Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a383030303a3a2f33332d3333203d3e203532353235.roa
File:                     323830343a6465383a383030303a3a2f33332d3333203d3e203532353235.roa (raw, json)
Hash identifier:          /GJPuTImLDES+cQfRTuysHUSP0cEBcZv8GUTMQ6ctm4=
Subject key identifier:   E8:D0:53:25:9D:7A:F4:A4:26:77:FA:D2:D8:4A:55:30:A3:FA:D6:8D
Certificate issuer:       /CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
Certificate serial:       2B7AAD39B906E64A25EC12AE798B0D708D07BD18
Authority key identifier: 1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a383030303a3a2f33332d3333203d3e203532353235.roa
Signing time:             Mon 18 Dec 2023 18:07:26 +0000
ROA not before:           Mon 18 Dec 2023 18:02:26 +0000
ROA not after:            Mon 16 Dec 2024 18:07:26 +0000
asID:                     52525
IP address blocks:        2804:de8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7a:ad:39:b9:06:e6:4a:25:ec:12:ae:79:8b:0d:70:8d:07:bd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
        Validity
            Not Before: Dec 18 18:02:26 2023 GMT
            Not After : Dec 16 18:07:26 2024 GMT
        Subject: CN=E8D053259D7AF4A42677FAD2D84A5530A3FAD68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:4a:f5:5d:0f:73:54:30:49:00:ee:21:81:
                    17:04:ea:a4:66:5a:4a:f4:9b:9c:61:86:74:ce:28:
                    b2:33:8f:f2:af:a2:34:e4:5e:dc:50:0e:29:c5:db:
                    0c:37:33:98:8d:38:ba:0e:05:6a:d8:79:e5:6f:fc:
                    be:7d:5b:de:6b:db:1f:c1:34:3f:9c:93:f4:11:f0:
                    64:ba:5b:53:fb:7b:8a:aa:65:0b:e0:50:c5:4c:d3:
                    dd:54:43:85:0e:7e:25:49:df:13:ff:a3:71:73:de:
                    8c:86:7f:00:63:fa:20:75:e0:28:3e:29:06:1a:b0:
                    77:67:cb:0e:ce:cf:a8:ab:6a:6a:fd:80:56:50:0b:
                    fb:a3:a9:f4:43:ea:ca:45:51:0c:b6:38:a9:de:b2:
                    39:b8:93:4c:04:e8:81:13:66:91:e0:13:49:4d:49:
                    ec:d9:6d:05:14:a1:34:5c:be:4d:4a:b0:f2:17:19:
                    2e:39:6f:15:1e:9f:cd:2c:a2:e1:2e:da:e1:c3:c6:
                    7a:60:4d:53:bb:1b:47:39:66:b0:aa:89:eb:25:05:
                    12:6c:98:2c:80:d9:07:42:1b:06:87:7b:4f:fb:04:
                    ca:99:c4:df:89:89:b4:b0:43:cb:d2:3e:dc:0e:c5:
                    30:19:c0:a4:5e:15:e8:60:54:e4:1f:59:09:a3:28:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:53:25:9D:7A:F4:A4:26:77:FA:D2:D8:4A:55:30:A3:FA:D6:8D
            X509v3 Authority Key Identifier:
                keyid:1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a383030303a3a2f33332d3333203d3e203532353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:de8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:b4:37:55:cd:d3:a1:80:72:46:0c:e5:67:8f:9f:a9:64:
         e9:fd:bd:75:7c:2b:94:90:5a:f4:ca:49:18:5a:ec:5c:39:4b:
         ef:44:59:32:9c:89:9a:58:87:4d:b2:1c:81:25:d8:b5:e9:7e:
         a2:44:03:1b:35:08:ee:02:6c:ca:72:0c:fa:cb:00:0e:8c:42:
         b8:21:80:a0:ea:7c:11:ae:9a:13:33:d2:25:d8:6d:93:34:60:
         fd:ad:57:6a:e3:46:ed:b5:28:6f:43:4c:8c:86:d0:cd:84:12:
         c5:0d:a0:ac:14:b3:b7:87:f4:40:e9:6e:85:1f:2a:48:83:78:
         56:29:8e:54:9a:44:54:d0:4e:2e:ab:23:14:07:b8:47:ef:a2:
         49:d4:14:3c:43:2d:ba:c7:77:04:cf:65:cc:fb:93:19:d5:ae:
         3a:ae:a0:33:4d:d3:5d:a2:c2:e2:e4:93:a5:e5:2f:a0:84:e1:
         ab:f3:9a:48:0e:54:3f:b3:0d:96:46:bd:ff:0a:9d:cc:14:d4:
         d6:a2:86:62:6b:81:33:bd:f9:6d:bd:fd:dd:b9:f8:07:0f:5b:
         7e:50:77:3b:7e:88:42:02:2d:4c:d3:9e:55:8e:ed:20:4e:25:
         0a:2e:e4:e4:a1:80:37:b8:57:02:21:5e:da:d0:e5:f0:26:d2:
         bc:c2:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org