Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3a2f33322d3438203d3e20323636313532.roa
File:                     323830343a336237633a3a2f33322d3438203d3e20323636313532.roa (raw, json)
Hash identifier:          A4Au+AXzp358dkrT/Fp8jtakCSCC8PNAKmNAbN7XqhM=
Subject key identifier:   D0:9D:91:D4:C1:FF:B9:A2:D0:5A:3A:D9:13:97:A7:22:DB:CD:38:64
Certificate issuer:       /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial:       12D2F1A902EC640CD0314FE2EA874D968308E709
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3a2f33322d3438203d3e20323636313532.roa
Signing time:             Mon 14 Nov 2022 20:11:56 +0000
ROA not before:           Mon 14 Nov 2022 20:06:56 +0000
ROA not after:            Mon 13 Nov 2023 20:11:56 +0000
asID:                     266152
IP address blocks:        2804:3b7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:f1:a9:02:ec:64:0c:d0:31:4f:e2:ea:87:4d:96:83:08:e7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
        Validity
            Not Before: Nov 14 20:06:56 2022 GMT
            Not After : Nov 13 20:11:56 2023 GMT
        Subject: CN=D09D91D4C1FFB9A2D05A3AD91397A722DBCD3864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:2d:88:f9:e6:df:70:39:1d:50:5d:3f:b9:
                    13:65:eb:b3:d0:20:9c:ed:04:0e:a3:4c:ee:1f:29:
                    d0:7e:70:58:21:b2:cb:ec:91:e8:46:b1:b4:f0:c7:
                    25:58:5e:01:f6:0a:df:21:ef:0d:ef:79:c8:41:b5:
                    f6:08:95:2f:b4:4a:d2:a5:3a:27:69:64:9f:19:8d:
                    3e:29:f9:af:fd:4a:40:54:80:6f:53:81:93:09:f8:
                    d1:07:1e:ba:eb:92:b7:e6:25:c1:4f:ec:12:fd:4b:
                    a1:7b:77:13:c6:63:7b:4a:5f:ac:4b:08:fe:be:a4:
                    ec:c5:37:ed:c4:0c:49:27:14:fe:97:e9:2c:12:ee:
                    48:fd:7f:7f:94:f5:3a:b0:be:62:75:cf:c5:79:d5:
                    b1:e6:0b:72:fd:f5:cb:1e:ba:45:a3:aa:46:32:41:
                    28:c7:4e:12:68:bc:84:82:d7:b2:54:26:2f:a6:83:
                    d4:ed:5c:85:1b:f2:a2:57:12:8f:63:de:87:48:ed:
                    b7:fc:b9:ae:5f:99:3a:71:2e:d1:40:3d:9d:38:50:
                    5f:5f:b5:9a:a6:d4:99:eb:ad:39:87:86:d7:1e:ff:
                    ac:f1:a7:6b:ab:32:ef:36:6e:f1:e4:b7:61:a5:72:
                    a4:b6:66:3e:34:c4:3e:c0:8c:96:3e:a4:2c:3e:5f:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9D:91:D4:C1:FF:B9:A2:D0:5A:3A:D9:13:97:A7:22:DB:CD:38:64
            X509v3 Authority Key Identifier:
                keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3a2f33322d3438203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:dc:44:e9:54:4a:a2:72:4b:2f:f7:76:6c:b1:6b:11:cd:
         f9:e9:ac:11:c2:2b:31:b3:04:e4:98:18:6f:aa:ac:f3:3e:bc:
         81:73:fd:9d:b1:b4:80:07:b4:88:76:57:5d:03:61:cc:c8:42:
         52:4b:50:54:26:fc:e1:48:4a:de:25:be:b2:7f:e0:d4:09:43:
         fe:19:4e:f7:99:02:12:ad:a9:30:71:55:7b:4a:5a:8d:50:32:
         6f:8c:2c:9b:1d:4e:4d:aa:f0:20:b4:82:5d:97:b3:89:d7:14:
         5a:5f:fb:6f:91:14:13:3b:53:1d:30:e5:50:3a:00:09:2b:75:
         6c:1b:b4:2e:6c:9a:be:4a:de:eb:e2:fd:bf:26:21:28:52:18:
         37:47:ea:e2:af:2e:86:e8:a7:72:15:ba:5d:74:b5:1f:98:4f:
         48:dd:43:6b:c2:69:20:82:bc:d0:59:c2:20:2a:e1:63:a6:55:
         df:e8:9b:81:40:cb:76:49:29:23:19:cd:da:62:cb:ce:16:66:
         89:6f:7c:01:0c:ff:f6:6a:6f:ed:57:f3:46:c1:25:6b:62:d5:
         68:87:6e:a2:10:db:93:f6:0b:07:27:28:66:c7:88:67:7f:ef:
         19:03:a8:31:9b:77:92:e8:0d:84:ea:46:54:db:a8:35:d1:52:
         07:63:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org