Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa
File:                     323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa (raw, json)
Hash identifier:          mkncs+w661oo4oeF7eT0kd5Wq+6RKho0aDG9Vag6d54=
Subject key identifier:   C9:92:58:C3:9D:53:8B:77:3C:06:52:76:37:B7:C0:BE:6C:92:67:20
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       2A1D1753F6A14322147427C288A352EA59516C0E
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa
Signing time:             Sat 12 Aug 2023 03:14:54 +0000
ROA not before:           Sat 12 Aug 2023 03:09:54 +0000
ROA not after:            Sat 10 Aug 2024 03:14:54 +0000
asID:                     265377
IP address blocks:        2804:3324:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:17:53:f6:a1:43:22:14:74:27:c2:88:a3:52:ea:59:51:6c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Aug 12 03:09:54 2023 GMT
            Not After : Aug 10 03:14:54 2024 GMT
        Subject: CN=C99258C39D538B773C06527637B7C0BE6C926720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:69:07:9d:06:ea:09:b2:f9:be:73:48:4e:
                    f7:5a:00:31:f9:61:9d:13:82:93:dc:ad:b4:7a:54:
                    65:bb:b2:1e:8d:27:5a:81:16:8f:d9:a6:c8:a4:08:
                    d5:68:c4:b4:6a:51:d1:32:9c:5e:52:b6:8c:ff:69:
                    90:8b:e3:2e:33:38:f8:85:84:4e:5c:5a:de:b3:7b:
                    91:38:22:6b:c1:a3:2d:af:8a:47:70:92:d4:3f:ce:
                    8b:a4:63:72:f1:14:bb:59:05:82:83:8f:e8:e9:a6:
                    9c:bb:fb:4e:44:c3:0e:ae:f7:03:f8:fb:c4:6a:be:
                    6f:cd:b4:88:f4:27:fc:19:c8:4f:7c:b9:bf:05:67:
                    b3:23:d4:0c:1d:db:c7:4f:ca:dc:d6:6c:2c:ab:b0:
                    fe:ae:b4:6c:18:45:80:c6:f6:dd:34:1f:ab:20:2e:
                    c6:65:ce:38:a1:e1:54:59:af:4b:0c:8a:c2:3e:55:
                    1e:49:05:7f:79:ad:56:bd:ac:17:9c:2f:a8:cc:91:
                    e5:13:07:9d:75:e5:ca:0f:93:a8:a2:e8:8d:6b:56:
                    ab:a6:b5:a7:38:84:81:8b:1b:93:92:1f:c1:f7:92:
                    7a:46:f4:55:c4:ab:1e:22:57:b1:44:8d:06:8a:09:
                    82:32:fa:52:8e:5b:08:8f:53:48:01:7c:85:f6:c8:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:92:58:C3:9D:53:8B:77:3C:06:52:76:37:B7:C0:BE:6C:92:67:20
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c2:d1:0d:b2:73:43:6b:0e:dd:a0:38:bf:b9:52:89:ba:3f:ce:
         02:e9:71:d4:1e:b1:1b:90:ea:11:69:9e:33:a9:03:2a:e0:7c:
         31:37:64:c0:16:fe:36:51:06:bb:68:5f:cb:bc:d3:43:98:c7:
         ec:a0:6a:c9:26:09:f6:2f:2f:c3:66:e6:12:63:91:ad:34:9f:
         9c:88:b9:de:fd:90:dd:80:d0:7b:e3:e8:ff:3d:53:67:10:21:
         d2:5e:c7:93:1a:d7:cc:cf:ec:19:f9:dc:61:57:28:d2:a0:17:
         01:fa:bd:1e:c7:44:0f:97:6b:eb:86:d2:86:e6:31:c9:6d:67:
         ec:5b:f5:b9:5c:5a:af:9e:5d:c6:f7:ce:60:4b:19:00:ea:cb:
         23:f1:14:ef:92:2e:b9:26:fd:5d:09:36:3d:51:a2:96:45:fc:
         03:2a:74:74:61:6b:5d:31:d7:02:bc:a9:3d:05:bf:e2:09:9d:
         68:df:c1:36:ef:87:6b:c2:16:f8:30:ff:1b:13:3f:4f:38:8d:
         a0:96:e8:62:95:ce:d2:98:4f:79:25:00:15:58:54:03:31:c0:
         84:07:6f:2b:c9:17:91:20:2c:1c:b0:be:8c:72:24:e4:e6:5c:
         43:83:10:33:91:ac:c5:20:b1:d8:1a:88:ce:65:da:25:92:8f:
         34:52:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org