Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          RfYbQc4YXjv4vJEqUUlMO4OcNx9zFS5Rey0BGxRPJt8=
Subject key identifier:   3A:22:DC:42:C8:98:4A:7E:3E:41:E4:96:D7:09:5E:FC:3B:E4:90:C6
Certificate issuer:       /CN=88C04555C130EFBD50B75032689878210EFAA940
Certificate serial:       4F8173C9B4871D37691298DC9CDB345409100460
Authority key identifier: 88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Mon 18 Dec 2023 18:48:29 +0000
ROA not before:           Mon 18 Dec 2023 18:43:29 +0000
ROA not after:            Mon 16 Dec 2024 18:48:29 +0000
asID:                     268308
IP address blocks:        2804:4f28:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:73:c9:b4:87:1d:37:69:12:98:dc:9c:db:34:54:09:10:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C04555C130EFBD50B75032689878210EFAA940
        Validity
            Not Before: Dec 18 18:43:29 2023 GMT
            Not After : Dec 16 18:48:29 2024 GMT
        Subject: CN=3A22DC42C8984A7E3E41E496D7095EFC3BE490C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:28:91:2f:b5:f1:ce:7d:f8:4c:e7:7b:1f:
                    70:75:69:ff:22:c7:ac:a2:d2:06:9d:fa:2b:05:37:
                    af:78:d9:21:91:a2:92:e2:28:97:fc:6b:19:61:f3:
                    2e:7b:de:cd:38:4d:e7:72:04:cf:f8:55:15:8d:cb:
                    fa:dd:21:50:89:76:1d:cc:20:92:dc:f9:6d:71:05:
                    b0:0d:7a:bc:61:1c:68:d4:f9:ca:7f:26:64:b0:92:
                    d6:b2:88:4a:03:e4:17:52:d8:8b:d6:76:29:93:3a:
                    5a:6f:77:23:3b:3f:69:c0:16:c8:4f:5f:11:f1:ea:
                    8a:ba:1b:d0:aa:d2:43:05:1e:fd:10:64:32:8f:41:
                    56:4d:8d:49:6f:36:1e:2d:fb:a3:fb:63:4b:b0:f1:
                    ae:37:ed:c8:10:51:f2:fe:9b:92:bd:a0:e1:53:ad:
                    47:24:e7:bc:0b:37:b5:42:88:69:65:8d:aa:e3:63:
                    c8:cb:2d:6f:1b:c3:3a:1d:e2:62:97:b7:a7:d1:c2:
                    b5:80:d4:6f:60:ec:0d:c2:3c:69:2f:4d:34:4a:4d:
                    c1:b1:5e:b4:00:d9:3f:ba:c5:8d:16:59:a3:67:b6:
                    e2:3f:0b:8b:64:16:21:16:44:1b:23:e0:36:4e:3a:
                    fd:3e:77:e0:f1:66:55:8b:b7:c5:fc:8f:33:78:a3:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:22:DC:42:C8:98:4A:7E:3E:41:E4:96:D7:09:5E:FC:3B:E4:90:C6
            X509v3 Authority Key Identifier:
                keyid:88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/88C04555C130EFBD50B75032689878210EFAA940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:ce:26:05:ee:b3:5e:52:31:5c:9c:5b:7a:d7:c1:35:5b:
         63:43:3a:de:d4:e6:99:38:a1:4c:49:5d:da:11:9f:cb:a4:8e:
         87:9c:d2:f0:4d:1f:13:52:90:f4:c9:22:b6:2e:84:29:9f:7d:
         18:18:38:e5:12:bf:36:12:26:a4:4e:2f:5e:17:c4:b8:37:50:
         9c:80:28:c7:c2:9c:f1:e0:54:bd:54:46:d0:aa:bf:0e:87:6f:
         1f:22:ba:43:10:4f:7a:5f:23:8f:3c:39:c0:f0:43:93:a8:37:
         4e:88:7e:e5:88:f8:01:47:75:73:cc:2e:82:c5:44:a4:d1:6b:
         14:03:b6:17:2c:a0:87:d4:07:f8:ce:f7:8d:13:33:ea:df:ca:
         fd:94:e9:c4:56:74:26:80:c0:87:3e:16:61:98:14:2f:f7:07:
         44:8f:76:c3:b6:1a:70:6e:31:d1:5a:23:e2:0b:52:b2:95:88:
         33:82:0e:b3:36:dc:44:8b:41:8f:b5:ff:1f:9d:bc:3f:31:1f:
         22:68:f4:3e:f1:2d:d6:0d:3a:27:fc:77:7f:22:43:ba:c1:ee:
         24:b2:83:35:e1:ae:e9:b4:f0:e1:41:0c:b9:69:8b:b0:77:e6:
         c7:a1:1d:33:3b:ff:0e:de:3e:15:e9:33:4b:25:2e:7d:f7:db:
         25:95:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org