Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33332d3333203d3e203631353837.roa
File:                     323830343a333330303a383030303a3a2f33332d3333203d3e203631353837.roa (raw, json)
Hash identifier:          1ywEBL8xO8ZrZS1PLGGIr26X45iGZpMeUbD2MhE2EMY=
Subject key identifier:   E0:C1:41:90:B0:98:7A:95:5A:44:A9:8E:0D:A0:DC:B1:A2:28:C3:7B
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       583E5D48CA135F795DF161A7177D5235287863CD
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33332d3333203d3e203631353837.roa
Signing time:             Tue 20 Feb 2024 13:43:45 +0000
ROA not before:           Tue 20 Feb 2024 13:38:45 +0000
ROA not after:            Tue 18 Feb 2025 13:43:45 +0000
asID:                     61587
IP address blocks:        2804:3300:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:5d:48:ca:13:5f:79:5d:f1:61:a7:17:7d:52:35:28:78:63:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Feb 20 13:38:45 2024 GMT
            Not After : Feb 18 13:43:45 2025 GMT
        Subject: CN=E0C14190B0987A955A44A98E0DA0DCB1A228C37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:67:1c:c1:b3:68:5f:d9:2a:af:6e:c6:54:
                    fa:6e:80:b4:70:2b:3d:1e:d5:8a:a4:31:6b:23:f9:
                    88:7c:f4:bc:3f:82:ce:d6:d8:e0:b6:cc:6f:20:03:
                    9b:99:70:d9:57:42:84:cc:d6:07:17:b5:3d:bb:3d:
                    d2:e4:0b:9d:e9:b5:14:61:a8:24:a5:c2:f2:fa:92:
                    38:08:07:82:26:4a:e7:f2:6c:2e:32:44:72:96:f6:
                    fb:af:2f:de:63:07:c4:32:95:b3:5a:fb:e1:a0:ea:
                    08:ea:3b:99:74:20:26:60:f8:44:8b:53:94:7b:23:
                    a9:5a:21:59:e2:66:67:f2:de:3d:41:22:9c:aa:66:
                    05:3c:6f:4f:fd:c8:1c:91:d2:29:c6:3c:58:e0:9c:
                    3d:f1:85:3d:df:99:03:08:fc:fc:b6:19:b7:91:f1:
                    c2:31:46:f9:48:47:13:4d:49:d1:f5:3b:ee:38:a8:
                    0f:d6:ed:ae:91:77:72:d9:4b:d1:79:82:19:bb:30:
                    7d:d1:60:78:a6:b9:94:7d:56:1e:82:47:aa:ac:14:
                    90:7f:23:41:05:d2:4f:92:a0:ad:aa:37:6d:fa:09:
                    70:29:6f:3a:a1:19:d8:1a:a9:8d:f2:30:a8:d0:3c:
                    20:be:63:68:cb:4b:7a:7f:20:88:16:1c:24:97:4d:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:41:90:B0:98:7A:95:5A:44:A9:8E:0D:A0:DC:B1:A2:28:C3:7B
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33332d3333203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:81:28:8b:2f:f4:4d:41:bd:44:d0:ac:b5:8a:7e:55:9d:
         1a:2d:04:ca:0c:58:08:28:fb:7b:96:31:ec:51:a4:b4:e4:35:
         1e:06:99:c1:2d:48:2c:e4:31:1f:18:55:de:bf:a0:08:db:1c:
         e0:95:68:2d:28:35:08:46:48:ab:50:53:ac:81:a1:07:12:30:
         9e:e7:4d:c6:13:63:0b:4f:21:07:fa:8d:4b:fb:96:07:23:20:
         6e:1a:84:e0:57:0e:a9:0c:6a:40:56:cd:18:49:cc:ed:2c:b0:
         c7:d1:00:8f:c0:23:9f:3c:56:83:13:41:10:53:eb:d9:49:a3:
         dc:47:76:4c:29:82:fc:54:b7:f7:fe:1e:95:4c:74:76:77:f1:
         a5:79:39:4e:24:64:d2:02:01:c1:bd:36:3d:f1:a8:70:f1:e9:
         d9:4c:44:d2:a8:6a:37:21:4a:a6:8e:16:96:6b:fd:62:27:e6:
         e7:3e:61:4f:e2:97:4e:03:fa:c9:6a:69:c9:ef:30:de:1d:3d:
         a8:6c:ac:12:8b:4f:12:e6:39:68:03:6d:04:19:7c:f8:c5:fc:
         7e:89:a9:7b:39:5f:2c:37:1a:bd:ed:94:af:d8:c1:dc:4b:f5:
         71:00:0c:88:25:c1:02:fb:dd:27:65:cd:81:be:1b:af:21:7d:
         8b:e4:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org