Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/323830343a383437383a3a2f33322d3332203d3e20323732323632.roa
File:                     323830343a383437383a3a2f33322d3332203d3e20323732323632.roa (raw, json)
Hash identifier:          YsqSGMd9O9R5yrZ0xUPQergCZgeRsTGZ82P9lLa88Fg=
Subject key identifier:   A4:0F:E5:2E:ED:19:62:5E:08:EA:70:EA:9E:59:5D:54:CF:43:A8:8C
Certificate issuer:       /CN=25B1765BE1196A916D606610E67447F8241DF008
Certificate serial:       026586BA867F675CCDC05AD6B49133493B6C6112
Authority key identifier: 25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/323830343a383437383a3a2f33322d3332203d3e20323732323632.roa
Signing time:             Tue 26 Sep 2023 12:00:00 +0000
ROA not before:           Tue 26 Sep 2023 11:55:00 +0000
ROA not after:            Tue 24 Sep 2024 12:00:00 +0000
asID:                     272262
IP address blocks:        2804:8478::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:65:86:ba:86:7f:67:5c:cd:c0:5a:d6:b4:91:33:49:3b:6c:61:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B1765BE1196A916D606610E67447F8241DF008
        Validity
            Not Before: Sep 26 11:55:00 2023 GMT
            Not After : Sep 24 12:00:00 2024 GMT
        Subject: CN=3082010A0282010100DA6E82E9A46929180E152E6573F28543C066664DDF802C660152D9553762FC663263FEE947D67A2282CB16E2ACDE2447B1C416F611E422D92ED82DDF17FA1317A0C5562807B0E8E104F051A174BE6518A3102B6D255E6BFD3305802B4FFF27A0AE35CA396F886D417E9829D36C329269794D215A9F56FF942CD9296D3329847BB8D5ED8A4DED57E5A54776F84899FB97C8D2E877764D3ED2DD8BED99E517BDC9657C44F9DC94C974BC5EB31E524E7F182B86100E468F6F269AD0EDDDF50362E36BAB27FFF3717BB6AFFDBB7C7109C8594B5CD04F6A5271021808B2910ABBB073919E1496A5EF0B27E513A07377880AE8D65423C0DE6E79BA739C091E49C1F2A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:82:e9:a4:69:29:18:0e:15:2e:65:73:f2:
                    85:43:c0:66:66:4d:df:80:2c:66:01:52:d9:55:37:
                    62:fc:66:32:63:fe:e9:47:d6:7a:22:82:cb:16:e2:
                    ac:de:24:47:b1:c4:16:f6:11:e4:22:d9:2e:d8:2d:
                    df:17:fa:13:17:a0:c5:56:28:07:b0:e8:e1:04:f0:
                    51:a1:74:be:65:18:a3:10:2b:6d:25:5e:6b:fd:33:
                    05:80:2b:4f:ff:27:a0:ae:35:ca:39:6f:88:6d:41:
                    7e:98:29:d3:6c:32:92:69:79:4d:21:5a:9f:56:ff:
                    94:2c:d9:29:6d:33:29:84:7b:b8:d5:ed:8a:4d:ed:
                    57:e5:a5:47:76:f8:48:99:fb:97:c8:d2:e8:77:76:
                    4d:3e:d2:dd:8b:ed:99:e5:17:bd:c9:65:7c:44:f9:
                    dc:94:c9:74:bc:5e:b3:1e:52:4e:7f:18:2b:86:10:
                    0e:46:8f:6f:26:9a:d0:ed:dd:f5:03:62:e3:6b:ab:
                    27:ff:f3:71:7b:b6:af:fd:bb:7c:71:09:c8:59:4b:
                    5c:d0:4f:6a:52:71:02:18:08:b2:91:0a:bb:b0:73:
                    91:9e:14:96:a5:ef:0b:27:e5:13:a0:73:77:88:0a:
                    e8:d6:54:23:c0:de:6e:79:ba:73:9c:09:1e:49:c1:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0F:E5:2E:ED:19:62:5E:08:EA:70:EA:9E:59:5D:54:CF:43:A8:8C
            X509v3 Authority Key Identifier:
                keyid:25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/323830343a383437383a3a2f33322d3332203d3e20323732323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8478::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:25:ce:0e:63:bb:e4:e0:3e:29:d6:8c:d3:cd:55:fb:34:a6:
         ac:9e:bf:f7:1f:dd:73:2f:27:62:43:4c:6d:d4:b5:71:65:e3:
         59:d6:c5:71:b2:a6:33:e6:75:a9:00:c7:3c:33:8c:a2:cc:f1:
         c6:cf:29:75:97:89:15:b6:f6:09:18:e8:d7:91:66:c2:25:5d:
         9c:dc:73:d0:b6:02:a8:2f:5d:b3:11:0e:e4:01:d1:ea:cd:c7:
         4f:ce:cb:c2:a1:85:8f:b7:c3:ca:5e:3b:11:0f:15:a9:c3:4d:
         b2:95:94:65:3d:33:f9:6e:71:d7:5d:07:4f:b6:3f:91:9e:ef:
         4d:e2:1e:cf:cc:1d:07:87:38:b5:eb:af:00:5f:c7:c3:65:a4:
         c8:fc:6b:c2:68:94:79:23:c3:2d:89:4c:69:b6:52:82:ed:d2:
         1b:50:0f:33:1d:7e:cb:38:20:c7:5c:8a:47:c3:06:55:53:80:
         95:6b:6e:50:d0:de:b6:5a:63:4d:3c:a4:ed:80:4e:41:10:2b:
         11:d8:c5:a0:38:e8:f1:a9:19:96:e2:82:ba:66:1b:99:5b:57:
         78:41:5c:e9:d1:2d:a6:31:3d:b4:a3:82:53:a7:86:ec:7b:c0:
         c1:6e:8b:4b:0b:29:f8:d2:1b:fe:a5:43:cc:0f:2b:52:5d:b1:
         0c:6b:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org