Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa
File:                     323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa (raw, json)
Hash identifier:          3JcTMoP1XyvvG786B0AdhE3Y8SRt9xOSlud+I8AObn0=
Subject key identifier:   DF:93:19:B4:66:61:09:01:5F:21:29:F3:2B:70:5D:7C:47:3F:8D:0D
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       35417E14965F5F7108F35E7AB5134CFEE7DD15E8
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:01 +0000
ROA not before:           Tue 21 Nov 2023 05:55:01 +0000
ROA not after:            Tue 19 Nov 2024 06:00:01 +0000
asID:                     52977
IP address blocks:        2804:768:4b00::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:7e:14:96:5f:5f:71:08:f3:5e:7a:b5:13:4c:fe:e7:dd:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:01 2023 GMT
            Not After : Nov 19 06:00:01 2024 GMT
        Subject: CN=DF9319B4666109015F2129F32B705D7C473F8D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:af:3b:44:f6:7b:81:c7:47:a8:0e:5e:1a:
                    b1:8b:dc:0d:26:ea:01:28:fc:dc:86:6c:a6:d3:f7:
                    5d:f4:f9:da:6e:08:ad:21:c7:ad:ba:33:10:a2:90:
                    b1:73:93:f8:29:d3:28:54:85:3f:a6:43:dc:7e:46:
                    1b:41:3e:ca:e7:7b:e3:3d:bc:ce:38:33:2e:1a:01:
                    da:98:aa:00:9e:06:4b:d3:2a:17:2a:f8:9f:2f:f9:
                    26:f5:f2:82:cc:c1:59:2f:2c:ea:a7:20:3a:4a:63:
                    9b:4e:fa:3b:b8:da:7d:f7:6e:8b:1b:0b:87:db:27:
                    56:69:98:89:e3:ca:f5:55:18:08:4e:0c:2b:ae:ef:
                    69:82:a0:31:02:ab:72:00:a8:e7:f3:cd:f6:89:b8:
                    2e:bb:ca:32:b3:a7:f2:d3:b4:db:0d:e0:48:2f:55:
                    02:2d:c0:f1:40:58:cb:04:4b:1b:0b:49:42:65:e7:
                    e8:04:c6:09:7d:ca:b0:fe:92:a5:b7:96:9a:e0:61:
                    ea:73:26:46:e6:41:e0:80:0c:56:12:b8:fa:5c:34:
                    ab:13:17:ba:e9:9a:f1:77:d1:63:a5:66:75:75:61:
                    f6:9d:d2:3e:d1:e2:54:7f:f5:04:94:81:15:d9:6e:
                    8f:5d:39:4e:10:74:b6:0e:45:da:2b:d3:b4:7a:b9:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:19:B4:66:61:09:01:5F:21:29:F3:2B:70:5D:7C:47:3F:8D:0D
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:4b00::/41

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:be:b6:50:7e:ac:a4:3a:9d:a0:f2:00:67:df:11:28:45:
         13:a5:88:2a:43:17:03:f1:ba:29:a8:7e:7f:d3:c5:08:8c:a7:
         1b:47:d6:9e:0b:e5:7d:cc:ba:bb:e6:ec:6a:69:fc:ca:05:89:
         15:6f:62:b6:75:cc:2c:55:db:a3:d1:f9:24:75:97:ee:f3:0c:
         04:02:65:72:88:2b:fd:cb:e5:16:cc:bc:d2:dc:0d:cf:19:5d:
         12:37:d3:6f:6c:75:84:4e:4d:6e:15:fc:cf:99:fe:ea:a3:de:
         d2:76:a2:e7:db:df:10:2e:cd:24:d5:be:e0:d6:d6:b7:d7:16:
         4b:52:90:e2:c6:6a:c0:f8:9a:60:87:c6:65:07:d8:92:91:58:
         24:ed:f8:8d:9a:2c:54:c8:61:32:b4:46:15:d5:ce:60:87:c2:
         9a:3c:bd:57:98:ec:64:a2:4b:7c:69:12:99:81:54:9b:ba:5a:
         cd:ef:d6:0f:3d:ae:01:35:50:85:50:d4:c7:c7:73:1f:a2:b0:
         b1:fd:88:f8:21:3f:cc:82:42:c9:b1:88:64:19:eb:56:84:73:
         34:ea:a9:65:20:76:7d:35:69:aa:9e:45:b0:15:c4:e7:cf:90:
         95:6b:c4:d3:76:9e:87:c6:a8:ac:8c:05:80:52:42:20:13:d9:
         0d:75:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org