Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/323830343a343934383a3a2f33322d3334203d3e20323637313735.roa
File:                     323830343a343934383a3a2f33322d3334203d3e20323637313735.roa (raw, json)
Hash identifier:          QQsRUJ2lRgUy468GuFhTN7/UGnt707JqXDzsZkUNrRA=
Subject key identifier:   66:28:05:BA:AB:56:8C:61:4C:84:91:0D:6A:D0:59:B8:8C:D4:70:08
Certificate issuer:       /CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
Certificate serial:       0935F9CD2BF55E4E3FFECB93EEE376C7ECC5569E
Authority key identifier: 43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/323830343a343934383a3a2f33322d3334203d3e20323637313735.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     267175
IP address blocks:        2804:4948::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:f9:cd:2b:f5:5e:4e:3f:fe:cb:93:ee:e3:76:c7:ec:c5:56:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject: CN=662805BAAB568C614C84910D6AD059B88CD47008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:bb:95:fc:1b:4b:98:e0:65:e6:9e:18:f3:
                    af:70:bd:83:3e:a9:a7:01:19:0e:f8:71:f2:94:74:
                    71:0e:aa:65:b4:02:b1:fc:4c:91:b2:d7:09:d1:9e:
                    90:d0:a0:82:65:37:56:d7:ab:be:e5:39:c7:e4:c7:
                    f2:0e:7f:13:50:d2:9f:0b:cb:58:21:62:cb:9a:36:
                    8a:08:09:bb:2d:ca:2a:36:fd:fb:7e:fb:b6:58:91:
                    5b:b5:33:0d:d2:70:cd:c2:c9:10:c6:1a:6d:61:61:
                    f8:6a:2f:e5:75:f8:f8:1a:4a:69:fb:b1:64:8e:c9:
                    78:96:21:89:1d:2f:3e:f3:8e:98:ce:83:03:1a:cc:
                    91:d3:10:ed:df:ed:39:4f:af:62:34:e2:1a:d5:34:
                    0b:36:ef:6d:8d:43:c9:7f:24:12:41:74:2d:d8:be:
                    52:4b:9d:e0:4c:48:e7:7f:e0:c2:7a:0b:d6:3b:7a:
                    f1:65:2e:fd:ec:52:36:a5:65:a8:00:23:83:fd:20:
                    6a:ed:ed:64:b1:92:48:be:d5:7a:fb:46:ef:a2:cd:
                    83:23:4a:5e:b3:7c:c4:10:a1:77:fb:33:b0:5d:c8:
                    2c:88:7b:2e:9d:32:22:a5:36:6a:ff:7f:94:41:f4:
                    0f:a7:d6:2d:14:d6:37:fd:6d:73:de:92:ab:81:bf:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:05:BA:AB:56:8C:61:4C:84:91:0D:6A:D0:59:B8:8C:D4:70:08
            X509v3 Authority Key Identifier:
                keyid:43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/323830343a343934383a3a2f33322d3334203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4948::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:e3:6a:54:c1:15:b5:cb:48:1b:9c:16:ab:bf:ef:d9:cf:
         46:17:21:cf:1f:ee:d1:86:16:e6:8b:2b:b5:71:30:db:fe:23:
         14:6f:03:6c:9d:9d:48:ab:8d:c6:f3:b3:12:dd:36:43:2d:0c:
         ee:3d:86:b2:eb:d5:39:7f:3f:83:19:fa:ec:4e:30:7d:d8:46:
         d8:3a:9e:a2:34:bf:5e:f1:bb:06:b9:c1:3c:14:3c:cf:4e:df:
         c0:83:77:3e:44:a7:6c:ad:91:fa:a0:29:e5:0c:f9:14:3f:12:
         d3:e6:d3:68:07:c2:0b:1d:f5:d6:68:e4:06:7f:f7:08:9d:0f:
         ec:c9:42:c3:a1:32:ca:c5:96:9b:ad:12:ec:65:55:c8:04:2e:
         a5:17:e8:d9:fa:c7:0d:7b:fb:4e:57:39:86:1d:2e:e7:32:8d:
         d7:70:3a:1d:28:38:b6:56:69:a0:a4:27:89:50:2c:1e:80:cf:
         a3:31:6e:d0:35:07:8c:90:65:00:90:eb:86:50:30:db:ba:5b:
         33:2e:8a:a2:02:e8:f9:95:8b:b5:ed:ff:ba:fb:54:cf:13:7b:
         33:da:f8:79:64:df:23:5c:f1:0f:b8:ea:75:ab:08:11:38:2e:
         98:d4:d3:e0:8c:bf:85:55:68:5c:f2:d3:d4:31:e4:62:55:ab:
         ad:3e:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org