Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa
File:                     323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa (raw, json)
Hash identifier:          ofC4gTCujP/eRCnwO0l4YZfk7cP3nKtF24N+E2JYUN4=
Subject key identifier:   24:23:E7:9B:0C:BB:8C:2F:B2:AC:DE:85:04:3F:BF:5C:0F:D3:46:75
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       1D67EC12454EDD3215F1C20E628E2D70BBB814F6
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa
Signing time:             Tue 20 Feb 2024 13:43:46 +0000
ROA not before:           Tue 20 Feb 2024 13:38:46 +0000
ROA not after:            Tue 18 Feb 2025 13:43:46 +0000
asID:                     61587
IP address blocks:        2804:3300:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:67:ec:12:45:4e:dd:32:15:f1:c2:0e:62:8e:2d:70:bb:b8:14:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Feb 20 13:38:46 2024 GMT
            Not After : Feb 18 13:43:46 2025 GMT
        Subject: CN=2423E79B0CBB8C2FB2ACDE85043FBF5C0FD34675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:06:4f:30:11:9a:0e:82:cf:c7:81:9a:1a:
                    30:cc:a9:a2:fa:d3:38:69:5b:47:1c:72:65:d7:2f:
                    97:aa:38:18:21:6f:03:09:0d:cc:c5:29:da:ce:db:
                    a7:3d:20:63:ad:e1:df:fe:4b:30:d1:b0:1d:37:ed:
                    fd:a9:c2:7a:1e:59:9a:c8:05:08:ad:0a:a5:51:6e:
                    cc:99:38:9d:01:d7:ce:6f:0c:28:77:5a:99:ed:b2:
                    5b:de:b2:0e:2d:72:3c:88:1b:d0:58:84:21:bd:bb:
                    b3:78:95:7b:15:de:60:a6:31:d4:b3:0b:36:8f:f4:
                    09:ab:38:17:13:2b:7f:4a:6f:a0:4d:8e:a1:8a:87:
                    fc:0a:8b:9d:34:88:40:3e:4b:93:77:02:52:fc:eb:
                    d4:86:58:b0:88:a9:fd:44:5c:a8:0e:2f:a6:c1:97:
                    07:f6:e4:69:bc:eb:ab:6c:6c:f6:9c:66:24:41:e3:
                    b6:58:84:b5:80:ac:9d:2c:e8:d0:ff:b9:0e:1c:89:
                    08:a9:16:af:54:1b:d3:99:9d:8c:5f:a3:97:7f:da:
                    a5:38:a8:c4:f8:28:3e:c0:a5:1c:01:fa:f1:e0:2f:
                    4b:03:51:08:24:d0:a3:c2:96:d3:6e:22:b2:8a:80:
                    0f:8a:24:62:0b:b8:e6:ae:42:32:b3:cc:3c:ca:30:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:23:E7:9B:0C:BB:8C:2F:B2:AC:DE:85:04:3F:BF:5C:0F:D3:46:75
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:52:72:53:99:69:3e:ac:36:19:6c:84:90:cf:92:67:f9:
         9f:98:92:f7:da:e0:cb:80:e5:30:a5:ac:e3:06:96:79:bd:f7:
         ae:60:92:71:06:3b:0a:9d:82:9e:16:e4:3e:89:78:f4:fa:e9:
         26:e7:44:6e:4d:db:3d:d8:8a:dc:86:94:a3:25:de:77:e8:9a:
         0d:30:aa:88:c2:da:7a:63:bb:8a:67:1b:e4:2c:82:d9:72:1d:
         7e:66:5a:2d:ef:ac:7e:96:6d:d2:17:1a:b2:b6:fc:6b:d0:34:
         5b:3f:e4:ca:b0:59:ae:b9:63:ef:65:8e:71:ab:df:5f:5f:a4:
         e6:ba:0c:49:7a:ac:89:f8:79:31:f0:2f:b6:fd:a6:13:c6:59:
         b7:cc:8a:0d:c2:af:a2:22:af:06:24:7c:6a:ce:49:9b:dd:eb:
         9a:e2:f5:c8:dc:93:7e:1a:2d:c1:00:69:7c:76:5b:b0:eb:53:
         f7:4c:da:28:3e:f1:11:5e:50:e9:a0:57:35:ef:de:a9:0e:7d:
         c4:72:b3:90:21:fd:15:c0:e9:9e:f9:fb:60:b1:a0:37:15:56:
         19:85:d5:7b:46:3d:d6:93:bd:12:cd:ee:58:7f:73:40:3d:63:
         f1:f2:25:f9:5d:b9:20:99:e5:d9:31:96:9e:da:0c:83:f9:df:
         14:91:af:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHWfsEkVO3TIV8cIOYo4tcLu4FPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwMTE1OTFFMTU0OEMxMUQ4NEY5Q0EyN0Q1NEFFQzFE
Q0Q0OTAxRDAeFw0yNDAyMjAxMzM4NDZaFw0yNTAyMTgxMzQzNDZaMDMxMTAvBgNV
BAMTKDI0MjNFNzlCMENCQjhDMkZCMkFDREU4NTA0M0ZCRjVDMEZEMzQ2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlagZPMBGaDoLPx4GaGjDMqaL6
0zhpW0cccmXXL5eqOBghbwMJDczFKdrO26c9IGOt4d/+SzDRsB037f2pwnoeWZrI
BQitCqVRbsyZOJ0B185vDCh3Wpntslvesg4tcjyIG9BYhCG9u7N4lXsV3mCmMdSz
CzaP9AmrOBcTK39Kb6BNjqGKh/wKi500iEA+S5N3AlL869SGWLCIqf1EXKgOL6bB
lwf25Gm866tsbPacZiRB47ZYhLWArJ0s6ND/uQ4ciQipFq9UG9OZnYxfo5d/2qU4
qMT4KD7ApRwB+vHgL0sDUQgk0KPCltNuIrKKgA+KJGILuOauQjKzzDzKMNt9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJCPnmwy7jC+yrN6FBD+/XA/TRnUwHwYDVR0j
BBgwFoAUuAEVkeFUjBHYT5yifVSuwdzUkB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC9CODAxMTU5MUUxNTQ4QzExRDg0RjlDQTI3RDU0QUVDMURDRDQ5MDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4MDExNTkxRTE1NDhDMTFE
ODRGOUNBMjdENTRBRUMxRENENDkwMUQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzIzODMwMzQzYTMzMzMzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBDMAgDANBgkqhkiG9w0BAQsFAAOC
AQEAqkdSclOZaT6sNhlshJDPkmf5n5iS99rgy4DlMKWs4waWeb33rmCScQY7Cp2C
nhbkPol49PrpJudEbk3bPdiK3IaUoyXed+iaDTCqiMLaemO7imcb5CyC2XIdfmZa
Le+sfpZt0hcasrb8a9A0Wz/kyrBZrrlj72WOcavfX1+k5roMSXqsifh5MfAvtv2m
E8ZZt8yKDcKvoiKvBiR8as5Jm93rmuL1yNyTfhotwQBpfHZbsOtT90zaKD7xEV5Q
6aBXNe/eqQ59xHKzkCH9FcDpnvn7YLGgNxVWGYXVe0Y91pO9Es3uWH9zQD1j8fIl
+V25IJnl2TGWntoMg/nfFJGvcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org