Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa
File:                     323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa (raw, json)
Hash identifier:          jq6XPd4DdU5JFjoMLd3E9i9qJRbUDiG6LyPkb1NOt/c=
Subject key identifier:   7C:8D:90:39:D2:09:24:B4:FA:04:3B:DB:7F:E4:00:72:CD:CB:73:85
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       53151A78C4375836DBB5673E96DB9EF9C7CF3AC1
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:04 +0000
ROA not before:           Tue 21 Nov 2023 05:55:04 +0000
ROA not after:            Tue 19 Nov 2024 06:00:04 +0000
asID:                     52977
IP address blocks:        2804:768:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:15:1a:78:c4:37:58:36:db:b5:67:3e:96:db:9e:f9:c7:cf:3a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:04 2023 GMT
            Not After : Nov 19 06:00:04 2024 GMT
        Subject: CN=7C8D9039D20924B4FA043BDB7FE40072CDCB7385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:55:c0:12:a4:47:33:3f:f8:11:d8:5b:0b:
                    11:dc:1f:13:e1:fb:d4:8b:c4:a4:72:3c:0b:46:3c:
                    31:77:80:cf:6f:14:57:70:03:41:b1:ce:a4:30:d8:
                    14:b8:c2:16:4a:96:97:d7:ff:e0:f3:94:fa:4d:d5:
                    df:a1:c0:06:1c:ec:27:fe:31:55:40:fc:4a:b4:8c:
                    a6:d8:34:84:25:08:71:41:e0:25:6a:26:6e:f6:96:
                    00:bb:de:5e:c3:de:66:50:33:50:7c:a5:70:96:37:
                    a8:12:80:aa:e2:37:bd:04:dd:65:f8:2d:4c:73:d1:
                    1d:3b:e0:d9:9a:1e:ef:af:a5:fa:92:68:8b:b4:f1:
                    bd:5e:64:de:61:d9:3d:7b:80:8c:55:04:12:47:e5:
                    94:0e:17:04:90:ca:18:0f:bf:3a:42:b7:7f:9e:38:
                    85:01:ab:7f:8b:81:c4:fa:5d:92:30:bc:39:d6:a8:
                    ac:c0:29:87:e0:28:ec:e0:e8:85:da:05:9d:f5:a0:
                    36:ff:f9:5b:a0:6b:81:2f:94:b6:8b:6d:c4:c6:40:
                    98:83:14:56:b7:85:6e:e5:6d:a9:bb:ea:f8:a4:23:
                    3e:87:74:dc:87:1a:39:63:37:d5:f2:86:78:ba:b5:
                    39:0c:98:6c:03:9c:ed:45:05:09:16:71:e3:63:33:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:90:39:D2:09:24:B4:FA:04:3B:DB:7F:E4:00:72:CD:CB:73:85
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:e3:8b:78:1f:f9:8f:3e:ae:c3:37:68:9d:ef:f9:aa:25:
         22:e2:bd:16:3d:96:d2:eb:36:04:72:9b:92:2c:c9:c8:07:9d:
         01:c8:3d:f2:f4:39:89:01:c1:5f:2e:2e:f0:e1:15:96:c8:cd:
         68:09:c3:a6:6e:69:f2:50:e2:e9:c2:7b:37:75:8e:86:98:9a:
         87:e1:95:da:eb:00:ab:e9:41:55:13:84:d8:4e:2a:28:77:e7:
         64:fd:3e:74:b5:c5:09:b3:29:5f:74:78:24:3f:6b:71:6e:00:
         82:b3:ba:26:5f:e6:a4:ef:a7:1e:f2:d0:28:40:f6:52:a5:9d:
         71:2d:78:25:85:23:d5:db:ec:f9:60:70:5f:2a:99:68:df:6b:
         01:2f:bb:af:97:f9:c9:bf:c2:8b:af:03:c3:9d:9d:51:ff:68:
         88:5f:39:9a:d7:07:55:18:ef:bd:1c:7d:0b:e5:da:3a:7b:70:
         50:c5:d3:88:a7:fc:d1:18:03:42:59:22:58:f3:9a:b8:d2:0f:
         7a:01:74:1f:0d:f9:e8:33:f6:51:37:07:1b:1e:71:e5:75:6a:
         63:ee:e9:d3:e8:c1:ec:c5:02:48:98:2f:b4:fc:88:a5:32:8f:
         15:81:ee:51:af:dc:9b:c9:17:20:a1:98:b5:f7:05:86:72:21:
         63:ee:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org