:62:ac:29:61:fa:b2:1c:25:c8:e4:33:8e:c0:49:3c:1a:d4:
         63:3c:9c:7f:19:d4:f3:ca:f8:05:a3:67:d8:b5:a8:05:2c:43:
         45:87:a0:5b:86:71:1f:5e:df:66:b0:dd:32:47:fb:02:c4:a8:
         ed:be:01:31:16:94:3c:04:00:cb:0c:80:2c:31:27:c5:10:4e:
         86:93:79:dd:3d:3f:c1:5f:4e:c5:12:1c:c9:b8:f1:d3:a2:ea:
         6d:95:50:a0:45:4b:23:8c:cc:11:bc:e5:95:45:15:b9:4d:09:
         63:18:dd:7e:2d:b2:cf:28:b3:14:19:2d:3b:82:e7:1a:ce:6e:
         0d:e8:66:60:16:de:a6:03:38:05:82:fe:e9:2b:6d:8a:91:c2:
         ac:b8:15:2d:5b:20:25:f3:a4:ea:ae:be:98:4f:09:c1:48:7d:
         f6:4e:17:54:f9:11:9d:95:f1:6d:e0:b5:c4:c1:b8:37:a0:08:
         15:95:12:f2:50:99:03:c4:9b:06:19:2a:3e:32:1f:36:6f:f6:
         55:6d:3c:62:ab:27:b0:7e:2d:5e:95:df:1b:75:e5:8e:a7:e2:
         3a:6e:0e:ca:13:04:65:36:f1:4e:0e:78:2e:08:1d:4b:82:0d:
         f7:43:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org