Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a383030303a3a2f33332d3333203d3e203631353839.roa
File:                     323830343a343866303a383030303a3a2f33332d3333203d3e203631353839.roa (raw, json)
Hash identifier:          dfdqF9I2TLHb6L1urNInHS7uuuqDPIqzmA9NUOKW81Q=
Subject key identifier:   62:EF:4D:D0:A1:65:E7:C3:EF:EE:EA:2E:E3:86:A4:D0:A2:9B:E6:93
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       2C810C1FB990BB2F0DCE38A87F2E06D221F13827
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a383030303a3a2f33332d3333203d3e203631353839.roa
Signing time:             Mon 24 Apr 2023 11:52:57 +0000
ROA not before:           Mon 24 Apr 2023 11:47:57 +0000
ROA not after:            Mon 22 Apr 2024 11:52:57 +0000
asID:                     61589
IP address blocks:        2804:48f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:0c:1f:b9:90:bb:2f:0d:ce:38:a8:7f:2e:06:d2:21:f1:38:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Apr 24 11:47:57 2023 GMT
            Not After : Apr 22 11:52:57 2024 GMT
        Subject: CN=62EF4DD0A165E7C3EFEEEA2EE386A4D0A29BE693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:d5:2e:ec:ce:e7:a2:bf:fc:07:12:42:fb:
                    8a:85:2d:2d:d3:45:ca:22:cb:b5:95:ea:da:d4:b7:
                    8a:ab:71:73:55:ec:7e:7a:7f:72:0e:e9:d8:61:0a:
                    a1:3f:fa:35:3f:09:f9:d6:1e:e7:b3:9f:bd:9c:31:
                    c6:3e:7c:87:fa:38:52:d6:18:df:6a:96:b2:14:3b:
                    dd:f8:e1:06:ba:6b:ed:d8:3d:dc:2b:59:2d:f3:08:
                    33:93:0b:92:f7:4b:a8:77:80:16:27:0a:e5:d4:cc:
                    7d:c9:4d:da:4b:66:39:78:ed:7c:74:28:26:97:15:
                    b9:08:b9:ce:df:03:f7:6a:72:95:6b:d7:98:0e:1a:
                    70:22:33:5c:4b:81:b3:ae:da:db:b4:45:e6:3f:e6:
                    12:91:4d:67:f2:57:4e:f8:e5:73:05:d7:b1:8c:cc:
                    8e:a9:06:28:d1:da:1b:bb:0b:15:4c:ad:dc:cb:62:
                    5e:ab:37:fc:ab:7f:2b:28:a8:89:e8:56:cf:14:91:
                    0b:8b:af:d9:68:8a:5d:ab:22:59:14:75:90:12:e3:
                    ed:d2:a4:e8:1f:28:cc:f5:e8:97:91:ea:b0:14:cd:
                    e0:dc:f7:dc:d1:be:77:bc:dc:85:c1:06:b0:51:85:
                    c4:78:b9:2c:3b:f4:ee:43:b5:fe:ae:80:86:73:d0:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:4D:D0:A1:65:E7:C3:EF:EE:EA:2E:E3:86:A4:D0:A2:9B:E6:93
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a383030303a3a2f33332d3333203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:7d:49:62:79:5b:9e:26:31:03:f4:51:e7:75:60:15:87:
         d7:85:ac:cf:b5:f8:3e:4c:36:1e:58:15:95:9b:8c:6d:19:20:
         4f:32:74:ea:36:eb:fd:5d:eb:c9:d7:04:81:60:b7:49:ac:0d:
         b9:ba:71:50:a3:db:c3:e4:6c:f7:9a:33:00:70:1d:ef:d4:9a:
         16:f0:98:b1:84:55:0f:b4:64:ee:6a:d1:c3:cf:5e:65:3d:57:
         43:a3:96:b1:aa:d3:90:76:a4:9a:eb:99:8b:b8:48:07:5e:45:
         23:af:bd:c4:67:37:39:2f:4f:c5:9f:76:73:60:fa:f9:51:aa:
         0c:03:aa:43:b6:7e:0b:0f:79:10:4f:0f:92:77:9d:06:b8:63:
         70:8f:1f:84:ab:5d:ac:7d:47:39:01:b4:5e:6e:6f:ba:2e:37:
         fc:30:ac:eb:08:5d:40:d4:1d:9f:2c:53:1d:05:a6:c9:35:46:
         af:91:e1:d4:c3:32:69:a7:8d:0c:78:b1:2b:0c:59:95:d1:da:
         b2:6b:2c:68:ab:44:5c:14:17:e6:4e:40:c4:8b:c5:99:1a:82:
         0d:46:1c:3d:b4:8e:5f:9f:04:ea:da:18:44:7c:0d:ce:a9:91:
         07:57:e1:5f:18:7a:57:74:75:7e:73:f7:d3:bd:a8:80:80:4b:
         54:8f:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org