Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a343030303a3a2f33342d3334203d3e20323731333039.roa
File:                     323830343a373938303a343030303a3a2f33342d3334203d3e20323731333039.roa (raw, json)
Hash identifier:          9q9pjAFEVDRpND6R+PlKNZeSuYy5Hsy9mvXuNsGM9FU=
Subject key identifier:   5E:8A:8D:5A:65:E3:5D:C7:03:40:03:D7:57:94:41:0D:7B:12:4C:D0
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       6EEFD9A382287AA2A3807BE1388CB1C8D07FC976
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a343030303a3a2f33342d3334203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:21 +0000
ROA not before:           Mon 11 Mar 2024 17:33:21 +0000
ROA not after:            Mon 10 Mar 2025 17:38:21 +0000
asID:                     271309
IP address blocks:        2804:7980:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ef:d9:a3:82:28:7a:a2:a3:80:7b:e1:38:8c:b1:c8:d0:7f:c9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:21 2024 GMT
            Not After : Mar 10 17:38:21 2025 GMT
        Subject: CN=5E8A8D5A65E35DC7034003D75794410D7B124CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:4a:52:b3:2e:50:7e:d9:e3:68:85:0b:91:
                    64:a0:43:19:55:4f:50:72:c3:e2:9e:58:b1:f6:2b:
                    e7:63:d5:6c:a7:6c:87:79:46:ab:ff:bd:d6:12:29:
                    76:0e:33:64:ba:10:0f:e4:c7:0c:eb:35:d8:ea:21:
                    1a:42:84:ae:6c:e4:73:8a:32:3c:fb:ea:5f:0c:02:
                    ff:4d:84:27:a8:b7:a8:85:19:6c:22:df:85:00:8e:
                    54:e4:61:5f:0c:cb:9c:48:a5:b5:13:45:11:2e:a9:
                    8f:9c:cd:5b:f5:1a:88:af:18:0d:f9:6c:1d:b4:cb:
                    83:e7:4e:45:fc:7a:9c:61:43:28:6a:40:4a:87:e3:
                    96:07:8b:65:b8:e3:f1:20:0d:c1:35:6e:0c:08:e4:
                    da:09:12:ea:0a:1d:8a:62:f7:15:43:ad:49:ef:f0:
                    12:6b:f1:fc:43:1c:08:95:e3:f5:99:82:f7:c9:41:
                    cf:f3:8f:54:2e:33:1a:33:b8:8b:5b:c5:60:fa:63:
                    57:17:f9:db:64:88:67:9d:d7:84:f7:4c:2e:0c:45:
                    31:3e:8b:58:8d:bd:71:c7:31:bd:7e:be:5a:54:cf:
                    1c:4f:3c:27:1f:6d:14:75:63:ed:07:6c:f2:6e:88:
                    af:2a:b3:a8:50:ba:6c:4f:f3:6c:73:7d:f8:16:69:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8A:8D:5A:65:E3:5D:C7:03:40:03:D7:57:94:41:0D:7B:12:4C:D0
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a343030303a3a2f33342d3334203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:db:c4:0c:4f:da:12:c0:c4:fd:27:d6:8e:95:4b:b8:2d:
         b5:a1:e7:9b:dc:b4:6e:fd:90:8f:b7:4a:69:4d:f5:d2:77:df:
         25:c9:42:01:ac:a1:9d:87:7a:3c:a5:1b:08:f6:03:e2:0e:82:
         dc:b7:3b:4c:b7:ac:8e:a9:a1:cf:8c:74:c6:0d:4d:e0:97:0d:
         7f:9a:2f:51:67:9c:76:7f:7d:bf:fe:9f:77:6c:df:5e:7b:d4:
         ad:2f:01:d3:71:70:c8:ad:f0:40:1d:91:47:e2:f8:c9:17:50:
         86:c9:65:6f:17:25:fc:28:0a:52:93:1e:8b:a2:ea:de:1b:04:
         24:84:b7:fa:40:ae:8f:d4:5e:a5:c7:38:a3:c8:e3:38:18:25:
         42:d8:9e:f3:99:5d:10:bb:d7:a7:8b:a2:fb:69:5b:63:7b:c9:
         ad:21:15:9b:c4:97:11:e3:fd:57:5e:17:a8:bf:98:d4:08:6a:
         66:70:6c:33:fd:58:52:7e:29:63:ab:33:66:69:27:45:a5:12:
         c6:20:07:31:58:3b:a5:f3:3a:8e:3a:ff:87:e6:41:1b:d3:07:
         10:96:55:b5:c1:8a:ff:1f:c8:54:37:fd:80:ab:51:01:5c:c1:
         2b:bd:2e:27:d3:97:70:0a:9e:b6:48:b0:3e:76:43:0d:30:0d:
         3a:57:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org