Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a383030303a3a2f33332d3333203d3e20323634333030.roa
File:                     323830343a323563303a383030303a3a2f33332d3333203d3e20323634333030.roa (raw, json)
Hash identifier:          wpA8f8ugxj/mokqi27LAwqfdmmAuXyYzpNWkKOWlxKE=
Subject key identifier:   A1:49:98:0B:8D:08:4E:00:AF:C0:54:39:E6:98:22:5D:26:09:6D:F9
Certificate issuer:       /CN=895610FCEC55587ED75C0DE6D234563F371B0004
Certificate serial:       7968BBFF128A0066654F172534A2952C2465A8EF
Authority key identifier: 89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a383030303a3a2f33332d3333203d3e20323634333030.roa
Signing time:             Tue 17 Jan 2023 04:12:23 +0000
ROA not before:           Tue 17 Jan 2023 04:07:23 +0000
ROA not after:            Tue 16 Jan 2024 04:12:23 +0000
asID:                     264300
IP address blocks:        2804:25c0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:bb:ff:12:8a:00:66:65:4f:17:25:34:a2:95:2c:24:65:a8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895610FCEC55587ED75C0DE6D234563F371B0004
        Validity
            Not Before: Jan 17 04:07:23 2023 GMT
            Not After : Jan 16 04:12:23 2024 GMT
        Subject: CN=A149980B8D084E00AFC05439E698225D26096DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:a6:01:42:aa:75:08:4a:5c:5d:2b:6d:81:
                    dc:b0:c8:a3:83:13:61:76:43:d5:ec:68:fe:97:3a:
                    1c:a2:b4:3e:25:d2:a4:15:aa:28:81:ad:06:0c:6e:
                    ba:96:b6:78:04:cf:7d:1a:4b:e2:e7:11:b3:0f:b0:
                    38:6c:0e:06:15:ce:19:6c:16:0b:99:03:a6:c9:70:
                    15:49:af:71:af:db:9b:79:39:b5:dd:42:76:9f:ec:
                    2c:aa:06:63:44:6a:10:29:81:1b:2d:ff:a4:c2:d0:
                    56:bb:bb:63:7a:e7:61:67:a2:0f:2b:4d:46:60:a2:
                    cc:8b:ec:45:2a:a1:74:36:b9:23:f4:1c:f2:91:8b:
                    c8:27:25:cf:62:8a:59:6c:c9:74:5a:fe:5b:a6:0c:
                    5a:ce:08:d9:52:e6:d5:3a:2f:ee:48:a7:0b:95:15:
                    f7:0a:72:9d:be:2d:13:c3:2e:a9:52:37:99:42:c0:
                    62:79:d2:43:ec:51:20:01:16:18:f3:fd:5a:62:25:
                    11:77:65:9d:75:70:b5:92:73:d8:2c:81:10:46:35:
                    f9:7e:58:51:9f:d2:8c:d6:7e:49:bf:6f:ad:8d:26:
                    5e:e9:30:5a:e5:ef:dc:bc:94:d9:72:1b:e4:74:02:
                    56:cc:71:ac:bc:50:c8:46:ce:9a:5c:bc:07:53:b1:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:49:98:0B:8D:08:4E:00:AF:C0:54:39:E6:98:22:5D:26:09:6D:F9
            X509v3 Authority Key Identifier:
                keyid:89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/895610FCEC55587ED75C0DE6D234563F371B0004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a383030303a3a2f33332d3333203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:a8:9f:43:73:72:f5:54:94:fa:b7:a6:ad:31:90:0c:f1:
         54:72:55:82:de:9f:87:95:15:3a:92:ec:d2:8c:51:83:bf:99:
         97:85:7a:5b:22:d9:f2:a8:c1:cd:14:f9:05:98:8b:b1:97:26:
         53:2c:0d:4f:9a:db:51:46:86:41:d4:f2:bf:61:6c:51:d9:f7:
         66:f1:a3:34:5c:92:31:2b:a4:ee:9e:48:ff:8c:6a:ca:77:e0:
         49:91:f5:93:12:84:e4:10:6a:07:5d:60:1d:7f:28:be:80:3a:
         3a:78:53:1a:59:75:fa:b6:5d:c6:25:53:7d:53:7b:20:27:3b:
         80:39:59:e1:6e:70:4a:59:87:28:1b:f2:2b:55:f8:24:3d:f7:
         95:d4:1e:a6:96:a0:0a:a7:d2:14:4f:e8:6a:25:99:34:d1:8e:
         db:0a:1f:62:0b:40:f7:17:96:5e:2f:51:70:dc:71:c3:29:5a:
         35:0c:d5:96:b2:a2:67:8b:56:8f:1d:13:72:34:d5:ab:2b:48:
         34:b6:b1:67:92:c0:70:fb:f4:1d:eb:e6:df:5e:c5:b0:d4:5a:
         2f:73:56:19:7d:c3:91:fa:82:5c:d4:2f:91:60:65:72:b8:94:
         b7:0c:f7:82:f0:3f:38:01:33:c6:e6:c1:ea:9d:7c:a4:35:a5:
         13:e7:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org