Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa
File:                     323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa (raw, json)
Hash identifier:          FmKI/nnT9YpnMq/y5YmEWdamH4tf6cw1JDhwzYPG5V4=
Subject key identifier:   4D:2E:55:0A:5D:92:F7:B2:35:05:8C:F9:69:2B:F9:8C:37:D1:F4:4A
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       65FE7A88CBEB235CC7EB8E60A36EBF3EC8614244
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:02 +0000
ROA not before:           Tue 21 Nov 2023 05:55:02 +0000
ROA not after:            Tue 19 Nov 2024 06:00:02 +0000
asID:                     52977
IP address blocks:        2804:768:800::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fe:7a:88:cb:eb:23:5c:c7:eb:8e:60:a3:6e:bf:3e:c8:61:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:02 2023 GMT
            Not After : Nov 19 06:00:02 2024 GMT
        Subject: CN=4D2E550A5D92F7B235058CF9692BF98C37D1F44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:2e:64:1b:04:7c:02:ed:47:35:63:67:31:
                    6d:c3:9e:d3:f9:3d:ec:19:bc:77:89:0f:69:0c:03:
                    bc:34:49:7c:56:61:87:bc:14:72:1f:f9:a3:f7:e3:
                    db:bb:74:9d:a5:46:71:68:75:f6:2e:5b:4b:cb:5c:
                    4f:40:22:54:40:97:21:5e:6c:be:37:16:c0:3a:40:
                    80:4c:9b:c9:d0:c7:27:64:03:86:98:4d:7f:b0:f5:
                    74:90:e5:e8:f0:82:fc:e3:51:f4:c4:8c:40:23:34:
                    a4:b4:7d:67:c6:d8:b9:15:72:79:9e:b2:61:99:5d:
                    5d:3f:8b:26:1f:11:87:06:48:53:ea:49:c5:23:1e:
                    e6:10:eb:e3:2e:04:eb:59:1d:90:67:bf:73:a1:24:
                    b5:4d:9f:02:f9:c5:6e:5e:8f:81:ba:46:a8:fb:b7:
                    de:34:23:5f:73:36:be:61:3d:84:43:5a:b0:6e:9a:
                    46:7a:55:4f:db:d7:b5:6c:6e:e8:b6:cf:51:69:cd:
                    e6:80:67:4f:e6:49:52:ee:d3:85:9f:73:2c:13:5a:
                    e7:69:8e:e9:02:9e:12:9b:91:aa:b8:dd:cf:24:bf:
                    69:ef:34:a2:67:a6:09:3d:7e:4a:e8:50:ab:d1:4c:
                    6b:cd:a9:55:cb:d1:46:25:e8:d6:a0:d5:f8:06:ea:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2E:55:0A:5D:92:F7:B2:35:05:8C:F9:69:2B:F9:8C:37:D1:F4:4A
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:800::/41

    Signature Algorithm: sha256WithRSAEncryption
         a7:e5:c9:8b:f5:2c:dc:cd:c3:60:d9:7b:4a:11:89:69:34:6f:
         b4:5f:46:24:38:61:75:73:55:cc:a2:87:77:98:4a:3b:f5:1b:
         67:df:fc:0c:0f:81:9d:5b:37:94:15:e8:ee:10:2e:ba:e6:28:
         34:bb:ee:e9:3c:a0:57:11:cb:43:e3:ce:f7:8b:f6:fc:ab:a8:
         45:35:b7:55:64:f1:4b:42:25:be:dd:6d:ee:01:a1:6f:00:4a:
         fe:1b:ac:3f:12:f1:af:a3:90:30:aa:5e:7a:bd:8c:72:4d:63:
         db:e7:77:c9:68:2b:71:2f:23:b1:19:38:c8:d3:45:32:44:df:
         df:c4:41:df:52:cf:66:3f:2a:59:d2:e5:bb:cb:f4:dd:ba:4c:
         91:72:82:1a:a3:e1:bd:e9:06:ea:9b:a9:7a:e3:91:f5:58:e7:
         86:eb:04:2c:15:7d:37:44:15:75:2c:62:48:b3:72:4a:84:6e:
         ae:b5:9d:46:93:90:57:16:d5:9a:ff:ab:3e:7e:e7:de:fe:5b:
         91:d7:8a:ec:89:45:ab:7b:f2:51:9d:16:52:8a:b2:a7:2e:3b:
         7c:a1:8a:78:43:a9:13:98:c0:6d:2f:60:90:7f:b5:3b:7d:c7:
         fd:e5:ba:b7:95:1a:2e:98:d2:35:e7:d1:39:4c:9f:16:17:77:
         5a:5c:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org