Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323731333533.roa
File:                     323830343a376133303a3a2f33322d313238203d3e20323731333533.roa (raw, json)
Hash identifier:          ZYjxQBfXkBkLqj6wppXote3L6Vvkp8yOC3sC2Cpyg7s=
Subject key identifier:   F1:D7:FC:E5:09:86:84:02:C5:21:67:6C:0C:4F:12:FB:14:79:CD:B7
Certificate issuer:       /CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
Certificate serial:       14E08B16F5A6486D678CEC70805E4982D067F6FA
Authority key identifier: 43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323731333533.roa
Signing time:             Tue 02 May 2023 11:18:02 +0000
ROA not before:           Tue 02 May 2023 11:13:02 +0000
ROA not after:            Tue 30 Apr 2024 11:18:02 +0000
asID:                     271353
IP address blocks:        2804:7a30::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e0:8b:16:f5:a6:48:6d:67:8c:ec:70:80:5e:49:82:d0:67:f6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
        Validity
            Not Before: May  2 11:13:02 2023 GMT
            Not After : Apr 30 11:18:02 2024 GMT
        Subject: CN=F1D7FCE509868402C521676C0C4F12FB1479CDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:fb:26:06:5c:9d:fc:fa:8b:29:7a:25:ad:
                    55:f3:fb:73:59:01:4c:09:97:76:1b:2e:4b:68:6c:
                    2a:0c:9d:38:92:f0:79:41:d7:4a:67:91:02:43:dc:
                    2e:8d:3c:b2:b1:61:30:1d:97:fb:a0:5d:00:f7:ef:
                    a5:9e:48:20:04:ab:64:0f:9a:51:6a:b6:8f:64:80:
                    44:3d:4b:af:2d:d0:c1:34:af:99:91:81:2f:2c:cc:
                    98:03:8b:7e:b4:51:1b:71:83:43:1e:f3:e2:86:5f:
                    77:65:f2:a9:f1:f7:07:0e:6d:35:a9:5d:b2:96:44:
                    95:0c:10:b9:57:9e:59:7c:eb:9b:24:f9:b6:02:96:
                    0b:bf:52:4c:23:6d:84:39:2f:2d:2e:cd:a1:dc:2d:
                    17:c1:be:99:83:f2:95:2f:35:8b:a1:20:0d:ba:3e:
                    82:3f:56:e8:47:59:f6:4d:96:79:d2:22:6f:b8:8b:
                    43:29:de:0a:0d:81:ed:19:5e:78:35:26:d5:04:19:
                    81:88:e5:d8:17:28:27:bf:43:25:e6:34:7a:7d:4f:
                    1e:b5:2d:90:08:96:9a:2e:03:bb:96:23:67:a9:e8:
                    4f:9b:de:e8:89:ea:f6:65:66:51:ac:34:ad:67:22:
                    7d:05:1b:0e:a9:ae:89:35:11:c9:64:a7:a9:a5:ca:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D7:FC:E5:09:86:84:02:C5:21:67:6C:0C:4F:12:FB:14:79:CD:B7
            X509v3 Authority Key Identifier:
                keyid:43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:db:d4:80:aa:9f:8a:40:1b:1a:30:37:3e:df:8b:77:e3:
         ba:4b:51:28:fd:ac:99:26:b5:49:8f:dc:a0:4e:e5:0c:04:6f:
         24:7d:52:ab:17:e9:7b:71:41:ee:be:60:4a:55:88:a1:79:54:
         d5:f1:66:6d:6a:32:f6:59:cd:4d:f9:37:64:72:59:4e:37:6c:
         d0:f0:3e:56:8e:3f:85:9c:c4:5a:68:b9:bb:b9:05:a4:33:bb:
         b9:a1:38:3d:af:f4:2b:f6:8f:27:aa:3d:f8:9b:b1:b7:58:a1:
         fc:63:bd:eb:cd:2b:ba:8b:f2:d8:d4:70:91:e5:df:cf:2f:17:
         1f:5e:bd:76:51:b8:dd:44:df:93:cd:fb:b2:54:72:3d:cb:b8:
         cd:c9:16:5a:a6:e9:4c:a9:b4:82:3f:56:4b:64:c4:90:b3:18:
         4d:25:b8:f5:24:7e:16:3e:9c:d0:f2:8d:64:3c:50:2e:7a:4b:
         e0:41:d2:ba:b2:13:ff:a5:c6:ab:b4:ab:95:9d:5a:5f:01:07:
         1c:26:69:26:67:64:25:c5:f5:ec:00:3c:21:86:b1:5f:aa:23:
         9c:39:01:2d:e3:5e:2b:51:7d:98:f9:6f:fd:44:49:09:e1:91:
         5f:d0:6a:ec:4d:e8:df:61:59:59:5d:0d:99:39:df:b6:1b:e8:
         f0:e7:97:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org