Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          yj/TEmGb5fO+y0SYnuKjxPmNqqpW/xfeB4gTbxzTDuU=
Subject key identifier:   5B:C7:1D:34:CA:A7:64:4A:DE:B5:1F:64:BC:D4:96:44:38:C1:5B:B9
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       14B17CF20E5DF932BCF524F759C4185FD8A46E99
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:53 +0000
ROA not before:           Thu 04 Apr 2024 23:27:53 +0000
ROA not after:            Thu 03 Apr 2025 23:32:53 +0000
asID:                     268573
IP address blocks:        2804:5344::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b1:7c:f2:0e:5d:f9:32:bc:f5:24:f7:59:c4:18:5f:d8:a4:6e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:53 2024 GMT
            Not After : Apr  3 23:32:53 2025 GMT
        Subject: CN=5BC71D34CAA7644ADEB51F64BCD4964438C15BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:72:a0:a1:54:49:58:4b:c7:9e:4a:55:2f:
                    79:73:7d:d0:1e:17:9d:9c:c9:c3:ea:b9:d6:1c:a2:
                    8a:be:60:f3:18:34:16:25:6b:0d:0a:60:a7:0a:12:
                    31:19:32:8d:83:1e:d8:08:ae:8d:b3:0c:f0:a0:53:
                    d5:f7:ce:23:de:e0:b2:13:f6:1d:83:39:37:07:c1:
                    74:67:ba:fe:cd:fc:27:06:f7:3b:f6:2a:9a:6a:b1:
                    c5:2c:81:da:fb:c1:ca:09:ac:36:6f:7c:76:cf:27:
                    ce:1a:13:ce:85:0c:12:6c:9a:2c:5e:5d:dd:5f:0f:
                    ea:6c:d8:fb:0d:56:2f:20:5a:f6:23:21:35:a5:01:
                    7f:d5:56:76:e0:9f:91:32:ed:0a:67:5b:aa:5c:93:
                    7b:37:89:79:b5:8f:fc:31:26:55:40:1e:9d:32:76:
                    47:a3:4b:8d:b3:c2:e1:fc:cd:64:f8:ef:d5:ef:49:
                    60:75:67:e8:07:e0:39:f4:e2:c1:5d:fc:da:a6:97:
                    10:d4:92:08:fc:e4:ce:6a:39:a3:60:c5:29:25:a5:
                    17:83:77:44:10:9a:38:14:90:26:1e:35:cb:0c:d5:
                    e1:4b:17:b4:f1:89:d3:26:58:40:da:55:79:5b:2f:
                    0c:ea:be:83:46:10:14:39:3d:69:5b:04:22:3a:8f:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:1D:34:CA:A7:64:4A:DE:B5:1F:64:BC:D4:96:44:38:C1:5B:B9
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:c0:22:1d:c7:26:d1:b6:3e:7e:72:4d:26:b2:c5:b1:a8:ff:
         dd:f3:da:d6:a1:09:3e:c2:31:ca:a7:a8:2c:81:f1:23:43:f2:
         cb:6d:13:6e:0e:96:e3:a8:10:bd:02:06:ea:dc:ab:86:fe:c4:
         84:9f:f2:84:16:5d:6c:8e:4d:0b:5c:f0:08:34:1d:2d:08:25:
         77:3b:08:a2:d7:8f:48:f2:44:17:8d:6b:47:5f:8e:ac:e2:0f:
         a4:f8:3d:d6:ba:56:2d:00:58:9e:4d:24:88:cc:63:9d:10:32:
         45:6f:cb:ab:53:25:78:38:a8:12:38:71:43:e8:54:3c:7a:be:
         40:95:c7:d6:bf:7a:32:bd:e4:c0:52:f7:8f:c9:bf:96:e7:3b:
         49:e6:d3:5f:75:96:6d:8f:78:dd:26:93:35:54:97:39:61:81:
         19:cb:f6:8b:df:6f:66:8a:70:5b:f6:4d:75:63:64:6c:b4:2f:
         a0:43:ac:d6:f7:9a:27:aa:5b:90:19:fd:74:47:66:7d:e1:1c:
         ef:a7:23:14:b9:2e:a2:a4:02:2d:17:60:13:b3:52:41:32:04:
         de:bb:df:40:a5:f7:e6:5a:24:c8:01:9b:9c:f4:b4:c1:30:f4:
         41:58:da:8a:7a:d8:4f:96:65:68:5b:cc:61:a3:ce:9f:09:e7:
         8e:1a:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org