Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538313a3a2f34382d3438203d3e20323636313532.roa
File:                     323830343a336237633a3538313a3a2f34382d3438203d3e20323636313532.roa (raw, json)
Hash identifier:          CMvdicmTTx8oEfC/ibTU9MAP6rrSzacaafcwFMkZAJw=
Subject key identifier:   4F:EA:8E:2F:D0:A9:EB:4C:63:37:B3:DD:6F:BA:8C:AF:51:2A:EC:ED
Certificate issuer:       /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial:       3B5A6E32A66232883B97EAEB59E203738A8C8537
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538313a3a2f34382d3438203d3e20323636313532.roa
Signing time:             Fri 16 Dec 2022 23:03:01 +0000
ROA not before:           Fri 16 Dec 2022 22:58:01 +0000
ROA not after:            Fri 15 Dec 2023 23:03:01 +0000
asID:                     266152
IP address blocks:        2804:3b7c:581::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5a:6e:32:a6:62:32:88:3b:97:ea:eb:59:e2:03:73:8a:8c:85:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
        Validity
            Not Before: Dec 16 22:58:01 2022 GMT
            Not After : Dec 15 23:03:01 2023 GMT
        Subject: CN=4FEA8E2FD0A9EB4C6337B3DD6FBA8CAF512AECED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:c0:22:b4:c8:79:98:32:a7:2c:52:fc:f1:
                    14:7f:69:61:ae:0d:11:2e:00:00:67:bf:80:75:01:
                    0c:b0:e3:c7:50:e7:41:5b:a8:e4:11:3f:95:62:54:
                    f0:4d:29:c7:8f:4f:16:d2:df:d6:53:26:66:cf:e6:
                    8a:aa:dd:2b:75:6a:47:91:90:37:c0:04:c3:19:30:
                    a5:9d:54:df:c2:9e:71:e3:91:46:64:f2:09:d2:90:
                    42:21:8a:99:8c:86:74:8e:3e:a6:37:8c:b5:1f:8b:
                    7c:77:7b:89:2b:c8:fa:fd:89:7f:bb:5e:f1:54:3f:
                    d6:34:75:48:23:0d:e0:8c:97:26:ca:89:1f:35:d4:
                    c2:e1:6f:80:0e:d2:b4:c7:52:08:46:05:a9:92:77:
                    97:1d:1f:a4:ab:f2:67:07:c7:f2:42:83:57:f8:10:
                    66:fe:d4:f6:6e:ca:9d:88:20:ec:1d:50:99:1c:bb:
                    4b:d8:c6:b5:f1:b6:48:0c:d0:e1:ad:ee:cb:f6:8a:
                    84:79:1b:1f:16:5e:6d:25:64:6c:bb:89:27:e2:13:
                    69:00:86:e7:21:63:35:67:2d:c6:d4:d8:7b:78:1a:
                    69:69:b4:42:0d:04:2e:11:01:c6:f5:1b:b8:e2:c2:
                    7b:c2:b8:cd:3b:c1:1f:58:81:a0:73:04:fd:9c:1e:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:8E:2F:D0:A9:EB:4C:63:37:B3:DD:6F:BA:8C:AF:51:2A:EC:ED
            X509v3 Authority Key Identifier:
                keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538313a3a2f34382d3438203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b7c:581::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:29:d2:a7:c3:d7:83:8d:87:d5:b8:96:45:f6:91:7f:78:7c:
         dd:93:1d:52:5e:50:35:b8:69:7d:6c:2c:e6:30:0e:f2:92:d1:
         99:01:06:9c:55:28:85:e0:2e:ce:0d:c3:25:6b:e3:cc:3e:ea:
         35:e3:1b:bd:7a:04:68:be:92:9a:78:d3:54:bb:41:c1:6c:8b:
         3c:07:dd:1a:eb:e6:45:70:aa:ed:45:d3:52:4a:e6:11:c3:a6:
         5d:47:1b:57:af:3a:5b:66:d5:3b:68:8b:b8:ca:1d:fa:05:40:
         ff:e6:08:64:7c:7b:a0:68:27:c5:5f:9b:78:26:51:01:ce:97:
         76:7b:52:05:bb:18:ab:11:d4:04:2e:21:26:8f:21:08:3f:f6:
         6b:17:b6:da:fb:cd:b3:22:22:f8:7f:26:4f:1a:64:ec:9f:9b:
         3c:3f:77:18:a5:44:3a:3c:e1:7d:06:5c:7e:c3:fa:1f:26:a5:
         22:61:f7:25:b7:1e:d1:31:56:f6:44:ae:43:a2:cc:56:cd:90:
         24:19:03:d3:4f:9a:1b:04:a0:03:10:5e:66:6a:6c:71:f2:43:
         c5:57:82:90:01:fe:c2:d6:69:bb:27:60:24:69:19:1c:02:9d:
         1a:b0:f0:c2:ab:53:02:26:01:ca:1a:85:5f:17:9c:1f:c6:9e:
         88:65:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org