Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          f596GO2iEmc71jby5k9J82rUadEmuCRQJKI3gsF4Bvw=
Subject key identifier:   F0:6C:D8:86:53:F4:C9:01:72:2A:09:BD:40:AA:FB:9C:0B:52:1A:75
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       58429828A36D23165DFA9886755D97088844B70C
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:53 +0000
ROA not before:           Thu 04 Apr 2024 23:27:53 +0000
ROA not after:            Thu 03 Apr 2025 23:32:53 +0000
asID:                     268573
IP address blocks:        2804:5344:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:42:98:28:a3:6d:23:16:5d:fa:98:86:75:5d:97:08:88:44:b7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:53 2024 GMT
            Not After : Apr  3 23:32:53 2025 GMT
        Subject: CN=F06CD88653F4C901722A09BD40AAFB9C0B521A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:5f:da:a8:8a:13:05:aa:35:45:f1:1c:c9:
                    bd:33:dc:13:3d:ae:53:dd:71:55:98:f7:f4:c3:91:
                    e9:50:76:35:18:82:ba:0b:28:21:a0:4c:44:c6:f2:
                    b9:85:90:3f:9a:0d:12:4c:19:7a:e7:66:d2:74:b2:
                    d5:25:df:45:ab:1a:69:ae:c3:7f:d2:68:81:39:d2:
                    96:58:cb:81:67:b6:e5:e4:cb:62:be:1f:77:59:01:
                    ae:1c:b5:9d:c9:26:99:a0:53:89:54:3d:73:fd:2c:
                    3d:56:14:da:8d:db:14:05:69:09:7b:39:89:bf:48:
                    72:ac:47:45:21:31:49:d9:95:6b:d4:ee:3c:b8:81:
                    2b:56:dc:72:a2:3c:45:e9:28:bd:92:42:00:e2:9a:
                    88:11:c9:55:62:35:c1:42:03:43:40:62:e5:4a:77:
                    f8:06:f5:13:01:46:28:19:d9:3e:4d:ee:b0:c8:95:
                    8d:08:11:dc:18:6c:21:99:90:a5:36:f9:cc:86:bc:
                    56:c8:5a:48:e2:6e:21:67:c9:92:d3:18:e2:20:05:
                    db:d6:1b:c8:39:08:c3:48:1e:13:29:cc:2c:1b:4e:
                    28:5f:45:01:04:91:c1:68:80:41:4d:a9:66:f9:67:
                    3a:f3:a1:99:88:1e:83:d5:53:07:d9:67:2e:5d:0b:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:D8:86:53:F4:C9:01:72:2A:09:BD:40:AA:FB:9C:0B:52:1A:75
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:8e:af:35:80:4c:d3:37:cb:db:11:a9:9c:4e:9c:c0:ca:
         70:99:de:3a:35:70:45:2f:8a:ee:9d:84:b0:7e:c7:bb:77:f3:
         9f:55:f9:6c:59:05:38:5b:6f:7f:f0:ed:0c:22:c7:00:b9:f3:
         6b:44:85:4b:88:60:89:44:94:db:59:46:70:bf:0a:14:63:80:
         54:f3:f5:72:50:94:6e:38:08:3f:b0:ba:66:35:90:96:dd:ac:
         9b:8e:a7:6b:eb:fa:84:33:f4:a2:1e:9f:53:b7:9e:1d:87:fe:
         50:14:42:5d:9d:eb:74:19:4e:04:d4:df:c0:04:ed:83:a3:93:
         19:be:42:f2:b8:c2:37:bf:57:38:15:e6:88:1b:ad:65:52:e5:
         cb:22:4d:5a:b0:e2:c5:a2:39:34:67:da:e8:6c:0b:27:67:df:
         34:ac:34:ac:90:57:be:d3:b5:89:bc:a5:d4:ae:3c:12:9e:c1:
         75:88:02:61:38:25:d7:1b:cb:51:b4:9b:6a:6f:3b:e9:f3:41:
         5b:a1:34:cd:86:24:82:b6:02:1e:c1:0d:b8:67:9f:4b:7b:20:
         3e:49:ff:5d:73:63:c2:ef:ae:2b:07:0c:6c:a3:d4:31:99:70:
         47:01:d2:70:da:a4:0b:7e:e4:76:af:6e:7b:be:d8:57:d4:6f:
         14:ab:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org