Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a633030303a3a2f33342d3334203d3e20323731333039.roa
File:                     323830343a373938303a633030303a3a2f33342d3334203d3e20323731333039.roa (raw, json)
Hash identifier:          t+g8V+KOZAh/Kkgx9lDyS4PlNNQvYlOUakAe9GzjHj4=
Subject key identifier:   65:46:0F:AF:C9:E4:6F:D1:09:D7:18:BF:7D:C3:1B:BE:8D:5A:4F:34
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       0A8152ED7CD66A82ACCD853432E6F22673F1B5D7
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a633030303a3a2f33342d3334203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:22 +0000
ROA not before:           Mon 11 Mar 2024 17:33:22 +0000
ROA not after:            Mon 10 Mar 2025 17:38:22 +0000
asID:                     271309
IP address blocks:        2804:7980:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:81:52:ed:7c:d6:6a:82:ac:cd:85:34:32:e6:f2:26:73:f1:b5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:22 2024 GMT
            Not After : Mar 10 17:38:22 2025 GMT
        Subject: CN=65460FAFC9E46FD109D718BF7DC31BBE8D5A4F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:77:be:ed:eb:92:83:eb:e9:57:78:1c:c2:
                    2c:87:8b:29:97:b1:1c:ca:2d:94:0e:3e:51:da:a8:
                    a8:e0:c9:19:e6:c1:80:8b:be:2b:4f:a6:1c:04:bb:
                    3b:fc:d6:0a:af:90:89:63:13:80:bd:44:d8:02:5a:
                    87:b5:da:5c:52:12:af:ba:0e:7b:a1:11:55:ef:b6:
                    60:67:b3:ab:11:c1:03:2f:46:e6:f6:f3:87:3c:bc:
                    82:54:76:03:49:2c:fa:4b:7c:fc:59:64:4c:4b:12:
                    a1:da:78:4d:4c:d7:7a:d5:e5:60:8b:72:8b:34:bc:
                    63:29:dd:fb:26:90:2b:36:b3:a5:d9:6f:de:ed:4a:
                    f6:c5:a0:73:1a:db:02:b2:48:f6:a9:a6:a7:ab:b5:
                    8c:70:1c:4d:d6:1b:23:bc:c3:be:e0:2e:c2:42:7a:
                    c8:36:1f:b8:01:84:4a:6b:1b:3c:b3:54:72:89:2e:
                    d4:2a:7f:dd:c0:a5:37:e6:c8:ff:90:a7:9d:46:38:
                    f9:bb:6c:da:9b:1f:7d:8d:17:ad:82:64:ab:95:ce:
                    06:98:ea:de:3d:f4:1d:de:2e:a1:dc:0f:e1:07:67:
                    5f:99:8d:3f:aa:e8:6e:ff:75:c4:48:20:22:b3:09:
                    46:28:5c:c6:74:91:84:d8:a2:c2:a2:b1:48:81:ca:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:46:0F:AF:C9:E4:6F:D1:09:D7:18:BF:7D:C3:1B:BE:8D:5A:4F:34
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a633030303a3a2f33342d3334203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b1:02:f3:35:37:78:50:0d:c8:fc:83:fc:df:9c:0e:c1:8d:c6:
         12:68:de:3d:47:b6:27:81:a0:1c:47:03:7e:33:76:46:eb:e4:
         ba:86:55:bf:34:81:a1:9b:78:e4:68:f1:c9:20:f4:5b:10:cb:
         81:94:83:20:6c:ed:1f:e1:2e:c5:c4:d2:8a:eb:dc:de:54:18:
         89:ab:d2:3f:d4:50:51:e1:4d:f1:15:75:59:1e:fb:ac:22:4d:
         7c:a8:9d:66:ea:c0:b5:a3:d1:0a:b2:bc:41:0e:95:07:0e:f0:
         bc:d7:df:5b:fb:fb:86:a9:ce:f5:23:8e:5f:a6:0b:13:2a:40:
         e2:aa:d2:7f:d7:f6:a1:5d:16:07:b4:b0:b6:f5:72:de:9e:2a:
         d3:0c:a0:db:3c:fa:8a:e8:fe:72:d1:d3:f9:c2:c4:43:c1:f8:
         8f:c7:6a:96:16:7a:24:0b:96:ef:36:6c:02:dd:d0:ab:54:c5:
         54:1c:69:ac:8e:9e:f8:84:c9:0e:d9:cf:e3:ec:5b:4b:2f:b5:
         ac:5f:b9:a4:67:05:22:ff:85:b5:c6:e0:92:30:0b:f1:f9:48:
         15:01:73:78:7c:d8:f0:6b:e7:b3:b2:42:4b:bb:9b:ff:98:23:
         43:92:e2:b9:4e:c4:f5:79:f8:b8:54:c9:8e:39:78:32:8a:86:
         f0:3a:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org