Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a383030303a3a2f33332d3333203d3e20323634323933.roa
File:                     323830343a323561383a383030303a3a2f33332d3333203d3e20323634323933.roa (raw, json)
Hash identifier:          nUPYlTzJEH1xWFPGKCZCwAK3l47KiKWM03JeZCjYXCU=
Subject key identifier:   95:BA:CE:55:24:6B:90:3A:E3:8E:24:E5:72:5D:D1:46:91:05:B9:A8
Certificate issuer:       /CN=259481EEE5B47AA88639E34B0669E6971794C977
Certificate serial:       3178B7E865464DFAB718059E40EF398C6E7BA47F
Authority key identifier: 25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a383030303a3a2f33332d3333203d3e20323634323933.roa
Signing time:             Thu 18 Jan 2024 18:43:13 +0000
ROA not before:           Thu 18 Jan 2024 18:38:13 +0000
ROA not after:            Thu 16 Jan 2025 18:43:13 +0000
asID:                     264293
IP address blocks:        2804:25a8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:78:b7:e8:65:46:4d:fa:b7:18:05:9e:40:ef:39:8c:6e:7b:a4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259481EEE5B47AA88639E34B0669E6971794C977
        Validity
            Not Before: Jan 18 18:38:13 2024 GMT
            Not After : Jan 16 18:43:13 2025 GMT
        Subject: CN=95BACE55246B903AE38E24E5725DD1469105B9A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ce:c3:99:0a:52:ec:a6:0c:92:e8:e2:c0:c9:
                    d2:e2:77:0f:ba:44:09:ea:c3:2a:0a:4e:3a:82:dc:
                    e1:d9:63:30:6b:0f:fe:39:9c:8c:28:67:e6:7c:4d:
                    60:c2:f6:41:2d:1e:c2:bd:03:e7:97:66:81:41:8e:
                    ad:25:cc:c3:0d:8c:04:7d:a2:b2:4f:81:13:3e:9e:
                    c7:b6:c0:77:7a:4c:0a:7d:bb:aa:5b:f6:b6:04:cc:
                    22:a7:a8:63:bd:4f:f9:3b:b1:cc:ca:43:3a:38:80:
                    49:b0:bf:c0:61:fa:a3:af:52:c1:92:41:98:15:fa:
                    2b:1b:57:87:86:2d:f1:72:ea:8b:89:72:f8:0f:b1:
                    ce:a1:cd:11:08:6f:1d:b6:0c:77:ed:9e:26:5e:5c:
                    47:ff:47:df:63:e0:71:cb:0a:d1:09:1c:ff:e1:e5:
                    79:66:01:fe:73:42:30:8b:cb:2a:4a:00:25:2a:2a:
                    44:76:ab:6a:7f:66:67:e5:26:f5:1d:50:5f:3b:f1:
                    16:24:f5:76:5f:03:2a:db:0a:ff:2f:57:02:25:d0:
                    c7:85:84:ca:6b:c3:77:32:89:05:8e:b6:d3:64:e0:
                    10:5b:cb:a6:0d:62:ac:b5:a4:02:aa:2c:b2:f1:b3:
                    00:b6:a1:a7:de:d3:42:16:4c:d5:b1:cc:d8:1f:29:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BA:CE:55:24:6B:90:3A:E3:8E:24:E5:72:5D:D1:46:91:05:B9:A8
            X509v3 Authority Key Identifier:
                keyid:25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a383030303a3a2f33332d3333203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:15:13:95:57:0a:74:98:ec:1b:be:05:13:8e:45:d4:b9:
         8d:a0:01:96:94:36:2a:41:d7:e1:75:00:c8:89:31:5f:d3:7a:
         1b:64:ad:21:05:a9:22:db:8c:6e:6b:aa:ae:54:7c:0f:61:14:
         bc:f3:4a:7a:23:03:f5:33:0b:cd:c7:21:8b:25:ce:d6:44:2f:
         e6:05:4b:59:69:b9:c5:3f:df:2e:22:6c:da:b9:01:20:5b:5d:
         fa:a7:ef:3d:83:5c:c5:66:06:d5:b7:60:9f:e6:e0:62:c2:64:
         06:05:48:85:77:9c:3c:31:07:10:54:1d:36:bb:50:e6:6e:45:
         25:e5:60:cc:18:c9:44:6c:f3:48:15:b3:bf:2b:b2:e7:f1:51:
         fa:d4:be:53:d4:17:d7:ed:b5:e2:7f:d1:9f:27:6b:83:ee:ff:
         7a:62:54:bb:fc:ff:d9:83:03:d4:26:48:20:f9:8b:d3:99:4e:
         26:e9:1a:ea:d0:d9:19:2c:f1:9a:f2:e6:b5:c5:4c:5b:6e:ed:
         e0:ae:cb:d7:ad:f4:15:64:1b:51:e3:87:76:49:21:a5:35:9d:
         cf:8f:b1:78:4c:c7:28:af:a7:36:c7:a9:45:25:3d:6b:b9:f6:
         13:a2:02:1d:6e:63:d5:1f:f2:ab:a0:ba:95:d1:6e:8e:78:dc:
         22:d2:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:14 2025 by rpki-client