Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33332d3333203d3e20323634323933.roa (raw, json)
Hash identifier:          QGnfIg5D+RqzM99oh573ZRVRejxXn8H7wQih/eM+zKI=
Subject key identifier:   4D:A9:5E:A7:B6:02:CD:C8:44:00:BA:2A:1D:8C:1A:33:EC:D2:8F:5D
Certificate issuer:       /CN=259481EEE5B47AA88639E34B0669E6971794C977
Certificate serial:       1A4F3E79AF4362F14C4BE0174A90179A3FB965DB
Authority key identifier: 25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
Signing time:             Thu 18 Jan 2024 18:43:12 +0000
ROA not before:           Thu 18 Jan 2024 18:38:12 +0000
ROA not after:            Thu 16 Jan 2025 18:43:12 +0000
asID:                     264293
IP address blocks:        2804:25a8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4f:3e:79:af:43:62:f1:4c:4b:e0:17:4a:90:17:9a:3f:b9:65:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259481EEE5B47AA88639E34B0669E6971794C977
        Validity
            Not Before: Jan 18 18:38:12 2024 GMT
            Not After : Jan 16 18:43:12 2025 GMT
        Subject: CN=4DA95EA7B602CDC84400BA2A1D8C1A33ECD28F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:d6:1a:d9:56:fc:2e:98:ac:36:99:6f:d9:
                    4e:15:b9:ee:06:81:6c:f3:38:ff:26:0b:15:f9:21:
                    02:45:76:a5:99:c2:d4:e4:2a:18:7e:2a:1c:e5:40:
                    b0:1e:bc:13:cc:3f:be:f0:4c:ea:9a:ae:cd:c0:9d:
                    6c:ce:6b:1b:f4:51:96:90:5d:9e:4b:cc:df:74:c9:
                    a9:70:ae:f0:52:f2:18:44:40:f1:4b:57:b0:df:78:
                    58:80:ab:e8:24:0d:ff:f3:4e:02:27:27:1d:0f:fd:
                    a5:e7:10:37:c2:2c:f9:51:5e:64:05:d6:b1:af:19:
                    2b:a6:6c:86:00:3d:41:bd:05:24:38:4d:ed:50:13:
                    6d:da:9b:3d:98:fa:bc:bb:25:3d:4d:20:ba:49:1b:
                    5d:22:f1:d6:f0:52:93:ab:73:ab:b7:eb:cc:5e:c5:
                    70:87:a5:cb:2b:9a:f8:78:0e:cf:fd:4f:63:b6:6a:
                    0f:a9:ee:07:6d:25:53:16:a1:d8:d5:a1:1d:99:36:
                    8c:5d:18:33:81:aa:47:13:16:eb:34:96:22:57:56:
                    ec:87:b4:5a:70:dd:2d:3a:3f:e6:b3:2e:04:c9:03:
                    18:db:fd:d2:df:51:45:3f:35:fc:ad:fc:36:4f:6f:
                    78:b1:c8:c2:c3:dc:60:35:78:75:45:b8:80:f4:b4:
                    2d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A9:5E:A7:B6:02:CD:C8:44:00:BA:2A:1D:8C:1A:33:EC:D2:8F:5D
            X509v3 Authority Key Identifier:
                keyid:25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:8d:b0:e4:af:80:71:e3:d0:4d:e4:bb:54:f8:ce:dd:23:04:
         13:59:92:7b:95:e4:4f:64:ed:9e:98:8f:eb:bd:75:30:bb:73:
         74:66:ac:62:22:d4:f1:4c:a5:be:31:d3:27:5a:74:88:65:0e:
         5f:d1:17:73:5f:1c:18:b2:6d:03:97:b1:74:6d:ba:5e:39:7f:
         0b:29:0d:69:0a:cb:80:75:26:61:57:ee:f8:70:66:b6:c7:4c:
         63:a5:f1:41:43:28:81:ef:1f:e2:06:88:3e:45:e3:f2:28:7f:
         06:b3:40:4b:44:a4:ed:b2:3c:77:1b:b1:d8:b4:0b:c4:da:0e:
         57:3c:c5:1e:1c:a7:19:3d:0b:18:7c:21:1e:96:9a:74:65:92:
         6b:0d:80:bd:e6:01:7f:7d:e5:c8:b2:d0:72:9b:c5:04:35:bb:
         d8:98:b3:db:8d:d3:d0:ca:b4:09:0e:c9:b1:82:e8:d0:4d:27:
         eb:26:23:76:a6:57:6f:1c:42:ea:08:b4:2c:47:56:77:98:90:
         0c:a4:b6:0b:18:3f:e5:15:a6:ac:87:c7:bc:43:d2:75:ee:28:
         02:2d:c7:2f:0e:ab:12:3a:a0:51:79:26:41:ac:0c:e0:85:c8:
         07:b2:68:8f:f6:c3:11:8e:2e:76:d9:eb:2a:ae:e3:95:90:4f:
         f7:70:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org