Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
File:                     323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa (raw, json)
Hash identifier:          Nr895aci/dg06SRuxsthIFFScPlEbKfFROjSrpuM8oM=
Subject key identifier:   41:53:6A:8B:36:F6:6E:4E:EA:60:9A:69:F9:E7:1B:C0:97:90:43:5F
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       4C412903C606BDC48A1478C838A6B78F11200250
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:22 +0000
ROA not before:           Mon 11 Mar 2024 17:33:22 +0000
ROA not after:            Mon 10 Mar 2025 17:38:22 +0000
asID:                     271309
IP address blocks:        2804:7980:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:41:29:03:c6:06:bd:c4:8a:14:78:c8:38:a6:b7:8f:11:20:02:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:22 2024 GMT
            Not After : Mar 10 17:38:22 2025 GMT
        Subject: CN=41536A8B36F66E4EEA609A69F9E71BC09790435F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:bc:45:f5:d5:d4:84:86:2a:db:a0:a5:e3:
                    f7:99:80:80:c5:92:62:38:69:6e:b4:b0:cb:0d:7e:
                    53:dd:db:ea:4c:97:63:dc:e5:ed:09:76:f6:01:4b:
                    0b:70:17:38:5a:e8:b2:df:b9:62:70:db:f0:dc:0a:
                    85:f4:4f:f8:23:5a:2a:05:39:fd:f2:fc:40:09:36:
                    50:54:47:77:06:05:a6:cd:12:a4:6e:7d:5d:f2:48:
                    3c:cf:f5:fd:50:26:6e:c2:f2:38:81:19:fc:83:8b:
                    71:d9:10:20:16:6e:b6:96:91:46:18:47:e5:96:b9:
                    a8:b5:fc:83:3d:86:2c:d6:bd:56:5b:97:be:48:7e:
                    2a:a6:3f:d8:07:6e:3d:73:5c:14:31:0d:42:0b:9f:
                    73:f1:77:7d:a8:00:1d:7c:69:01:a6:79:24:f0:c4:
                    eb:fe:e8:cf:56:2d:f9:2f:a3:d3:b2:39:4c:ab:e9:
                    d9:34:dc:7d:c4:49:39:b7:9f:22:c0:f8:55:bc:de:
                    c0:07:b7:c8:de:20:6f:f2:7c:6d:23:a4:6e:18:87:
                    c1:9d:89:19:51:81:7c:71:0e:a5:9b:87:d2:7c:9e:
                    a0:f9:e3:6c:18:c6:d7:02:7d:36:dc:ef:80:54:fa:
                    03:dc:37:06:9f:21:6f:38:83:a3:9d:d8:c9:2b:5a:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:53:6A:8B:36:F6:6E:4E:EA:60:9A:69:F9:E7:1B:C0:97:90:43:5F
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:79:61:96:2a:99:02:d8:da:68:f9:57:ea:a4:23:10:d2:
         ce:74:ff:62:3f:4b:62:62:18:9b:30:4d:87:7e:b1:dc:85:2e:
         ab:5e:77:68:95:a6:33:8c:89:d9:8e:29:f8:a0:3f:96:c6:43:
         59:cd:59:d0:75:6d:79:26:b8:d2:41:cd:17:8b:7d:fc:e1:fa:
         05:05:4b:ca:85:d0:df:fa:35:a7:04:67:a4:f8:e0:e2:e2:25:
         22:7a:2b:f3:93:16:2c:20:57:90:8d:d4:8f:dc:94:7c:13:be:
         0b:45:52:ef:48:f2:a3:b5:0d:e8:8d:b4:ba:b3:b1:16:5e:c5:
         d0:b3:55:ea:f0:6f:3d:72:c6:ab:19:45:9a:34:54:12:77:7e:
         54:43:55:63:ad:35:b2:65:95:1e:87:74:36:16:05:94:61:11:
         8e:05:b3:f3:1d:13:da:6c:40:aa:f7:55:84:97:da:88:72:18:
         d5:9d:c4:14:c3:f3:1d:e5:c2:30:2f:a7:ed:ae:73:d7:0f:f6:
         e9:26:c6:1b:df:13:b1:e0:1a:08:f6:81:f5:0c:33:56:e4:24:
         27:de:49:85:c8:43:07:91:2a:ff:6a:d5:97:cc:9f:85:fa:41:
         71:ec:3e:9c:20:df:f5:0e:89:e1:9e:13:a5:e1:a6:c0:f8:36:
         4f:e3:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org