Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          HRKzKOAOKE0hsXtygsGirmO1xGGGqnDrpChat4hNTro=
Subject key identifier:   01:82:0D:35:39:47:9D:7A:54:15:74:4B:C2:10:72:57:C0:AF:DC:6C
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       2FF80DBE8D1BBCA9755927CBF7EEDA2E9011EEBF
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:37:48 +0000
ROA not before:           Mon 04 Mar 2024 18:32:48 +0000
ROA not after:            Mon 03 Mar 2025 18:37:48 +0000
asID:                     264936
IP address blocks:        2804:3034::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f8:0d:be:8d:1b:bc:a9:75:59:27:cb:f7:ee:da:2e:90:11:ee:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:32:48 2024 GMT
            Not After : Mar  3 18:37:48 2025 GMT
        Subject: CN=01820D3539479D7A5415744BC2107257C0AFDC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:ab:88:ba:e0:1f:1c:5c:88:63:ea:85:08:
                    e4:a7:f3:f0:ca:c1:42:06:4a:74:b0:58:5a:4c:f1:
                    54:d8:ff:d5:d2:89:c2:4f:fe:6b:37:20:72:be:25:
                    82:71:e1:19:80:83:54:f7:78:b5:46:31:2d:d5:07:
                    ca:45:8c:e4:63:3f:f5:fa:73:8d:2d:29:36:6b:6d:
                    6d:ee:30:01:73:20:a4:b8:f6:d6:41:72:12:e3:34:
                    0a:49:58:75:3c:8d:7d:60:3d:3e:76:e8:49:db:8e:
                    cd:59:ee:3c:ab:15:c1:dc:34:16:fb:6a:78:46:6f:
                    77:c7:05:e4:16:1f:0c:8b:0d:ea:d3:9a:14:db:f6:
                    cc:fd:90:ca:15:d8:3f:12:a4:fd:3b:c7:39:43:ec:
                    c1:e4:2a:7c:39:27:21:16:1c:88:b3:8c:f1:c4:b6:
                    23:89:f4:2f:17:20:03:d5:df:4e:a1:be:86:46:96:
                    90:ba:6c:a0:5b:b4:9f:8a:f7:13:25:f8:d0:bf:56:
                    61:1d:5c:43:6c:a3:7f:61:f7:ad:a3:1a:88:b5:ae:
                    7a:42:57:13:40:bf:da:7c:d0:ee:4a:3a:ca:e7:38:
                    ab:9e:30:40:cb:4d:61:c6:fc:5e:63:a9:00:0d:89:
                    73:1b:b4:d6:20:bf:e8:16:16:bc:75:7a:34:ea:6c:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:82:0D:35:39:47:9D:7A:54:15:74:4B:C2:10:72:57:C0:AF:DC:6C
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/44

    Signature Algorithm: sha256WithRSAEncryption
         9a:5b:45:2d:f3:0b:7b:3e:34:78:90:9c:a7:39:30:e1:00:58:
         99:da:e1:d6:f8:cd:26:50:9f:c7:62:d1:10:9a:42:23:ee:08:
         42:30:bc:f3:14:71:d2:eb:4f:e9:3a:4d:06:15:f9:6a:48:48:
         bf:51:a9:bc:b2:21:3a:fe:07:22:0a:20:d2:11:7c:80:0e:28:
         e3:9c:50:72:35:6e:18:44:11:01:68:69:f2:71:ac:c8:8d:8d:
         d0:2a:7f:8d:46:5d:74:95:fe:9a:a3:1f:5b:48:f0:86:58:97:
         be:ea:7d:e7:12:ea:d8:f6:e5:b5:db:0d:c5:ea:7e:f0:c2:1a:
         d6:07:7a:33:36:b6:c4:7f:fb:91:6d:57:e2:a4:4f:66:6b:ae:
         84:34:a9:aa:cd:a7:d5:95:a0:fc:ea:00:0c:33:c0:41:ee:aa:
         4e:43:3a:20:ec:fe:d7:fb:99:f9:e8:18:64:e0:91:e4:77:3e:
         e4:bd:72:3d:84:00:66:f3:8f:6b:e1:a0:61:93:97:2a:4e:37:
         5d:2c:db:f2:19:31:1c:65:49:da:b9:19:b8:63:d2:fa:c5:cc:
         7f:0e:60:00:7d:bf:6e:05:f0:c6:86:63:03:8c:85:e3:97:5a:
         57:d7:b0:84:d4:11:0e:cc:f4:1d:52:10:83:6e:da:65:1f:bf:
         b7:ed:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org