Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa
File:                     323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa (raw, json)
Hash identifier:          DzDmCirXZuLic5aoZuL4Uy+0yQb9s/82LdXimvSR7Sc=
Subject key identifier:   F5:F0:96:FE:15:8C:55:AD:AF:CC:C8:5D:90:61:2C:A8:CF:3E:AF:24
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       5825D61B98DABA36F68CAB9897A7AEF6484C02CF
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa
Signing time:             Wed 10 Jan 2024 13:02:35 +0000
ROA not before:           Wed 10 Jan 2024 12:57:35 +0000
ROA not after:            Wed 08 Jan 2025 13:02:35 +0000
asID:                     61589
IP address blocks:        2804:48f0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:25:d6:1b:98:da:ba:36:f6:8c:ab:98:97:a7:ae:f6:48:4c:02:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:57:35 2024 GMT
            Not After : Jan  8 13:02:35 2025 GMT
        Subject: CN=F5F096FE158C55ADAFCCC85D90612CA8CF3EAF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:26:95:20:f6:44:1c:a2:59:8f:03:31:34:
                    23:2c:27:10:95:a5:af:12:8d:7a:9c:c4:19:38:a2:
                    20:d0:30:02:ff:f2:58:75:a1:d6:1b:e6:56:aa:83:
                    36:30:3e:cd:55:94:d1:b7:6f:69:f0:91:82:19:41:
                    a5:9c:bc:16:0a:92:b5:9f:5e:57:eb:fb:8c:24:fc:
                    74:80:ce:fd:84:9c:11:26:b6:f4:40:22:8b:58:26:
                    e5:ba:1d:6b:bc:a7:92:13:a9:d5:b5:b5:a0:35:6b:
                    a4:b7:91:8e:4a:50:20:16:d7:13:d7:55:59:12:57:
                    b5:4f:c5:a0:8b:53:eb:1a:05:49:33:ce:7b:e2:dd:
                    55:23:1e:43:fe:6b:5a:47:1c:70:4a:07:ec:bb:96:
                    f5:6e:b5:83:f9:30:ad:f9:d9:fe:dd:fc:19:13:65:
                    5f:75:7f:fa:a1:6b:51:ad:1b:cd:a5:f2:37:20:ac:
                    ff:c1:6b:8d:24:05:a2:7e:69:94:59:16:f4:32:46:
                    d5:55:03:4b:c2:8e:4b:1e:b3:99:37:a9:69:ae:96:
                    d4:1f:3a:51:e5:2d:4d:13:d7:23:2a:68:0a:4a:4b:
                    4d:3b:ac:51:88:a5:87:1a:21:9c:76:ef:d4:63:62:
                    f6:b7:5f:17:97:84:52:72:b5:23:b4:e1:e1:6f:74:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F0:96:FE:15:8C:55:AD:AF:CC:C8:5D:90:61:2C:A8:CF:3E:AF:24
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:4d:5d:9e:0a:c4:27:72:b8:9a:a1:87:ef:6e:6f:fd:1a:
         6e:2c:b1:05:fb:0d:20:18:d4:fb:12:ef:85:c5:2d:51:7d:6c:
         89:13:75:ad:49:cf:bf:ce:cf:eb:92:b5:95:2f:40:7a:b8:07:
         76:b4:fb:5e:3e:c9:31:70:9d:a5:a7:bf:fb:56:81:42:fa:86:
         4a:55:36:9f:a0:ff:9c:26:60:b9:5a:cb:c3:88:7e:b9:b2:0f:
         dd:b7:73:ba:2a:db:f5:8d:07:74:25:62:10:ad:bd:78:40:53:
         c2:6e:0d:37:cc:42:f3:be:70:bf:b0:ee:d5:70:ad:f3:81:ea:
         49:67:c0:27:55:d0:39:0a:d1:fb:8c:f1:f4:09:62:88:2d:2d:
         8f:47:5d:25:6e:1d:e6:d9:50:a9:09:39:fa:fc:d0:7b:a3:6a:
         4a:b5:bb:e0:d2:5a:72:f0:35:4f:2e:17:e3:ec:30:01:42:15:
         ae:ad:b1:ca:86:fd:83:02:e9:cd:5a:e4:05:76:a8:6b:2a:32:
         3b:9d:36:c8:07:82:f8:58:31:15:5b:d4:f8:b5:48:45:be:52:
         b2:b7:09:c7:8a:2e:11:da:03:0c:28:28:75:ed:07:02:e1:bb:
         cc:06:6f:56:de:55:a2:e6:27:85:e7:3b:85:95:02:ce:ac:8a:
         c5:4d:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org