Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          w0kDd9TQ7YNjHIXHjBDk/lqWklP6ii9nj/AgVVdAquw=
Subject key identifier:   17:39:35:75:F8:97:CC:AC:F7:82:48:89:85:A6:27:F0:E8:18:89:8D
Certificate issuer:       /CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
Certificate serial:       38394C301AD889EC34EB036B922C9082FCC8FD9B
Authority key identifier: 4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 14 Dec 2023 12:47:40 +0000
ROA not before:           Thu 14 Dec 2023 12:42:40 +0000
ROA not after:            Thu 12 Dec 2024 12:47:40 +0000
asID:                     268573
IP address blocks:        2804:5344:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:39:4c:30:1a:d8:89:ec:34:eb:03:6b:92:2c:90:82:fc:c8:fd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
        Validity
            Not Before: Dec 14 12:42:40 2023 GMT
            Not After : Dec 12 12:47:40 2024 GMT
        Subject: CN=17393575F897CCACF782488985A627F0E818898D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:62:fe:dd:97:59:cd:83:22:db:86:4b:83:
                    1d:ef:c3:74:70:f8:1c:12:e9:f9:b0:f6:16:2d:cb:
                    17:d6:4f:64:48:7d:6b:65:d8:50:a7:74:04:b9:e4:
                    8d:59:3f:64:39:32:da:6b:b0:ca:48:b8:1d:a1:71:
                    02:e4:85:80:a5:9d:07:91:b0:b0:9b:31:3a:12:3c:
                    2a:b2:33:50:eb:f0:eb:1b:57:0d:1e:4f:9c:9d:14:
                    ac:e0:85:05:b5:f9:a3:7d:d6:cd:b6:76:75:7b:8d:
                    ed:f2:99:62:35:e1:21:74:47:26:3c:c1:e9:3f:21:
                    b7:40:6a:7b:d4:d2:a8:f9:d2:b7:14:da:b0:79:33:
                    08:21:67:2a:1d:98:6d:f6:54:ba:4a:35:c0:ec:2f:
                    68:9f:a7:d8:46:a6:19:ba:76:1c:04:bd:9d:36:5c:
                    2a:5f:81:2e:de:df:b2:92:8c:2c:34:d7:de:4d:44:
                    a4:19:97:ca:f3:1b:4a:d5:3b:ff:dd:4f:c6:68:5a:
                    01:2c:1a:c6:da:6d:d6:67:4b:2b:8d:e4:a5:69:54:
                    4b:85:6a:79:30:e8:c2:1e:f8:e5:09:86:ea:d5:35:
                    89:db:82:e8:fb:73:99:7a:9b:21:7d:c9:4e:83:2e:
                    a0:61:6f:a0:3c:19:06:aa:1e:eb:c7:57:3f:fb:3a:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:35:75:F8:97:CC:AC:F7:82:48:89:85:A6:27:F0:E8:18:89:8D
            X509v3 Authority Key Identifier:
                keyid:4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:f6:99:37:b6:c9:1f:25:3d:80:dd:32:36:ab:a8:d4:b0:
         e3:2d:85:4a:26:a0:86:61:1c:09:f8:f6:84:92:cc:6a:cc:89:
         e8:b5:dd:fc:7c:c4:9b:55:17:a5:87:f6:44:79:9b:c5:ea:d1:
         f6:89:37:67:cd:fe:78:d5:f0:ed:15:7c:81:1d:19:b2:16:b9:
         74:64:8f:dd:ce:49:cb:df:9e:36:57:82:d3:ce:ac:43:e9:32:
         84:be:8d:78:05:f9:f3:8b:99:54:d6:a1:e0:f4:0b:45:bd:e0:
         1d:57:2f:ef:10:e5:85:c2:54:62:3a:59:c2:f3:2a:79:e6:2b:
         d3:12:2f:c6:22:a0:98:28:06:71:5f:19:fc:ea:e0:6d:55:f9:
         17:09:9a:7b:e3:e2:83:a7:f3:39:d1:09:9e:28:56:69:49:bc:
         6c:dd:e2:f6:3e:56:87:bd:15:9e:8e:1e:aa:b1:11:00:af:d3:
         05:24:36:da:30:9a:f0:5c:5e:2d:27:56:a5:0c:96:36:5e:36:
         d8:60:4f:e1:e0:0d:e6:92:cb:23:eb:a8:bf:a5:9b:1c:4f:ee:
         f9:6b:15:53:7f:be:ae:d0:41:ac:bd:78:90:28:aa:13:66:66:
         e3:89:55:35:be:b4:d9:7b:82:be:d6:12:7f:be:a1:5e:9c:a2:
         73:7d:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org