Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a363030303a3a2f33352d3335203d3e203631353837.roa
File:                     323830343a333330303a363030303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier:          Za9C577kn1TFbntfOVK1oBkbSFGyumUm0yjZxSVyffU=
Subject key identifier:   47:28:3F:69:54:9D:C9:A0:85:8D:BD:AC:DE:41:CE:72:2C:BE:F9:BE
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       45EA5D0092EA51D444492920AB506032E3D23598
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a363030303a3a2f33352d3335203d3e203631353837.roa
Signing time:             Wed 10 Jan 2024 13:01:44 +0000
ROA not before:           Wed 10 Jan 2024 12:56:44 +0000
ROA not after:            Wed 08 Jan 2025 13:01:44 +0000
asID:                     61587
IP address blocks:        2804:3300:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ea:5d:00:92:ea:51:d4:44:49:29:20:ab:50:60:32:e3:d2:35:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:56:44 2024 GMT
            Not After : Jan  8 13:01:44 2025 GMT
        Subject: CN=47283F69549DC9A0858DBDACDE41CE722CBEF9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:0c:21:63:75:3f:81:18:91:01:89:df:1b:
                    86:48:f8:ef:15:da:46:0b:70:ad:b5:53:7b:47:58:
                    b1:e3:a0:40:ba:0e:b3:eb:d1:68:c3:a3:38:c8:ec:
                    d0:57:61:a7:0b:f6:44:8d:e1:37:5c:79:b9:ae:1e:
                    88:6a:cb:1c:52:75:1d:a2:08:12:37:86:f8:ef:1b:
                    02:33:80:19:71:58:da:52:7e:7a:c7:42:8f:a7:e2:
                    51:c4:2d:74:aa:24:97:45:82:0b:83:c9:8a:21:19:
                    28:57:20:3c:f0:7c:9f:ef:64:f1:0a:98:5c:3a:21:
                    69:ae:5d:13:46:3e:fb:03:1c:81:c0:57:6a:b2:ba:
                    cb:b6:40:fa:9d:bf:8e:54:45:d2:96:55:c1:a9:42:
                    12:b4:04:95:bb:33:2f:2f:e0:41:33:e6:f9:78:65:
                    e4:aa:8d:4a:5a:a9:03:28:25:0e:38:44:b1:dd:90:
                    fd:4f:c3:a1:1c:e9:ea:ce:7d:c7:9b:03:a3:92:50:
                    66:2c:31:5b:fe:ba:a3:66:22:6f:58:de:9a:e5:b4:
                    df:0c:d2:ca:c3:67:8c:86:0a:86:18:13:1f:03:f2:
                    52:f9:16:26:c0:d3:bf:a3:08:45:f2:10:12:0c:5d:
                    96:db:18:1a:4c:4e:36:bc:f9:0a:98:f3:41:03:fe:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:3F:69:54:9D:C9:A0:85:8D:BD:AC:DE:41:CE:72:2C:BE:F9:BE
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a363030303a3a2f33352d3335203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b9:42:f6:02:a5:a2:28:00:48:13:e6:9d:46:fd:76:70:56:d6:
         2e:df:e5:9c:59:47:2b:60:f8:a2:fc:be:4b:49:99:19:e4:a3:
         e7:0b:02:fe:f5:4d:5f:a4:60:b7:3e:0d:b2:65:23:2d:a7:68:
         99:a9:1a:88:de:a3:b6:18:f2:c4:f3:eb:7f:af:42:e4:72:e6:
         ee:f7:ec:57:88:d5:d1:23:f5:1b:4d:b4:1d:67:54:3f:e1:96:
         b8:b0:1a:7f:08:88:ca:cb:8d:3f:89:1c:f1:d5:11:e2:e2:0e:
         76:58:8e:c3:7a:97:c3:69:83:be:46:66:26:b6:39:27:0a:ed:
         fa:fa:d0:8b:cc:2f:db:53:a6:d7:11:eb:fd:8e:20:e9:1b:20:
         7e:2e:bb:1e:db:78:a8:bc:f1:b0:36:4a:2b:88:ed:d0:dc:40:
         d0:e7:25:64:56:68:9e:cf:15:8c:91:6f:4f:e9:26:49:0a:29:
         8d:29:5e:87:12:d0:ac:58:76:18:34:66:cb:62:d0:d1:b9:91:
         02:05:d1:b9:b5:ad:ab:c7:f4:93:4e:82:42:e7:d7:5a:8a:ff:
         e8:8b:97:de:19:25:d9:97:d4:bc:de:6a:e2:8d:8b:66:b3:a9:
         f9:74:03:dd:2b:91:c9:84:e1:e0:81:e0:98:3f:17:1e:0c:c9:
         32:56:7a:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURepdAJLqUdRESSkgq1BgMuPSNZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwMTE1OTFFMTU0OEMxMUQ4NEY5Q0EyN0Q1NEFFQzFE
Q0Q0OTAxRDAeFw0yNDAxMTAxMjU2NDRaFw0yNTAxMDgxMzAxNDRaMDMxMTAvBgNV
BAMTKDQ3MjgzRjY5NTQ5REM5QTA4NThEQkRBQ0RFNDFDRTcyMkNCRUY5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzwwhY3U/gRiRAYnfG4ZI+O8V
2kYLcK21U3tHWLHjoEC6DrPr0WjDozjI7NBXYacL9kSN4TdcebmuHohqyxxSdR2i
CBI3hvjvGwIzgBlxWNpSfnrHQo+n4lHELXSqJJdFgguDyYohGShXIDzwfJ/vZPEK
mFw6IWmuXRNGPvsDHIHAV2qyusu2QPqdv45URdKWVcGpQhK0BJW7My8v4EEz5vl4
ZeSqjUpaqQMoJQ44RLHdkP1Pw6Ec6erOfcebA6OSUGYsMVv+uqNmIm9Y3prltN8M
0srDZ4yGCoYYEx8D8lL5FibA07+jCEXyEBIMXZbbGBpMTja8+QqY80ED/hgNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURyg/aVSdyaCFjb2s3kHOciy++b4wHwYDVR0j
BBgwFoAUuAEVkeFUjBHYT5yifVSuwdzUkB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC9CODAxMTU5MUUxNTQ4QzExRDg0RjlDQTI3RDU0QUVDMURDRDQ5MDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4MDExNTkxRTE1NDhDMTFE
ODRGOUNBMjdENTRBRUMxRENENDkwMUQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzIzODMwMzQzYTMzMzMzMDMwM2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBDMAYDANBgkqhkiG9w0BAQsFAAOC
AQEAuUL2AqWiKABIE+adRv12cFbWLt/lnFlHK2D4ovy+S0mZGeSj5wsC/vVNX6Rg
tz4NsmUjLadomakaiN6jthjyxPPrf69C5HLm7vfsV4jV0SP1G020HWdUP+GWuLAa
fwiIysuNP4kc8dUR4uIOdliOw3qXw2mDvkZmJrY5Jwrt+vrQi8wv21Om1xHr/Y4g
6Rsgfi67Htt4qLzxsDZKK4jt0NxA0OclZFZons8VjJFvT+kmSQopjSlehxLQrFh2
GDRmy2LQ0bmRAgXRubWtq8f0k06CQufXWor/6IuX3hkl2ZfUvN5q4o2LZrOp+XQD
3SuRyYTh4IHgmD8XHgzJMlZ6zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org