Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33322d3332203d3e20323635323431.roa
File:                     323830343a326363303a3a2f33322d3332203d3e20323635323431.roa (raw, json)
Hash identifier:          1WiyavzYH5pw4Tb/S0QCT41szsZhh+PyjNJK67pnTHE=
Subject key identifier:   04:61:1F:84:1F:7E:19:8F:C0:E5:8D:B5:07:DE:72:E9:37:22:6F:AE
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       391AB3ABC3B67FE9542809CCD79B0E466131DD2E
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33322d3332203d3e20323635323431.roa
Signing time:             Thu 26 Oct 2023 16:45:45 +0000
ROA not before:           Thu 26 Oct 2023 16:40:45 +0000
ROA not after:            Thu 24 Oct 2024 16:45:45 +0000
asID:                     265241
IP address blocks:        2804:2cc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:b3:ab:c3:b6:7f:e9:54:28:09:cc:d7:9b:0e:46:61:31:dd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Oct 26 16:40:45 2023 GMT
            Not After : Oct 24 16:45:45 2024 GMT
        Subject: CN=04611F841F7E198FC0E58DB507DE72E937226FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:2c:b5:8c:e7:66:f5:93:be:5b:c8:2b:e0:
                    0d:b2:8e:48:85:66:a8:f8:6e:bb:76:19:2b:57:81:
                    17:fb:c5:36:7a:21:73:93:2a:d2:be:cc:b0:42:74:
                    3a:01:d2:61:38:4c:ed:5e:c6:ba:65:ce:75:5a:97:
                    45:4b:ed:ca:bd:bb:d1:df:a0:1a:e0:67:4d:bf:23:
                    e9:86:5d:9f:c5:ec:d3:97:19:7c:13:7d:a1:72:a2:
                    96:1d:f0:dc:4d:30:55:8e:c1:4e:44:63:da:51:ad:
                    eb:92:bf:8f:73:ce:3b:81:79:d1:d7:a2:ba:a9:6a:
                    de:68:77:c1:5a:49:18:6d:89:38:86:e8:8e:c7:aa:
                    85:b4:02:d7:9d:74:b8:89:d5:da:00:f2:05:58:46:
                    c7:1f:78:3b:10:89:91:2c:d6:0a:1b:1c:a7:4c:8d:
                    46:b9:2f:77:6f:4d:7b:d9:03:b2:bc:fb:13:74:ee:
                    16:47:cf:a0:e9:e6:87:6e:ea:fc:99:6d:45:83:c9:
                    a5:10:f3:b6:7a:0a:9f:2a:7f:cf:52:fa:c1:19:eb:
                    e6:55:91:71:3c:37:7c:12:79:97:6e:42:bc:28:a5:
                    ca:0d:f3:b3:7a:bc:86:08:31:f5:ba:13:fc:7a:c3:
                    41:79:24:0f:7e:20:ac:69:81:0b:16:06:1d:41:39:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:61:1F:84:1F:7E:19:8F:C0:E5:8D:B5:07:DE:72:E9:37:22:6F:AE
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33322d3332203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:1f:f1:4b:44:8c:bc:89:88:21:65:70:f6:2b:00:1e:7e:
         c6:92:07:31:d9:ec:03:16:a2:39:64:26:7f:fc:2b:4a:2a:50:
         74:9f:2f:e9:f5:28:b6:97:a6:6d:00:eb:06:78:1a:87:9e:7f:
         cf:09:00:45:ce:75:ed:64:5d:3e:02:99:90:a6:53:c7:3d:47:
         68:3d:dc:25:42:d3:f7:a3:8a:de:43:32:f3:db:44:77:53:00:
         39:0d:1a:17:8d:5a:8d:6e:9a:d2:b3:0f:1f:dd:61:09:23:2b:
         98:89:b4:6e:fa:cb:dc:14:07:ae:e3:49:8b:90:f3:aa:99:51:
         57:5a:7b:8c:e8:1d:8b:6e:73:49:57:7b:05:6a:17:b6:b8:a0:
         95:e0:71:f3:7d:5a:a9:23:e1:6f:26:ae:1e:df:d7:c8:8a:c0:
         24:04:4a:03:c3:a2:d3:80:c3:f3:1e:33:93:35:dc:dc:e4:f8:
         a2:18:3b:86:17:09:e3:97:04:64:5b:1b:ed:bf:ce:1e:bf:11:
         70:85:9e:21:4a:98:29:48:d6:9d:0b:07:6d:a6:60:30:a6:e2:
         09:21:2d:0a:01:3a:ab:1b:e7:e3:eb:7f:0d:b0:3c:0f:d9:5f:
         b8:13:6a:4b:ec:04:a5:02:21:4d:45:c1:ae:43:0e:d2:b1:e0:
         fc:27:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:48 2025 by rpki-client