Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a633030303a3a2f33352d3335203d3e203631353837.roa
File:                     323830343a333330303a633030303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier:          pVymlf+7fKMGN/qvr7s4GpwOMgm4fAgxqPPMoKKtSSc=
Subject key identifier:   B9:40:2F:98:1B:49:59:BE:3D:C9:8D:48:79:DB:4F:2D:8F:FE:D2:D8
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       CF553E092BB2BE6EC4D9C0D73E1274CE056242
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a633030303a3a2f33352d3335203d3e203631353837.roa
Signing time:             Wed 10 Jan 2024 13:02:08 +0000
ROA not before:           Wed 10 Jan 2024 12:57:08 +0000
ROA not after:            Wed 08 Jan 2025 13:02:08 +0000
asID:                     61587
IP address blocks:        2804:3300:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cf:55:3e:09:2b:b2:be:6e:c4:d9:c0:d7:3e:12:74:ce:05:62:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:57:08 2024 GMT
            Not After : Jan  8 13:02:08 2025 GMT
        Subject: CN=B9402F981B4959BE3DC98D4879DB4F2D8FFED2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:2c:94:6e:10:c5:47:a6:5e:a4:9b:ce:8e:
                    69:25:31:ff:94:5b:ce:09:9e:c5:8d:91:bf:3d:93:
                    3f:1e:72:be:84:19:ce:59:ec:cb:fc:a5:93:83:4a:
                    18:ae:3f:76:cc:72:3c:0f:4d:8a:2d:5d:2e:51:c3:
                    66:8c:33:30:9f:83:56:e0:da:d5:10:9c:1a:07:89:
                    7c:48:67:e1:f9:22:b0:2e:e6:27:d7:1b:0a:cf:01:
                    4c:25:b7:a4:d9:ec:98:a3:38:b7:b0:8d:cd:f6:75:
                    d9:18:5b:21:fb:3e:0d:78:d3:fe:38:75:65:9c:b9:
                    d9:ad:b0:4a:c3:4d:fb:77:5d:fc:63:15:64:e3:bf:
                    20:a9:29:9f:9f:72:5d:0b:25:5d:b6:0e:e2:00:b0:
                    c3:f9:79:84:b3:30:d9:83:fb:9a:7e:92:90:1a:ae:
                    86:56:52:d5:4b:f1:a9:a9:6f:74:7f:b6:76:85:c2:
                    a5:fc:b9:37:92:f4:a0:b9:41:e1:b5:7a:fa:90:30:
                    94:2b:55:e1:b5:d0:14:94:a4:3a:9a:8a:2e:99:a7:
                    9a:6d:cd:a7:41:b4:3d:28:a6:59:75:ab:e6:61:88:
                    37:20:c5:0e:db:9d:8b:27:ae:28:92:9d:3c:d2:8d:
                    f4:58:45:ed:87:c2:39:34:48:2b:18:94:62:49:9d:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:2F:98:1B:49:59:BE:3D:C9:8D:48:79:DB:4F:2D:8F:FE:D2:D8
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a633030303a3a2f33352d3335203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:ed:87:99:f3:49:39:83:44:05:27:45:e7:e0:32:7d:db:
         99:59:9b:d0:59:b0:6e:3b:41:4f:b4:af:52:f3:bd:fe:cd:0f:
         16:08:f9:e6:50:b0:c3:a0:b7:79:b9:75:07:aa:7c:ed:d3:a7:
         db:ab:89:18:26:ad:1b:65:b4:fe:6a:98:26:92:3c:e1:59:b9:
         f1:3b:34:0e:9e:69:62:76:c5:ae:d6:53:e8:0d:4f:67:78:32:
         93:88:8e:ea:89:1f:70:f9:2d:05:1a:5d:94:77:e5:2e:70:66:
         3e:b6:e4:26:58:c0:95:1c:c9:ee:90:bd:36:80:ce:72:dc:ba:
         4f:d6:60:cc:f0:72:01:1c:2f:f0:d6:8e:63:49:5d:1b:18:ff:
         df:17:2d:3d:4a:82:06:91:fd:15:64:5b:ba:eb:74:4a:75:3c:
         b4:f5:0a:92:a6:fb:bc:46:56:d6:ef:fd:0a:6c:e1:5f:f9:a1:
         a4:7b:28:25:fb:62:ba:35:42:a8:52:a5:c1:99:bf:a0:ee:9c:
         17:e9:0a:c2:59:61:bf:64:3a:24:21:44:07:46:be:6d:57:0c:
         29:a3:79:82:62:8b:ca:16:dc:d5:ef:fe:86:00:2c:ff:26:2e:
         5d:ec:b6:8f:f9:e8:dc:09:27:a8:44:f4:59:61:20:b3:c5:52:
         46:be:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org