Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a343030303a3a2f33352d3335203d3e203631353837.roa
File:                     323830343a333330303a343030303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier:          caQOta6Nkx58JsEovVNVzMJhWbny2vCXM5q6IoxYLuk=
Subject key identifier:   57:C3:7E:3E:AD:B3:A9:95:E1:3A:25:41:BF:F6:2E:E7:2E:2B:F5:D9
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       3D56E4CD596B3981700E5606D50BAB735CF8A817
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a343030303a3a2f33352d3335203d3e203631353837.roa
Signing time:             Wed 10 Jan 2024 13:01:41 +0000
ROA not before:           Wed 10 Jan 2024 12:56:41 +0000
ROA not after:            Wed 08 Jan 2025 13:01:41 +0000
asID:                     61587
IP address blocks:        2804:3300:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:56:e4:cd:59:6b:39:81:70:0e:56:06:d5:0b:ab:73:5c:f8:a8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:56:41 2024 GMT
            Not After : Jan  8 13:01:41 2025 GMT
        Subject: CN=57C37E3EADB3A995E13A2541BFF62EE72E2BF5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:66:c6:ba:02:82:6f:67:17:ce:28:4b:11:
                    e1:fd:37:12:df:c3:c2:2b:73:ec:e8:38:58:97:f9:
                    2d:ea:15:96:9e:9b:32:99:dd:2f:37:c3:95:4c:d9:
                    3e:9c:2e:55:45:ec:0e:68:13:5b:d5:2b:ee:c4:f3:
                    cf:99:38:a2:e5:29:52:d2:70:4b:43:4a:83:1c:a6:
                    84:b6:da:45:cf:9a:7a:0f:94:ad:9a:d9:ad:ad:87:
                    69:35:be:f7:b5:a1:af:1a:2b:37:66:4d:ff:fd:63:
                    64:4a:9d:74:20:12:8c:1c:83:07:a9:5a:4c:1f:10:
                    a3:ae:70:db:08:11:00:6b:38:5e:ea:b5:b0:fe:f6:
                    64:fb:89:4c:9f:cb:c8:08:25:ee:fd:a6:aa:cd:17:
                    49:d8:00:fe:f3:21:97:3d:ca:76:f6:e0:a3:b1:3c:
                    cb:ce:9a:43:71:59:75:58:50:dd:2c:c0:5a:87:97:
                    8f:55:e2:aa:3e:c1:e6:08:02:f3:0c:61:f1:8c:fb:
                    c7:8f:ab:01:a0:cf:bb:d7:85:5e:96:24:5b:17:28:
                    59:d9:80:1d:b3:ef:fc:db:e2:5d:f0:2b:a7:c6:8f:
                    0f:ea:87:e6:f1:71:8b:6d:e3:46:33:2f:ee:4e:1e:
                    30:d9:c7:63:85:15:a2:17:4a:a0:37:87:c1:6a:0b:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C3:7E:3E:AD:B3:A9:95:E1:3A:25:41:BF:F6:2E:E7:2E:2B:F5:D9
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a343030303a3a2f33352d3335203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:57:83:9d:68:9e:6e:e0:e3:81:75:59:f5:e2:82:de:a2:
         0e:83:fa:e1:ab:55:55:50:71:da:2a:f5:6b:86:39:d5:1e:d4:
         1a:1f:2d:1a:8f:75:56:32:34:e2:7c:39:e4:b3:f7:b7:4f:c6:
         da:9d:f8:aa:dd:d5:b2:69:7d:6b:a1:ee:a4:f3:d8:02:f0:0d:
         ae:b1:25:e6:49:36:cd:28:fe:1d:7e:67:ff:bc:08:d9:12:cc:
         e2:34:96:d9:bd:53:a3:c3:d4:22:cd:ef:62:78:45:a5:5b:45:
         3f:bb:7a:53:09:06:04:4a:33:d1:b5:73:03:d8:ce:20:bf:51:
         77:7b:e0:49:95:95:89:a8:fc:52:26:6d:07:50:6c:4e:64:59:
         65:13:9b:26:be:e6:55:db:b6:3d:c5:91:02:c8:cc:ee:47:a1:
         d5:78:11:dd:3b:4a:53:da:6d:02:e5:1f:b6:8d:f1:63:7a:27:
         3a:fc:58:fc:94:f3:c5:40:b1:43:0c:55:e3:8c:0e:fc:59:d9:
         6e:45:c5:3b:c0:c7:34:df:31:bf:54:f9:8e:a8:3c:4b:57:4f:
         6c:c2:04:48:29:d0:b8:d7:4a:1c:5a:84:78:8c:9e:f2:2c:2c:
         12:34:2b:2b:52:62:ce:2e:d8:df:85:b5:5d:2a:ff:c3:bd:c0:
         c9:2e:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org