Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a3a2f33322d3334203d3e20323636333934.roa
File:                     323830343a333732633a3a2f33322d3334203d3e20323636333934.roa (raw, json)
Hash identifier:          XYCaRRdoYKQpQLil7Ro39VUAO0fNRldDArywUBdAzFE=
Subject key identifier:   99:D9:62:21:75:61:FF:7F:2A:A7:44:B1:59:39:0D:58:DD:2B:81:6C
Certificate issuer:       /CN=FC08546012DBB8FBB52697DB7520556A0E251895
Certificate serial:       13BE5EE38B0F01A0E7C7BF319D9BB6D89339354D
Authority key identifier: FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a3a2f33322d3334203d3e20323636333934.roa
Signing time:             Thu 04 May 2023 17:50:05 +0000
ROA not before:           Thu 04 May 2023 17:45:05 +0000
ROA not after:            Thu 02 May 2024 17:50:05 +0000
asID:                     266394
IP address blocks:        2804:372c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:be:5e:e3:8b:0f:01:a0:e7:c7:bf:31:9d:9b:b6:d8:93:39:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC08546012DBB8FBB52697DB7520556A0E251895
        Validity
            Not Before: May  4 17:45:05 2023 GMT
            Not After : May  2 17:50:05 2024 GMT
        Subject: CN=99D962217561FF7F2AA744B159390D58DD2B816C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c0:9a:77:6b:bd:69:dd:52:ef:16:cd:f7:35:
                    eb:0a:51:23:7e:a1:0d:d6:b1:b7:11:17:f2:31:65:
                    7f:2f:97:04:d1:c5:4a:f0:80:d9:b5:40:13:e9:f6:
                    64:3e:d2:54:8e:3e:25:79:3e:3d:c1:ef:6c:d9:90:
                    8f:a1:86:e3:6b:a5:91:a7:a8:4a:55:1e:e5:63:06:
                    01:b5:c7:45:e6:6c:81:a1:d5:4c:48:1f:4b:58:93:
                    79:e8:ab:87:41:a6:6c:23:57:3a:d2:1b:ff:df:bb:
                    d3:de:63:60:bd:de:b5:df:21:a9:d4:f3:04:ef:2b:
                    86:37:82:a7:4a:57:2e:5e:82:e2:32:1f:d1:f7:b3:
                    17:79:04:7f:67:b7:fb:7b:20:c3:20:c5:ef:19:92:
                    a3:7b:38:2d:fb:ab:24:f3:bc:07:e7:81:79:a9:4a:
                    a5:b3:b4:bc:f3:e5:ae:5e:4c:4d:17:48:3f:48:67:
                    07:4f:5d:95:1c:3a:64:f2:d7:ef:00:fb:1e:17:36:
                    43:d6:1f:c9:13:6d:22:81:73:1d:6e:3a:19:f9:92:
                    96:3a:4e:77:45:f9:39:bd:ab:a8:fe:ac:4c:0d:6a:
                    f1:83:0d:ac:0d:be:fe:f4:e5:e7:9a:72:d7:d3:07:
                    2e:59:4e:ea:53:9e:18:2c:d0:38:3f:8b:e6:0d:f0:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:62:21:75:61:FF:7F:2A:A7:44:B1:59:39:0D:58:DD:2B:81:6C
            X509v3 Authority Key Identifier:
                keyid:FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/FC08546012DBB8FBB52697DB7520556A0E251895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a3a2f33322d3334203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:372c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:70:f3:8b:7b:d8:85:81:fd:45:20:21:9c:25:c9:5e:f4:a8:
         36:f2:01:e7:94:c2:8a:c0:87:1d:71:84:34:72:49:5d:b7:3b:
         2c:7d:2c:2a:0d:18:26:46:c1:6f:88:02:d3:5a:39:4d:c3:a6:
         d1:47:75:87:f8:c6:39:bc:14:b6:15:e3:05:58:b6:d0:21:d2:
         09:c3:57:8a:62:6d:f6:53:87:d1:18:d2:73:94:1c:bd:4e:e7:
         61:bc:cb:e9:23:e1:fd:d4:6c:cd:6d:12:b1:5e:23:d8:36:2e:
         54:d9:2b:9c:c0:e0:b9:0b:ad:48:5f:1d:32:d6:b7:64:21:69:
         38:d3:fa:a8:78:ec:9d:b0:a6:ba:58:d7:a7:be:17:38:fa:b9:
         11:92:77:04:81:38:4e:f1:4c:3f:8d:75:a4:e7:a6:d2:c0:6c:
         17:03:42:44:60:63:a2:43:aa:3d:20:44:60:5e:5f:62:62:d6:
         35:83:e0:e4:84:42:0b:47:d2:8e:62:d7:26:24:1d:10:d1:c8:
         76:56:88:33:10:c6:35:4f:f3:3a:f0:25:0e:09:24:a1:58:f9:
         9b:63:15:24:0c:f0:9f:04:d4:0b:e9:da:fb:28:8e:87:7b:72:
         ae:a1:c4:23:b9:af:2e:29:2a:b9:ce:7c:20:f4:fc:bc:fe:0f:
         bf:5a:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:08 2025 by rpki-client