Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a3a2f33332d3333203d3e20323634333031.roa
File:                     323830343a323563343a3a2f33332d3333203d3e20323634333031.roa (raw, json)
Hash identifier:          TZD36bSRb8Oci++eOSAt9YqNKSNzOdJ80XI9N/Hr0BU=
Subject key identifier:   09:FE:E8:8F:E9:49:66:9C:F3:33:68:48:85:D4:DB:7E:97:E2:A6:09
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       0285B8DB8FD60D5500E8F0C7D4EB855233568C76
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a3a2f33332d3333203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:10:13 +0000
ROA not before:           Sat 08 Apr 2023 03:05:13 +0000
ROA not after:            Sat 06 Apr 2024 03:10:13 +0000
asID:                     264301
IP address blocks:        2804:25c4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:85:b8:db:8f:d6:0d:55:00:e8:f0:c7:d4:eb:85:52:33:56:8c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:05:13 2023 GMT
            Not After : Apr  6 03:10:13 2024 GMT
        Subject: CN=09FEE88FE949669CF333684885D4DB7E97E2A609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:07:8d:6b:f2:21:59:e3:29:e6:41:9d:3c:
                    1a:b0:d4:33:52:32:44:6e:9a:77:46:62:af:7b:eb:
                    20:51:b4:89:00:00:da:e8:41:1e:2b:02:7c:a8:90:
                    5a:6c:4d:c3:cc:d6:3a:73:61:6c:87:20:9b:f9:40:
                    42:82:bb:fe:53:b3:08:66:ed:5f:e2:19:88:91:79:
                    ce:4a:43:3c:30:8d:eb:2a:f8:1c:80:c1:c6:ac:23:
                    8f:9c:f1:17:86:ba:57:81:55:bb:3b:0b:e2:eb:b4:
                    3e:fa:91:2f:56:97:ac:ae:a1:b0:73:ad:41:8d:9d:
                    8c:b9:45:a8:af:5c:8a:72:5e:69:11:f8:15:93:0f:
                    1f:b9:b5:1d:e9:a3:2e:15:e1:1c:8a:6d:a9:c6:af:
                    ed:ac:1b:b0:b7:3d:5f:57:bd:0b:ea:f0:1c:78:79:
                    66:fe:4e:38:8b:0f:5d:5b:14:97:59:9c:7c:cd:8f:
                    8c:5c:ff:74:4b:67:d3:c9:c9:f9:cf:eb:c6:2a:3c:
                    17:ee:f6:6a:99:d9:ac:a7:aa:a6:ae:52:d7:56:31:
                    33:56:4a:06:0c:b8:c7:98:7f:a1:6a:2e:0e:93:fe:
                    c1:9c:05:36:af:88:5a:93:16:6c:5b:ff:1d:fe:b2:
                    71:ac:9f:ff:00:88:27:08:98:fa:1c:98:7e:eb:d5:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FE:E8:8F:E9:49:66:9C:F3:33:68:48:85:D4:DB:7E:97:E2:A6:09
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a3a2f33332d3333203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c4::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:c2:7d:d2:2a:57:ce:68:6a:0a:64:f7:20:83:f5:5b:b1:f2:
         84:ac:a2:a9:da:f9:e1:1a:19:b5:a8:a1:50:b5:4d:e3:77:b3:
         d1:6e:b8:83:68:f4:8d:a5:5d:88:13:2d:b7:63:e0:8d:31:56:
         80:a0:ee:49:bf:01:5f:a3:06:ce:cc:41:e0:3c:cb:f3:8b:ad:
         d9:bc:75:a7:33:a9:5f:74:fc:79:17:b4:12:4c:9b:18:0e:c1:
         ab:ee:99:20:ad:c7:96:da:84:92:df:5a:52:7d:b2:11:c9:20:
         a7:1e:e3:1e:c8:b8:ab:b0:76:22:2d:8d:8d:21:06:9a:41:f8:
         3b:e5:0f:99:cd:42:4e:19:34:78:d1:9a:51:19:37:3c:88:d9:
         d9:0d:aa:1b:3f:e7:1a:01:54:19:8f:fe:56:15:f2:01:09:f0:
         7a:8e:61:2d:a2:23:ea:47:80:ad:b6:b7:8a:5e:3f:8b:35:01:
         66:74:b5:53:95:11:d0:3b:83:c8:db:a8:3c:c2:15:74:a1:49:
         c2:74:72:96:5e:83:aa:e3:f0:e1:93:b6:88:c6:92:fc:24:cf:
         95:0e:44:e8:02:6d:f9:d7:16:f6:6d:ec:4b:1b:0a:49:06:fe:
         a5:9d:65:48:f0:a7:9e:f8:7e:3a:b5:37:26:48:56:f3:a9:c8:
         f5:00:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org