Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa
File:                     323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa (raw, json)
Hash identifier:          YI1ehW2EVb+xn+VvEjapTHULevXP2pGVsQ6bk5z8z+Q=
Subject key identifier:   DC:88:9B:46:B8:F0:63:E6:7B:37:BC:A4:EE:56:8B:6F:7B:1C:BF:49
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       06E1BEB99152ADF2D77365C75B0010AA8850ED07
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa
Signing time:             Sat 12 Aug 2023 03:14:23 +0000
ROA not before:           Sat 12 Aug 2023 03:09:23 +0000
ROA not after:            Sat 10 Aug 2024 03:14:23 +0000
asID:                     265377
IP address blocks:        2804:3324:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e1:be:b9:91:52:ad:f2:d7:73:65:c7:5b:00:10:aa:88:50:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Aug 12 03:09:23 2023 GMT
            Not After : Aug 10 03:14:23 2024 GMT
        Subject: CN=DC889B46B8F063E67B37BCA4EE568B6F7B1CBF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:1c:93:1b:a5:84:53:3a:a7:69:f5:ea:93:
                    59:13:80:4d:44:05:04:11:a7:5b:8a:8f:f3:74:c9:
                    d1:98:a2:0b:0b:e6:fb:76:24:f5:df:c6:e0:86:ed:
                    4c:ac:f7:f1:49:0b:c0:78:5a:dc:e9:60:c5:ca:93:
                    46:77:8f:8c:9b:26:e7:3a:cf:7f:9f:df:1a:e9:6f:
                    6e:64:22:d9:16:0d:b3:3b:34:6e:b4:a3:ce:66:dc:
                    c3:5f:6f:25:fd:81:aa:6d:b7:e7:28:06:0b:9a:ce:
                    29:65:f1:a3:e2:81:de:95:73:62:7e:6e:f4:02:58:
                    3a:18:15:a7:06:b3:cf:de:67:db:4e:da:70:21:ff:
                    d3:87:31:98:d8:b3:51:23:5c:ee:78:25:44:7c:6b:
                    fa:51:ee:5e:95:fb:87:d6:33:54:f7:8d:60:9d:10:
                    f1:82:09:c3:c9:10:29:e2:ea:59:28:71:46:7b:48:
                    f6:72:ab:03:04:83:15:0e:13:4a:89:08:e3:5d:81:
                    0e:87:9e:7e:90:27:05:34:eb:88:8f:63:7f:f3:64:
                    ad:ed:ed:ae:bf:0d:ab:c2:f2:a6:cb:e3:b6:5f:fd:
                    31:3f:cb:c4:a1:9e:7a:62:21:c8:13:5d:60:3d:0b:
                    ff:c3:27:83:fe:34:a7:f9:74:f7:a6:40:b3:d9:65:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:9B:46:B8:F0:63:E6:7B:37:BC:A4:EE:56:8B:6F:7B:1C:BF:49
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d4:d2:58:53:e4:46:91:28:80:23:d3:48:56:16:0a:31:e5:0a:
         a1:ec:7b:34:71:9e:6a:58:2c:22:58:c1:60:f1:87:a7:8e:7b:
         62:11:61:8f:ec:90:a4:3a:67:0b:cf:68:06:67:8d:53:f6:87:
         97:04:f0:62:4a:15:36:8c:e4:3d:a7:9a:93:a4:f9:1d:e9:ee:
         d9:ef:0a:bb:90:e1:46:14:d1:97:c5:b2:a7:7d:59:4e:9e:57:
         da:c9:10:e8:73:bc:b4:ed:24:a2:62:3a:51:1f:a6:a3:41:fc:
         84:e6:0c:cc:cb:2a:dd:9e:bc:ca:1e:98:bc:cb:ac:bb:5a:9b:
         f1:97:54:79:ba:2d:9f:0e:6e:21:86:f8:e3:4e:9d:cf:ac:07:
         92:10:19:04:0b:c3:f3:5e:d3:93:48:65:6f:7b:b9:aa:45:56:
         99:26:b7:be:5d:92:33:d6:ad:da:2f:06:7b:f9:e3:c5:45:e4:
         bd:d7:ec:46:4d:ef:e8:82:d4:b4:dc:80:78:65:e7:fc:c9:4c:
         c0:c3:b3:68:8f:05:11:0a:c1:eb:0f:fc:2a:a6:9e:f9:ac:8a:
         ec:c8:0f:65:20:b0:d3:12:85:a9:c7:7e:f2:53:66:86:8a:16:
         98:9c:cf:ae:73:08:24:54:46:aa:8e:50:3e:fe:49:bf:3a:76:
         e1:38:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org