Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33322d3332203d3e20323634323933.roa (raw, json)
Hash identifier:          CbR39gseZKCKZQ4GaxvuvdXVRbKnaJw/CwI+fU98DsI=
Subject key identifier:   60:A3:3C:A2:55:45:43:BD:A6:B0:FC:4C:BE:E9:F1:1A:4B:D1:81:D6
Certificate issuer:       /CN=259481EEE5B47AA88639E34B0669E6971794C977
Certificate serial:       4B4D863560368D901BDB530AE16A2E2D99960B1A
Authority key identifier: 25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa
Signing time:             Thu 18 Jan 2024 18:43:12 +0000
ROA not before:           Thu 18 Jan 2024 18:38:12 +0000
ROA not after:            Thu 16 Jan 2025 18:43:12 +0000
asID:                     264293
IP address blocks:        2804:25a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4d:86:35:60:36:8d:90:1b:db:53:0a:e1:6a:2e:2d:99:96:0b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259481EEE5B47AA88639E34B0669E6971794C977
        Validity
            Not Before: Jan 18 18:38:12 2024 GMT
            Not After : Jan 16 18:43:12 2025 GMT
        Subject: CN=60A33CA2554543BDA6B0FC4CBEE9F11A4BD181D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:dd:de:5f:35:0f:50:66:65:b1:ce:89:ec:
                    a3:bb:6e:32:48:0e:58:30:f5:f8:a6:53:c8:61:b1:
                    cb:c0:d6:82:9f:ae:4a:37:29:5a:98:a8:d2:e5:0a:
                    fa:89:82:34:20:61:bd:b7:44:aa:92:2e:75:25:58:
                    fb:2b:3b:27:43:f0:71:d2:5b:0c:76:03:7a:a5:3b:
                    06:46:e5:7a:6a:7c:89:f1:04:95:3a:21:2a:4b:0f:
                    18:a2:09:02:18:48:9d:fb:a8:93:3e:c4:f3:03:ee:
                    46:b9:b2:3d:03:67:8f:b0:a5:db:46:8c:b4:ba:32:
                    03:e2:32:07:a3:56:b0:f5:3c:4b:4b:bb:4d:0a:79:
                    3e:2b:5b:4f:2e:ed:eb:ae:55:2a:02:b2:8e:60:8a:
                    25:5c:b9:f7:8c:5f:9e:fa:24:9c:97:5f:b7:1d:d2:
                    af:61:6f:f5:ae:83:37:58:a2:af:e2:22:8b:1d:1f:
                    f0:cd:bf:75:99:2e:5f:ca:67:16:a8:42:b2:7f:a5:
                    fb:59:15:a8:22:e9:4a:29:7c:16:34:2d:73:34:73:
                    b2:e5:bf:2b:2b:4d:15:32:eb:05:1a:35:bd:47:57:
                    b6:97:8a:2f:c3:73:5a:32:30:1d:61:c8:1c:76:05:
                    cb:0a:fd:8d:19:26:b3:dc:a3:08:c3:2b:4a:1e:f1:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A3:3C:A2:55:45:43:BD:A6:B0:FC:4C:BE:E9:F1:1A:4B:D1:81:D6
            X509v3 Authority Key Identifier:
                keyid:25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:48:4e:e9:23:7d:5a:86:e1:a5:2e:84:e8:d8:bf:d8:6b:4d:
         63:d7:c9:ba:64:31:2f:0c:51:4c:10:35:5b:fd:76:72:63:e7:
         44:aa:de:26:69:fc:11:ac:9e:57:60:b8:2d:91:23:cf:de:33:
         13:e3:2d:42:19:32:dd:1d:60:fa:ba:b9:59:cc:f1:7a:46:3a:
         6a:bb:61:3a:2b:77:63:e8:72:53:9d:46:b4:fd:ac:45:b5:7c:
         32:5c:e8:74:aa:1a:9c:60:90:12:78:20:24:a7:37:42:3b:a1:
         75:94:f6:68:8f:8c:08:08:ea:39:6b:90:7f:41:5a:bf:74:e4:
         3e:36:fd:cd:25:ce:bf:6d:91:c7:ac:33:9c:ce:e5:11:b7:18:
         79:01:41:88:be:d8:a0:80:59:51:72:bb:36:30:5b:78:c1:32:
         fb:69:1c:9f:82:30:46:c9:82:f1:9b:58:19:40:22:69:00:a7:
         ae:cd:7b:f9:96:0b:51:82:95:f1:74:e8:bb:2d:a5:ec:43:7d:
         13:b6:7b:05:61:8d:c4:95:37:a6:fd:13:81:9b:f5:dd:95:68:
         5c:0f:41:a7:42:40:24:6e:fc:09:09:f2:bf:be:8c:d1:ca:17:
         32:d4:27:f6:49:15:7e:f3:1a:43:ae:d7:9d:a4:a6:6a:8a:60:
         bf:a7:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org