Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/323830343a356362633a3a2f33322d3438203d3e20323638393237.roa
File:                     323830343a356362633a3a2f33322d3438203d3e20323638393237.roa (raw, json)
Hash identifier:          Kc/FWbP1SH1Ojqkl7EZQNmv5H4QvD9Uknc/1HAz6lAg=
Subject key identifier:   34:2A:2F:68:17:49:5A:24:4E:F4:09:6B:B9:D4:D3:B5:11:09:24:1D
Certificate issuer:       /CN=259BE2B879640D2A44C3C8F6286B05A95CDD9EB3
Certificate serial:       0953A5A54C90AF3C644B4C5AC45F14FFDF9A6867
Authority key identifier: 25:9B:E2:B8:79:64:0D:2A:44:C3:C8:F6:28:6B:05:A9:5C:DD:9E:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/323830343a356362633a3a2f33322d3438203d3e20323638393237.roa
Signing time:             Fri 05 Apr 2024 14:25:32 +0000
ROA not before:           Fri 05 Apr 2024 14:20:32 +0000
ROA not after:            Fri 04 Apr 2025 14:25:32 +0000
asID:                     268927
IP address blocks:        2804:5cbc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:53:a5:a5:4c:90:af:3c:64:4b:4c:5a:c4:5f:14:ff:df:9a:68:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259BE2B879640D2A44C3C8F6286B05A95CDD9EB3
        Validity
            Not Before: Apr  5 14:20:32 2024 GMT
            Not After : Apr  4 14:25:32 2025 GMT
        Subject: CN=342A2F6817495A244EF4096BB9D4D3B51109241D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:53:e6:ad:a5:15:1c:9e:bf:cf:bb:bd:19:
                    83:e4:ac:bb:e9:ca:42:02:42:dc:15:46:fb:48:05:
                    ea:a2:55:6a:b5:ac:67:a7:26:dc:7a:88:9b:7e:d5:
                    dc:4d:67:a1:31:e2:bc:91:26:e5:c1:95:bf:bf:69:
                    b6:b6:21:d3:3b:2a:d1:10:3a:35:f2:c5:76:10:33:
                    bf:09:4e:3f:30:f5:13:2b:97:1a:15:8a:dd:d9:0c:
                    2e:db:93:de:ba:20:6d:1e:f5:fb:1f:c8:a7:78:92:
                    2d:67:bb:24:8d:9d:3e:01:18:ea:9e:59:0c:bb:4f:
                    36:8a:ff:90:78:93:aa:e4:f1:4f:3e:90:55:20:56:
                    69:2b:19:2c:bd:5e:3d:a7:57:fd:ab:5c:d7:06:c0:
                    ed:39:ab:9c:da:47:d1:42:25:2c:5e:f6:bc:36:1f:
                    1c:28:2c:bc:ec:76:6b:57:3d:a9:31:64:ad:f9:ed:
                    6c:5d:16:da:c6:45:9d:cb:e0:16:30:49:b4:2b:55:
                    99:f1:74:f6:57:b5:4f:dd:be:ea:36:bf:0c:52:0e:
                    f9:c1:38:9a:8c:cb:cf:c5:c5:f4:73:d4:5e:ec:42:
                    ef:31:37:5c:f4:1a:e1:0d:d6:66:a3:3d:a7:2c:03:
                    43:f5:e1:34:9c:5d:d9:ca:ce:90:21:ca:26:84:7d:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:2F:68:17:49:5A:24:4E:F4:09:6B:B9:D4:D3:B5:11:09:24:1D
            X509v3 Authority Key Identifier:
                keyid:25:9B:E2:B8:79:64:0D:2A:44:C3:C8:F6:28:6B:05:A9:5C:DD:9E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/323830343a356362633a3a2f33322d3438203d3e20323638393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:b4:bc:a4:1a:15:3d:0b:48:b6:0b:f4:d5:f1:d8:20:4c:05:
         0c:6b:64:35:a6:b8:da:fc:6d:77:67:43:d9:e6:35:65:27:f9:
         e5:8c:99:ad:14:e5:19:30:a2:7b:94:9e:8d:a2:ac:42:1a:fc:
         3d:04:76:71:df:9f:d8:6d:9f:8f:f4:4b:1a:b4:cd:db:18:73:
         31:da:c0:32:a1:9e:01:6d:cb:8a:02:bd:bc:89:35:21:04:2e:
         63:4c:1c:f1:e1:bb:5f:ce:ed:bb:4a:04:b5:07:94:b4:28:44:
         32:a9:fd:3a:3a:1b:0e:66:c0:9d:21:34:3c:9b:1c:60:e3:e0:
         72:02:84:78:1e:52:be:36:fb:e3:c6:8a:aa:c0:28:d4:91:78:
         4b:bf:81:ab:4a:aa:33:c9:b6:39:12:16:34:0d:c9:04:f4:43:
         53:1b:72:2c:01:d3:c4:69:e9:41:d0:4e:dd:c6:8c:22:0f:d6:
         2c:d7:4e:6d:3f:c0:b6:36:d9:21:f9:d3:87:78:68:bc:f4:6b:
         0e:01:53:95:44:b6:2c:85:05:25:53:a7:7d:7f:7e:6d:a5:c6:
         25:6a:77:1b:db:8d:bd:a3:c2:7d:92:a0:9f:09:12:d9:24:b2:
         ce:8f:bb:e0:c9:39:d3:4f:ef:1d:a3:a4:e0:e1:f0:f8:ba:73:
         80:5e:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org