Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a323030303a3a2f33352d3335203d3e203631353837.roa
File:                     323830343a333330303a323030303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier:          YwVXx39C4+odMS8l05s3XD3S/q2cT4eAu1PqMzBhrcg=
Subject key identifier:   1A:3F:27:D7:3C:A9:5A:11:75:A3:9B:8B:E6:99:89:7F:4A:D6:C9:99
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       47C1C9580DBBE67B3B173D1146244BFA96B4EA99
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a323030303a3a2f33352d3335203d3e203631353837.roa
Signing time:             Wed 10 Jan 2024 13:01:37 +0000
ROA not before:           Wed 10 Jan 2024 12:56:37 +0000
ROA not after:            Wed 08 Jan 2025 13:01:37 +0000
asID:                     61587
IP address blocks:        2804:3300:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c1:c9:58:0d:bb:e6:7b:3b:17:3d:11:46:24:4b:fa:96:b4:ea:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:56:37 2024 GMT
            Not After : Jan  8 13:01:37 2025 GMT
        Subject: CN=1A3F27D73CA95A1175A39B8BE699897F4AD6C999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:38:39:90:2d:62:c4:eb:b8:68:46:33:8c:
                    64:4d:9a:74:3d:c4:5c:a8:34:1a:b1:7f:81:92:46:
                    1f:54:c9:d9:0e:a6:9b:21:96:4d:14:04:9e:3b:f7:
                    b7:d1:81:15:cb:ec:4e:87:8f:a8:dd:64:d8:ba:c2:
                    54:cb:1d:7e:a9:f1:23:db:4e:b9:de:32:a6:ad:ef:
                    e3:10:ea:19:18:98:7a:1a:76:19:ea:44:2e:2f:c9:
                    d4:6d:07:29:b9:74:e6:84:ff:30:6f:46:1b:4e:e8:
                    52:5c:8b:b2:08:41:50:55:51:23:89:f5:d2:13:8d:
                    d2:cc:35:93:c7:03:0c:cf:5b:68:4f:d8:d1:89:f2:
                    82:05:13:04:0a:a1:98:70:07:ee:32:4a:b8:99:c3:
                    94:d2:45:0d:58:7c:9f:03:23:ab:d2:28:4e:2c:5d:
                    22:5f:84:a4:73:61:4c:dc:e1:7b:58:12:ed:75:ef:
                    b2:da:80:6e:bf:57:1d:09:bc:59:1e:e4:81:a5:63:
                    c0:d3:3b:47:ab:7d:82:02:c0:60:50:16:1e:9e:5e:
                    d7:64:93:95:eb:97:75:43:4d:e9:35:db:05:fc:eb:
                    5f:55:86:1e:a1:58:51:95:9c:47:db:79:59:41:23:
                    0f:2c:7c:56:64:a6:2c:01:e0:52:de:a5:2f:1f:52:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:27:D7:3C:A9:5A:11:75:A3:9B:8B:E6:99:89:7F:4A:D6:C9:99
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a323030303a3a2f33352d3335203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:0c:e0:90:eb:57:f3:0e:e2:40:8a:f2:5c:42:e9:f0:c4:
         4a:96:58:23:2f:6d:d6:cb:dc:71:ad:d4:d5:5c:47:41:d0:91:
         49:94:11:30:83:6d:ef:8f:6d:ec:e2:38:69:0c:b0:0b:18:2e:
         5e:ba:a1:83:e8:d5:5e:62:51:20:25:5d:47:b4:8f:9c:b6:3b:
         2c:4d:4a:cb:2a:11:3a:1e:4d:e9:df:d2:59:b6:88:59:87:d0:
         3f:37:5c:6a:ec:9c:7a:9f:60:6f:b6:5c:96:76:1a:a9:6e:a0:
         c2:cc:e0:98:e0:46:08:a6:13:a8:2c:8c:45:46:bf:03:b0:78:
         a2:76:54:59:8c:38:e3:3c:31:81:1b:e7:6e:9c:93:67:14:d6:
         2a:61:4e:28:08:df:b3:13:4d:44:18:e7:07:94:21:af:00:ce:
         19:0e:fe:6f:96:d3:2b:c5:af:c5:3d:9b:36:fc:a3:e7:c4:fb:
         b5:1a:e7:bb:b2:c6:3e:82:e2:fc:2a:76:a1:49:51:bf:46:2a:
         a0:ff:41:f3:ed:70:e8:59:a1:4c:19:e8:32:0f:f7:7e:cc:7d:
         20:26:d4:6f:38:94:74:0c:87:a8:b1:34:90:12:e1:e2:0b:a0:
         56:12:f3:1d:67:75:34:e9:e6:f7:13:38:88:01:d1:0d:b8:4a:
         21:bc:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org