Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa
File:                     323830343a333033343a3a2f33322d3332203d3e20323634393336.roa (raw, json)
Hash identifier:          SsN7pHDgp0VOdDuvh2DkqA01EPUI/uYGVBEum674UMA=
Subject key identifier:   F1:2C:D8:C3:52:39:0C:6F:C0:6A:AC:52:F6:17:D5:DE:14:BE:80:A5
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       716F8B2D161DBCE715B186C6EE8A33C5FF987F95
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:37:45 +0000
ROA not before:           Mon 04 Mar 2024 18:32:45 +0000
ROA not after:            Mon 03 Mar 2025 18:37:45 +0000
asID:                     264936
IP address blocks:        2804:3034::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6f:8b:2d:16:1d:bc:e7:15:b1:86:c6:ee:8a:33:c5:ff:98:7f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:32:45 2024 GMT
            Not After : Mar  3 18:37:45 2025 GMT
        Subject: CN=F12CD8C352390C6FC06AAC52F617D5DE14BE80A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:4d:ac:88:57:74:a1:07:a9:08:95:d2:18:
                    85:2d:bc:b4:13:83:4a:45:36:e7:84:fa:bd:75:77:
                    05:b5:d1:26:0e:fa:e2:02:30:15:0b:ad:3c:e8:11:
                    74:b6:a8:52:4f:62:4a:93:24:30:60:c4:f0:9e:26:
                    36:62:82:12:a5:94:09:e7:59:a9:91:2a:da:a6:97:
                    5b:9a:c5:d8:c7:8d:32:de:61:41:23:7e:0f:af:da:
                    23:2d:bd:cb:c5:81:dc:a2:97:ef:9d:58:8b:cc:5b:
                    57:80:ef:8f:5d:70:0d:37:f9:e2:7a:d8:52:33:57:
                    f6:d7:26:84:85:6c:22:28:fe:b0:be:13:e2:64:57:
                    38:47:6e:24:49:4a:39:aa:08:95:13:97:52:aa:b7:
                    7d:39:68:34:3d:da:87:18:b5:e5:54:7d:d8:d3:40:
                    a7:68:d7:40:c7:b2:17:4d:d7:5c:55:49:03:3f:e4:
                    2f:78:88:4f:e7:ca:7d:3c:60:59:17:91:ca:3f:98:
                    a1:59:2f:b7:58:3e:6d:ba:73:92:a8:c4:6d:e0:18:
                    66:a3:84:f1:7c:1f:6c:dd:f3:69:3a:12:7e:51:b9:
                    c8:ed:7c:7a:17:9a:3d:97:c2:fb:66:61:b1:d5:12:
                    da:83:ee:f2:44:50:aa:08:8c:c7:ce:b8:f0:27:29:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:D8:C3:52:39:0C:6F:C0:6A:AC:52:F6:17:D5:DE:14:BE:80:A5
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:e5:cc:12:8f:5b:19:c0:49:40:93:37:52:1a:36:7a:d9:
         33:de:ab:19:6b:77:42:47:60:cd:cf:d5:ed:39:2c:45:8b:28:
         cf:f4:ff:b0:dc:a9:0d:81:0c:01:b5:a6:6d:78:c1:51:7f:8f:
         e6:05:7f:b2:5e:40:4f:bf:9b:a3:5d:40:de:35:f7:a3:43:ae:
         63:2b:ca:d8:43:91:07:af:c7:1b:81:1a:a4:13:02:47:d9:22:
         10:d2:01:9f:c7:17:5a:7b:09:6f:07:f1:c2:c3:57:c3:7e:f7:
         94:0d:98:26:32:c7:84:ca:50:34:c2:1a:5a:c3:9b:dd:93:57:
         9e:39:c5:a8:28:ed:e6:21:6a:62:97:c5:e2:62:c4:af:75:8e:
         50:02:05:4d:e3:1a:3e:dc:0e:fa:f4:1f:6f:22:ca:b4:2b:78:
         19:53:a9:2f:14:59:21:bb:fb:7a:ba:24:bc:29:2a:e9:97:34:
         f6:0d:b0:df:67:26:7a:8d:c8:77:49:e1:a1:a4:d8:27:f6:12:
         dc:02:a5:e2:05:65:e7:c8:d0:66:96:98:95:48:3f:c7:13:eb:
         18:ba:80:b4:2d:a7:fb:97:f3:a2:28:7c:48:8a:f6:6d:6a:28:
         61:d5:46:a7:14:d9:c9:91:5a:b5:d2:14:a8:0a:43:78:91:a9:
         3c:e9:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org