Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          nfZKIYUMtHguesau4SOc2WnUSpTy45eaAOCtOwtuAvY=
Subject key identifier:   59:6D:75:F8:AC:69:25:08:3A:A9:84:4B:48:12:F9:3E:25:B2:2B:26
Certificate issuer:       /CN=88C04555C130EFBD50B75032689878210EFAA940
Certificate serial:       3193C657B56924FC7818BBF8846F88228555CB2C
Authority key identifier: 88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Mon 18 Dec 2023 18:48:30 +0000
ROA not before:           Mon 18 Dec 2023 18:43:30 +0000
ROA not after:            Mon 16 Dec 2024 18:48:30 +0000
asID:                     268308
IP address blocks:        2804:4f28::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:93:c6:57:b5:69:24:fc:78:18:bb:f8:84:6f:88:22:85:55:cb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C04555C130EFBD50B75032689878210EFAA940
        Validity
            Not Before: Dec 18 18:43:30 2023 GMT
            Not After : Dec 16 18:48:30 2024 GMT
        Subject: CN=596D75F8AC6925083AA9844B4812F93E25B22B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:98:8e:5a:64:3c:b5:98:ac:86:e0:f0:b5:
                    43:26:fd:c8:d2:8d:9c:74:cb:32:b4:40:f3:3b:76:
                    bd:f1:22:b0:0c:9f:1c:db:60:ee:a8:90:4b:fa:37:
                    0a:66:d8:05:7f:1a:8f:d5:89:54:9c:83:71:71:c5:
                    09:72:a5:49:e2:45:02:27:63:1f:ef:43:b5:69:9a:
                    eb:ae:81:42:e0:8d:a9:38:f5:e0:70:70:49:1c:b5:
                    bd:c1:13:23:63:70:57:64:05:49:b2:b3:32:11:25:
                    15:26:fe:e5:0d:a4:f7:ee:6e:3d:e1:07:a8:10:97:
                    18:0b:de:58:86:c1:98:4e:28:30:ed:e1:d9:d5:de:
                    68:d4:6b:bf:2e:d4:fb:da:9e:68:9e:f6:ed:f5:22:
                    9a:80:1c:29:c1:54:b7:33:12:dc:fe:e6:39:65:0d:
                    f9:59:95:65:16:59:8b:e0:84:ce:c8:7a:22:b7:28:
                    49:22:cc:38:a1:73:43:fb:ea:9f:f2:44:a8:71:14:
                    51:50:5c:96:42:4a:f2:ce:8c:f1:86:ea:62:27:45:
                    d7:e1:71:ce:9e:b3:75:8f:7f:29:17:d2:45:00:c0:
                    3a:9b:d3:06:d1:75:2f:71:95:ee:e3:69:93:54:5c:
                    8f:9e:03:72:dd:fd:a8:73:d0:ba:7b:e4:05:f7:13:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:75:F8:AC:69:25:08:3A:A9:84:4B:48:12:F9:3E:25:B2:2B:26
            X509v3 Authority Key Identifier:
                keyid:88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/88C04555C130EFBD50B75032689878210EFAA940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:8d:62:0f:63:5c:3e:5a:92:f5:bd:f5:99:ad:ea:09:2b:
         59:f5:13:37:1e:7a:53:e8:fe:70:43:2d:89:47:48:84:58:6c:
         36:4c:4a:82:68:80:a8:9b:63:4d:e1:a9:de:be:e5:c9:bc:f0:
         8b:97:a9:06:b4:d0:4a:c1:e0:a0:07:df:f9:55:be:1d:3b:fe:
         69:49:26:24:65:22:ea:3c:7a:0b:55:d8:8b:2f:ea:2a:41:98:
         40:a2:8c:23:3c:70:9e:58:d2:6d:b9:38:05:52:a8:d4:91:05:
         96:51:42:10:0f:c7:29:a8:95:fc:df:55:d2:5c:3c:60:5d:a2:
         50:0f:b4:4c:ed:4f:40:53:e8:6a:c5:09:1b:02:ad:53:e1:ec:
         4f:0d:53:45:98:82:d9:40:39:ed:57:6a:cd:a4:a1:19:d6:42:
         62:26:18:74:05:a6:fc:e3:8d:01:ce:4c:ab:0f:4c:a5:fe:e2:
         50:d6:27:8e:46:e2:a2:2d:50:64:78:b0:bf:48:9b:8d:33:19:
         39:c8:76:ef:3b:60:3b:56:07:2c:ea:28:b9:1b:d7:45:29:9c:
         11:29:cc:f0:66:10:bd:2d:52:66:d5:7a:bb:e1:56:66:36:02:
         0f:65:38:7e:94:63:a9:95:17:70:24:5a:84:f0:99:e9:e6:aa:
         ea:0c:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org