Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          nH+6XI4gM8T0rq7xgmwZfEGju+qA6slzAV56+0OINyc=
Subject key identifier:   29:33:45:DB:2C:3B:AB:5B:C0:07:7D:41:E8:59:F5:D5:D3:8D:CC:83
Certificate issuer:       /CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
Certificate serial:       40413FDB37E6C47B6C65A28A346FC20687DAD18C
Authority key identifier: 4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 14 Dec 2023 12:47:40 +0000
ROA not before:           Thu 14 Dec 2023 12:42:40 +0000
ROA not after:            Thu 12 Dec 2024 12:47:40 +0000
asID:                     268573
IP address blocks:        2804:5344:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:41:3f:db:37:e6:c4:7b:6c:65:a2:8a:34:6f:c2:06:87:da:d1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
        Validity
            Not Before: Dec 14 12:42:40 2023 GMT
            Not After : Dec 12 12:47:40 2024 GMT
        Subject: CN=293345DB2C3BAB5BC0077D41E859F5D5D38DCC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:2e:ed:1a:b2:00:f5:ef:80:af:f7:62:04:
                    6e:2b:b4:a7:b9:d1:e7:c3:2e:2a:1f:1b:78:36:0d:
                    80:43:0f:e0:43:79:f1:4a:29:0c:c7:04:3f:91:f6:
                    6a:45:44:10:0a:70:93:8a:7a:1f:18:38:ac:8e:1e:
                    1a:4c:e4:5f:60:4b:d4:67:43:76:8c:c9:6e:d4:a8:
                    a4:5e:81:0f:33:d0:2c:d3:35:9d:08:c1:29:5d:07:
                    d7:2e:b7:2d:1b:fe:b2:ac:f9:a1:a6:02:18:9e:ab:
                    33:c1:88:16:e0:66:f3:77:30:9c:d7:3f:ae:39:60:
                    51:83:51:34:57:67:d0:a1:5c:e9:b7:e3:37:1e:4b:
                    15:ac:5a:b8:32:b8:bc:f8:c9:6b:96:e1:71:3b:cf:
                    68:6e:53:c4:d1:25:5d:d7:b3:de:cd:10:41:f9:f0:
                    5c:c4:e7:ec:f5:c8:22:eb:05:18:97:c1:a6:31:f3:
                    18:db:df:34:25:06:59:91:f9:6f:86:38:9a:1a:05:
                    b9:d5:a4:79:02:a5:1c:d7:71:8b:5c:ed:de:3a:ef:
                    a6:19:5b:4e:c0:9c:90:ed:f0:f2:5a:9e:9f:b8:e4:
                    02:2c:0d:90:68:2a:c6:89:f1:45:43:51:07:e1:73:
                    97:7f:e2:9a:16:30:db:06:30:51:92:0b:79:7f:33:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:45:DB:2C:3B:AB:5B:C0:07:7D:41:E8:59:F5:D5:D3:8D:CC:83
            X509v3 Authority Key Identifier:
                keyid:4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:d9:f3:7c:9a:10:fb:a3:41:f4:d7:1a:0a:cb:2a:05:70:
         a5:c9:53:63:6c:a2:59:a1:0b:9e:e3:7b:12:f4:07:c3:60:a2:
         94:a7:4e:5f:78:d7:66:5e:1a:58:3c:49:c3:21:18:e8:70:0a:
         96:d4:58:2a:63:6e:72:76:aa:4a:56:f6:a8:2d:a6:e0:fa:ec:
         16:2e:3a:e3:69:a6:8a:de:ce:dc:a2:16:91:0d:3f:19:df:5b:
         61:ac:50:5d:6a:01:d6:32:75:24:ce:7c:30:bc:40:e8:3f:9a:
         0d:b6:83:c1:99:8c:b4:9c:27:5e:1a:3f:b7:e3:fe:f1:aa:22:
         98:fb:fe:1d:98:5a:85:af:a8:5c:38:db:29:a3:71:32:36:26:
         24:e9:e2:dc:c0:90:41:8e:a2:17:15:2b:e5:3b:1d:1f:cb:87:
         2e:e6:9b:e9:1a:c8:71:78:3a:4b:77:b7:b3:f0:75:dc:10:ba:
         ea:7d:10:55:7a:1e:47:f5:28:a1:e6:a3:f2:91:87:5f:a6:8b:
         8c:d0:1d:a1:6b:8a:f2:a1:db:0a:51:25:1d:80:52:d5:8e:ce:
         49:8d:1f:78:ad:92:0c:bb:d6:e7:b0:19:f1:03:bc:d0:9e:8c:
         c4:75:6e:b5:57:a6:f2:99:76:18:df:f0:ad:58:ff:3d:03:9a:
         98:29:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org