Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a383030303a3a2f33332d3333203d3e20323634333031.roa
File:                     323830343a323563343a383030303a3a2f33332d3333203d3e20323634333031.roa (raw, json)
Hash identifier:          vr3G09OLoAiDp2mJgi8//y0ibndn4kt9pTUerOd30SA=
Subject key identifier:   C5:08:59:D4:F6:AD:DC:EF:59:1E:C5:15:E8:67:9D:73:D6:FA:0D:23
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       5B80C9E0B88039C3CC79634FD461FF98C5E0060B
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a383030303a3a2f33332d3333203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:10:17 +0000
ROA not before:           Sat 08 Apr 2023 03:05:17 +0000
ROA not after:            Sat 06 Apr 2024 03:10:17 +0000
asID:                     264301
IP address blocks:        2804:25c4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:80:c9:e0:b8:80:39:c3:cc:79:63:4f:d4:61:ff:98:c5:e0:06:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:05:17 2023 GMT
            Not After : Apr  6 03:10:17 2024 GMT
        Subject: CN=C50859D4F6ADDCEF591EC515E8679D73D6FA0D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:c6:67:ed:90:5a:68:ea:7c:6b:9c:13:4c:
                    b2:78:26:3d:05:ad:bc:8c:d8:64:96:89:76:96:6d:
                    ed:87:88:bd:52:ba:55:d6:2b:0a:35:7b:34:e2:9e:
                    46:5f:f8:81:17:d1:ab:0f:22:af:eb:06:cb:1c:a9:
                    d4:a1:bb:49:d7:7b:06:9a:5f:c6:2b:0f:a8:0f:63:
                    fa:79:ad:34:e7:46:45:72:f8:4a:63:84:2d:f4:3b:
                    5c:7a:61:3c:69:86:ed:d5:07:40:1a:bf:32:af:f7:
                    18:30:b2:5a:73:74:a0:29:1b:f8:60:73:98:34:fa:
                    71:c9:e0:39:1d:9a:c5:77:94:03:a0:a4:a6:3b:a6:
                    6c:d0:00:87:d5:a3:46:e3:22:e5:0a:30:eb:59:af:
                    27:79:a0:13:3c:f1:5a:09:b1:dd:fa:57:74:5f:89:
                    a4:64:ab:fe:c3:fc:74:64:f8:95:78:23:af:de:04:
                    6a:79:bd:28:ee:ae:3a:9f:9a:82:b4:a3:5f:29:d3:
                    96:34:bc:0f:50:d8:36:42:1a:48:4a:55:d2:75:b5:
                    a1:aa:c2:39:95:2e:c3:6d:cf:ac:7b:70:c0:3b:1b:
                    82:fe:e0:9e:5f:81:31:34:01:36:be:b2:17:89:71:
                    8b:2f:8f:77:62:40:25:07:d5:8b:51:78:92:0e:ea:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:08:59:D4:F6:AD:DC:EF:59:1E:C5:15:E8:67:9D:73:D6:FA:0D:23
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a383030303a3a2f33332d3333203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         be:96:0b:8d:cb:da:68:f8:53:92:77:97:3d:4e:7d:87:5f:0a:
         2a:fb:e6:8b:a2:4d:e6:0b:47:fd:ed:fa:6e:d0:9e:1b:31:d5:
         e7:c3:fb:0c:76:09:e1:10:c6:76:40:ad:b3:dc:b6:f1:ba:88:
         7e:3a:9b:fb:5b:2a:eb:ed:bf:32:97:e3:18:d2:98:a6:07:ad:
         3f:5b:0e:be:e3:28:1e:87:d8:6b:84:ca:1a:c7:84:a5:a5:0c:
         da:18:cc:f2:25:b3:8f:a7:a3:1b:32:53:bc:6d:e7:7f:19:ce:
         4b:6f:7e:93:ce:19:95:17:de:65:72:b7:4c:19:55:64:b4:d1:
         93:0b:6b:c9:02:cc:9e:ba:a9:4c:44:8b:d6:cb:46:d1:69:26:
         af:90:28:7a:6a:11:1d:e8:b5:1d:d9:87:89:ae:65:24:83:10:
         21:1c:d8:6f:95:c0:38:81:44:c5:6a:21:a8:0a:d3:8f:27:68:
         55:09:f5:3d:8f:54:ff:eb:6a:93:63:b8:7e:b0:f0:06:e1:b4:
         83:85:08:66:53:02:2e:ee:8a:ca:c7:dd:cb:42:d0:1d:6d:8a:
         b8:9f:4d:ea:d4:e1:75:5f:a2:20:b3:fb:38:ee:3d:3c:bc:f2:
         83:e6:65:12:a5:d8:b8:8d:e9:95:58:03:e8:c0:24:8b:82:e3:
         4c:03:66:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org