Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          P8TPU8+6u7fof82wEuGqeXn8V8zcbd1zxN6GxLFf3uY=
Subject key identifier:   3A:07:5A:E8:55:B5:93:40:85:A3:2C:F0:08:BB:8F:B1:12:28:54:F6
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       73CA132ACB4AEEB3C404564192325642236F9AD9
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:53 +0000
ROA not before:           Thu 04 Apr 2024 23:27:53 +0000
ROA not after:            Thu 03 Apr 2025 23:32:53 +0000
asID:                     268573
IP address blocks:        2804:5344:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:13:2a:cb:4a:ee:b3:c4:04:56:41:92:32:56:42:23:6f:9a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:53 2024 GMT
            Not After : Apr  3 23:32:53 2025 GMT
        Subject: CN=3A075AE855B5934085A32CF008BB8FB1122854F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:32:4a:57:4e:90:0c:fe:f6:27:2b:6c:d8:
                    42:15:bf:4d:7e:0c:0f:d6:03:d8:d4:0b:5a:64:f4:
                    5d:19:f4:b1:06:eb:c9:37:3b:aa:a7:8e:4f:1f:c6:
                    1a:10:4d:78:45:1d:db:c1:1e:04:b0:aa:8c:04:39:
                    1f:08:c4:8c:b2:5a:09:b8:f1:0d:d7:37:d6:cb:dd:
                    ff:23:47:a4:ad:e4:fd:03:74:53:66:b9:aa:12:96:
                    3d:cf:49:a0:71:70:a2:ea:78:6b:cd:b6:08:d5:ec:
                    28:fd:fb:07:0a:03:19:7b:4c:4f:9d:c6:66:af:f4:
                    21:3f:8f:08:9a:8a:43:95:a9:d2:7e:fc:40:99:9e:
                    31:41:92:ff:56:c3:3d:ad:6a:ac:75:75:ef:ae:f6:
                    16:a1:a4:10:19:4c:de:4d:f3:68:c5:97:eb:34:a8:
                    57:5d:f9:95:b0:cc:50:2e:df:d0:d0:05:f4:f6:c2:
                    12:41:9a:a5:2f:21:20:85:46:57:f9:29:3b:3b:2d:
                    eb:53:c2:59:51:70:15:57:24:b7:dd:25:2c:ed:09:
                    9e:4e:6d:53:46:1e:ca:c2:ed:fe:6c:63:29:f7:be:
                    c7:b0:19:0a:65:9c:88:97:c8:5a:9a:72:20:62:04:
                    00:3a:f6:2a:7c:38:90:d4:d6:37:cb:e0:c8:b8:d6:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:5A:E8:55:B5:93:40:85:A3:2C:F0:08:BB:8F:B1:12:28:54:F6
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:07:cb:b5:a9:fd:55:45:db:3d:a0:cc:e2:72:81:86:c8:a6:
         08:bd:4f:87:13:a2:d6:b9:8d:1a:8c:44:70:fe:af:01:d8:3c:
         ca:f7:d5:14:35:23:33:5b:09:32:ff:6a:f7:65:59:e5:5c:6f:
         f5:4a:05:51:1f:42:4b:12:a0:4e:db:0d:93:90:b5:1b:6c:1b:
         b8:5d:50:c0:e9:a3:2b:f7:82:03:64:b3:65:1c:e5:8d:9c:ae:
         d6:a3:92:aa:f5:9e:9f:a1:4b:f0:10:7c:1a:d6:4a:0e:62:d7:
         d5:34:e5:f3:27:5b:ad:33:0e:23:97:0c:b6:fc:ad:dd:c7:e7:
         c8:47:62:73:9e:1a:ed:ff:ec:24:cc:81:1f:c3:82:d4:6d:35:
         21:7c:a2:e7:ef:bc:99:fe:b9:5a:f5:23:b7:f5:45:5c:f6:18:
         36:d4:f3:9b:c6:6d:43:9b:ce:6b:32:e0:06:4a:9f:58:1e:05:
         fa:0c:17:8d:be:3b:44:35:bd:91:98:75:16:35:07:ef:a7:22:
         5a:e4:43:51:14:51:44:72:db:ce:82:10:54:7e:16:f5:eb:98:
         e0:58:e1:03:f3:b1:6d:0b:91:ca:5a:8a:60:fb:72:c0:05:e3:
         35:22:d1:ae:ae:39:33:a6:61:19:56:96:06:93:0a:0e:52:62:
         fc:fa:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org