Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a3a2f33342d3334203d3e20323635333737.roa
File:                     323830343a333332343a3a2f33342d3334203d3e20323635333737.roa (raw, json)
Hash identifier:          UWiW2/eTQUbKM11FqaQ2YqbYtGVo2ZV/D3WPRFKY5mo=
Subject key identifier:   9B:2F:5D:36:9D:62:2B:10:27:63:C6:3E:0F:7E:5B:1A:0B:53:60:D9
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       3D96799DBB789D652F77E86407E54A1C931E4CAD
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a3a2f33342d3334203d3e20323635333737.roa
Signing time:             Sat 12 Aug 2023 03:15:12 +0000
ROA not before:           Sat 12 Aug 2023 03:10:12 +0000
ROA not after:            Sat 10 Aug 2024 03:15:12 +0000
asID:                     265377
IP address blocks:        2804:3324::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:96:79:9d:bb:78:9d:65:2f:77:e8:64:07:e5:4a:1c:93:1e:4c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Aug 12 03:10:12 2023 GMT
            Not After : Aug 10 03:15:12 2024 GMT
        Subject: CN=9B2F5D369D622B102763C63E0F7E5B1A0B5360D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:8b:a9:b2:7c:db:64:fc:5b:59:1f:91:91:
                    2b:72:6e:a6:63:be:fe:d3:e0:e2:2e:f4:1d:89:75:
                    01:6b:0c:54:c5:c5:a8:ba:d1:a6:c7:02:1e:77:cb:
                    54:22:60:75:0e:30:ef:17:5f:10:f6:e8:cf:fe:d1:
                    3e:0d:d8:0d:02:21:6b:a0:fd:a7:fc:d0:ab:2f:60:
                    a9:44:f4:5b:27:a3:52:76:04:b4:4c:bd:90:17:a2:
                    37:0d:38:f1:9f:31:5e:ea:4d:f2:fd:7c:ee:de:88:
                    ac:32:99:a4:89:b5:4c:e7:4f:78:2d:64:c4:16:09:
                    ed:94:bf:c1:cf:ff:38:17:24:69:de:eb:ad:51:27:
                    da:85:6f:52:3d:29:02:9f:a0:5f:b0:41:60:4b:57:
                    d7:79:8c:40:eb:e8:66:01:4d:ec:d0:da:d8:c5:a1:
                    3f:b5:fb:94:07:60:62:6b:43:2e:99:a2:ae:0f:41:
                    c9:ee:15:6d:5e:53:9e:bc:b9:12:cb:cb:61:3c:2a:
                    5f:ff:29:2f:a7:06:5e:ba:06:9d:75:39:99:6c:33:
                    3a:be:35:7f:59:82:fb:3b:e3:5b:15:10:fe:03:a9:
                    61:c2:09:ef:ac:3e:3a:2f:65:5e:c6:9b:dd:06:40:
                    76:d2:14:d4:47:e9:19:f5:d6:27:8a:72:5d:82:89:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:5D:36:9D:62:2B:10:27:63:C6:3E:0F:7E:5B:1A:0B:53:60:D9
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/323830343a333332343a3a2f33342d3334203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:3e:2b:02:90:58:1d:51:bf:95:b7:e9:ce:e5:07:1a:5e:
         45:fd:63:b4:8c:6a:f6:7a:c5:d5:c9:49:d6:93:0a:6e:5c:48:
         43:87:68:96:ec:22:a2:4a:1d:cb:9e:67:70:51:55:7a:c1:61:
         fd:50:f8:50:42:2e:55:b4:82:51:25:ff:a4:89:34:c0:3d:6f:
         77:19:9f:5b:9d:89:10:fd:69:93:91:d8:52:b1:d7:84:39:a2:
         01:af:4f:83:ec:3f:ad:4c:7e:f0:4d:88:39:78:55:93:42:84:
         45:82:bf:c9:57:5f:7b:84:98:3d:d3:61:7e:04:a5:ef:de:5d:
         6c:ca:3a:ff:ff:86:60:ea:07:65:14:85:0b:8a:5d:1d:89:08:
         e9:77:d8:e5:86:0d:84:22:db:54:dc:15:99:76:66:d5:37:3f:
         3f:5d:9d:86:80:f1:c3:c7:b5:8f:d5:f9:6d:04:94:ff:54:f9:
         1e:81:af:bb:9d:88:d6:e8:15:a5:a4:e1:0c:f2:ab:7e:ae:79:
         98:22:51:a9:b8:01:f5:bb:ee:6e:2d:85:5a:2b:0d:f6:e7:a9:
         db:97:8d:21:c9:40:c1:2d:39:74:ef:a0:33:41:66:70:0a:35:
         91:1a:84:6b:0f:12:b8:9f:8d:40:73:07:00:0e:05:6d:94:a9:
         c9:ce:2f:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPZZ5nbt4nWUvd+hkB+VKHJMeTK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRjE3QzY4N0E2MDgyQTU4N0U4NjcyQ0ZERjI5REFC
RTQ4NzU0ODAeFw0yMzA4MTIwMzEwMTJaFw0yNDA4MTAwMzE1MTJaMDMxMTAvBgNV
BAMTKDlCMkY1RDM2OUQ2MjJCMTAyNzYzQzYzRTBGN0U1QjFBMEI1MzYwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANYupsnzbZPxbWR+RkStybqZj
vv7T4OIu9B2JdQFrDFTFxai60abHAh53y1QiYHUOMO8XXxD26M/+0T4N2A0CIWug
/af80KsvYKlE9Fsno1J2BLRMvZAXojcNOPGfMV7qTfL9fO7eiKwymaSJtUznT3gt
ZMQWCe2Uv8HP/zgXJGne661RJ9qFb1I9KQKfoF+wQWBLV9d5jEDr6GYBTezQ2tjF
oT+1+5QHYGJrQy6Zoq4PQcnuFW1eU568uRLLy2E8Kl//KS+nBl66Bp11OZlsMzq+
NX9Zgvs741sVEP4DqWHCCe+sPjovZV7Gm90GQHbSFNRH6Rn11ieKcl2CiUiVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmy9dNp1iKxAnY8Y+D35bGgtTYNkwHwYDVR0j
BBgwFoAUJc8XxoemCCpYfoZyz98p2r5IdUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK
R1EvMC8yNUNGMTdDNjg3QTYwODJBNTg3RTg2NzJDRkRGMjlEQUJFNDg3NTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1Q0YxN0M2ODdBNjA4MkE1
ODdFODY3MkNGREYyOURBQkU0ODc1NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlN2JQWnFlYXI4VWtFcTNvZGY5U0VaU1l2YlE5dVA0NDRxaHM1cVpiSkdRLzAv
MzIzODMwMzQzYTMzMzMzMjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1
MzMzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQzJAAwDQYJKoZIhvcNAQELBQADggEBAFO2PisC
kFgdUb+Vt+nO5QcaXkX9Y7SMavZ6xdXJSdaTCm5cSEOHaJbsIqJKHcueZ3BRVXrB
Yf1Q+FBCLlW0glEl/6SJNMA9b3cZn1udiRD9aZOR2FKx14Q5ogGvT4PsP61MfvBN
iDl4VZNChEWCv8lXX3uEmD3TYX4Epe/eXWzKOv//hmDqB2UUhQuKXR2JCOl32OWG
DYQi21TcFZl2ZtU3Pz9dnYaA8cPHtY/V+W0ElP9U+R6Br7udiNboFaWk4Qzyq36u
eZgiUam4AfW77m4thVorDfbnqduXjSHJQMEtOXTvoDNBZnAKNZEahGsPErifjUBz
BwAOBW2UqcnOLx0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org