Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa
File:                     323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier:          CsegBnKKgGWxRJZDO8dmuBowx49FTZFDaD5/Mbe7+rg=
Subject key identifier:   34:2C:1E:09:F9:FF:35:6C:FA:96:87:9A:5D:17:FD:76:89:1F:9C:FE
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       76F1E346E5B2013626C9B98498AAAEEC3FE9C9FE
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa
Signing time:             Mon 24 Apr 2023 11:52:53 +0000
ROA not before:           Mon 24 Apr 2023 11:47:53 +0000
ROA not after:            Mon 22 Apr 2024 11:52:53 +0000
asID:                     61589
IP address blocks:        2804:48f0:0:66::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f1:e3:46:e5:b2:01:36:26:c9:b9:84:98:aa:ae:ec:3f:e9:c9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Apr 24 11:47:53 2023 GMT
            Not After : Apr 22 11:52:53 2024 GMT
        Subject: CN=342C1E09F9FF356CFA96879A5D17FD76891F9CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:74:b4:77:4c:e2:7b:0d:f1:38:dc:34:36:
                    31:2d:07:6b:90:12:0d:b0:a8:d9:82:7b:d3:59:be:
                    c9:fb:b0:06:71:80:bc:66:34:a8:23:39:c8:8b:7c:
                    9d:47:db:32:42:e7:c8:67:0c:77:89:90:8a:fe:18:
                    93:35:5d:37:ff:12:6e:4c:2b:2b:8a:8b:19:db:1b:
                    96:1b:96:97:8d:4e:ba:9c:f1:8e:c1:c0:e6:2b:13:
                    ea:fd:3b:db:ac:a1:c0:61:ea:a5:2f:7f:3d:c3:41:
                    26:a7:7c:d3:19:a1:5d:86:f8:6c:bc:10:51:d8:4f:
                    9d:82:6c:ef:86:98:4e:50:25:46:4d:73:9d:35:cd:
                    33:f3:7c:07:2e:74:58:3b:d5:95:ea:5f:e3:51:a1:
                    bf:7d:c0:d8:e1:98:e5:fb:cd:10:32:18:06:1a:a8:
                    06:47:5d:9f:57:6d:b4:05:76:9e:4a:b2:14:95:9d:
                    20:79:6b:5a:1c:ab:bc:3f:86:76:df:21:61:81:d7:
                    c3:06:c4:78:13:6d:6b:92:4e:ac:4b:ed:b1:2f:25:
                    4d:64:49:09:1b:dc:c3:f4:d6:b7:56:91:e8:dc:94:
                    96:5f:ef:29:5c:fb:5e:a4:7e:9d:54:5f:4e:e5:ac:
                    dd:ae:4f:e3:47:17:c7:2d:5c:1c:35:21:0f:dc:7a:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2C:1E:09:F9:FF:35:6C:FA:96:87:9A:5D:17:FD:76:89:1F:9C:FE
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:0:66::/64

    Signature Algorithm: sha256WithRSAEncryption
         52:28:18:c1:78:1c:13:c5:bf:1f:89:6c:31:24:18:a8:1e:1b:
         b1:ce:36:00:22:6f:fe:98:0b:59:fc:a1:57:5c:d0:fe:06:3d:
         e2:78:e0:3a:64:5a:56:f3:5c:51:95:1f:53:82:d9:f3:bf:6c:
         ca:f4:45:3a:a7:52:51:7f:93:81:41:d5:e5:51:64:92:e3:a1:
         54:38:5a:26:9c:b5:f2:eb:e0:0d:5b:09:d8:ce:43:20:1e:42:
         03:f3:59:70:40:b8:2d:58:61:83:b3:77:4e:f5:43:c9:19:fe:
         de:af:c5:89:3d:2b:6a:dc:99:64:a6:f2:d0:62:5f:bd:36:24:
         9b:63:4d:4f:09:be:97:a0:6f:ee:5c:94:dd:67:5c:38:ad:db:
         32:cc:7b:a0:3d:e3:8a:0d:39:9b:50:8f:1e:1a:14:00:44:c6:
         fb:84:5e:29:d5:a5:07:be:10:40:58:e5:f8:18:74:fb:5c:2b:
         fe:04:6c:aa:66:e6:67:2d:55:ec:42:f2:94:17:e0:c5:2c:0e:
         03:e1:75:05:6a:1c:7b:48:dc:95:60:13:13:2d:5c:1d:d8:01:
         5f:4f:83:aa:e0:5f:98:e6:17:aa:51:a3:77:b1:30:d6:e0:95:
         02:57:f2:20:a9:9f:70:b5:ff:97:d6:f4:21:60:da:b8:8d:21:
         00:12:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org