Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/323830343a363938303a3a2f33322d313238203d3e20323730323734.roa
File:                     323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (raw, json)
Hash identifier:          bbF8XH+9gVZuiW0by3zS6ao2l2leaoImXXU1T+U7mBQ=
Subject key identifier:   AF:DC:7E:3F:2D:71:7E:24:88:19:3E:E9:B1:77:C7:88:05:79:E6:09
Certificate issuer:       /CN=065ADA94D67EED97081F82FDB7CFA4CFECF95B19
Certificate serial:       21A2BD46D9F20466C85BE1CAE64DD84B95CC5B11
Authority key identifier: 06:5A:DA:94:D6:7E:ED:97:08:1F:82:FD:B7:CF:A4:CF:EC:F9:5B:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065ADA94D67EED97081F82FDB7CFA4CFECF95B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/323830343a363938303a3a2f33322d313238203d3e20323730323734.roa
Signing time:             Thu 07 Nov 2024 13:14:33 +0000
ROA not before:           Thu 07 Nov 2024 13:09:33 +0000
ROA not after:            Thu 06 Nov 2025 13:14:33 +0000
asID:                     270274
IP address blocks:        2804:6980::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a2:bd:46:d9:f2:04:66:c8:5b:e1:ca:e6:4d:d8:4b:95:cc:5b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065ADA94D67EED97081F82FDB7CFA4CFECF95B19
        Validity
            Not Before: Nov  7 13:09:33 2024 GMT
            Not After : Nov  6 13:14:33 2025 GMT
        Subject: CN=AFDC7E3F2D717E2488193EE9B177C7880579E609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:b8:e8:ad:6b:99:86:f8:03:05:69:74:f6:
                    eb:13:1c:d5:64:2b:f6:ce:2e:a1:6a:cf:73:8f:03:
                    6b:eb:12:20:b3:36:23:b8:30:02:45:31:e1:8a:2c:
                    a8:1b:f0:b4:7a:33:f1:22:da:ac:d3:79:54:fb:12:
                    22:a2:e2:18:78:94:85:75:83:0f:65:41:94:50:0e:
                    1c:85:8e:74:3f:68:ce:30:47:21:69:89:9b:15:96:
                    5b:e9:f7:0f:a3:0f:d9:c6:88:36:d5:b9:10:89:ff:
                    c1:5b:c7:d8:aa:45:64:31:99:00:33:ff:14:95:8e:
                    f6:89:87:0e:4e:1c:c0:e0:7d:bd:15:a1:08:5f:e1:
                    4f:d6:58:38:01:1d:71:49:a6:fd:21:0f:21:31:64:
                    3e:8a:8e:c4:8c:f1:51:26:99:16:28:40:25:ab:97:
                    f9:4e:a4:52:9c:5e:a3:05:cc:3b:42:90:06:b8:57:
                    61:e9:fc:ac:16:e4:35:78:97:7c:fa:8e:2c:66:e8:
                    c3:21:9b:38:a7:d3:c3:bd:7b:22:0a:75:be:bd:4f:
                    e8:af:a0:f8:f5:bf:fb:c6:de:eb:91:7c:16:dc:a9:
                    28:bf:d1:d1:25:21:f1:c4:cb:d1:52:5b:a3:c0:28:
                    11:ec:2e:51:c9:da:60:db:e7:b8:14:20:59:b8:18:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:7E:3F:2D:71:7E:24:88:19:3E:E9:B1:77:C7:88:05:79:E6:09
            X509v3 Authority Key Identifier:
                keyid:06:5A:DA:94:D6:7E:ED:97:08:1F:82:FD:B7:CF:A4:CF:EC:F9:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/065ADA94D67EED97081F82FDB7CFA4CFECF95B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065ADA94D67EED97081F82FDB7CFA4CFECF95B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/323830343a363938303a3a2f33322d313238203d3e20323730323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6980::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:b0:f9:75:30:39:e2:86:11:5d:fd:75:94:a4:63:3e:e0:
         78:ce:53:a8:00:98:7c:ac:8c:91:32:5a:81:cc:06:7a:0f:96:
         57:d8:20:f2:b1:2b:86:e3:21:94:96:14:e2:bd:70:7c:67:c5:
         e5:c1:33:4c:98:e0:e0:11:7a:cc:ca:9e:8c:27:14:f0:32:14:
         b9:d5:6f:6d:69:7a:99:89:5b:e5:ba:1b:5b:27:7a:c0:e2:60:
         0f:54:c9:51:58:36:ff:2b:74:37:28:1d:79:43:cb:34:6c:13:
         0c:fe:13:ce:af:6a:1e:08:46:c2:8d:60:e3:44:11:af:30:36:
         5b:b3:7a:8b:e5:16:c1:52:ba:8a:fa:77:52:4e:e8:12:7d:42:
         76:35:4e:6a:44:8d:09:a0:7f:7d:ef:6a:ed:fe:31:49:93:3f:
         8b:26:22:6f:b1:34:7c:4e:e2:1d:b0:1c:8d:0e:05:8f:56:87:
         cd:6e:a2:6f:12:72:b8:c5:c1:53:3b:06:77:f4:74:07:4a:0c:
         f8:14:ab:f4:5c:30:b1:fc:a9:bf:45:e5:27:29:94:a1:4b:d5:
         bc:51:8b:ed:8d:a8:01:bd:7f:b2:77:72:59:07:83:f6:e6:00:
         30:df:0d:96:6a:97:79:60:d6:b0:00:6b:31:fe:52:86:a3:86:
         58:3d:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:41 2025 by rpki-client