Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d313238203d3e203631363936.roa
File:                     323830343a316165303a3a2f33322d313238203d3e203631363936.roa (raw, json)
Hash identifier:          Ydj3mhZL5kzp73V8IYFgn+JM/vXRf0z9sqcnCedYuh8=
Subject key identifier:   77:04:33:7A:04:43:4B:E4:16:DC:4A:D4:68:1D:82:A7:CD:91:45:1A
Certificate issuer:       /CN=5FF71CDDAB4B88F6163D96DC07EF1E5799133F07
Certificate serial:       3C9C19E26444BA1A1C83C85D823AC2BAF9B41F48
Authority key identifier: 5F:F7:1C:DD:AB:4B:88:F6:16:3D:96:DC:07:EF:1E:57:99:13:3F:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d313238203d3e203631363936.roa
Signing time:             Thu 15 Feb 2024 04:50:23 +0000
ROA not before:           Thu 15 Feb 2024 04:45:23 +0000
ROA not after:            Thu 13 Feb 2025 04:50:23 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9c:19:e2:64:44:ba:1a:1c:83:c8:5d:82:3a:c2:ba:f9:b4:1f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF71CDDAB4B88F6163D96DC07EF1E5799133F07
        Validity
            Not Before: Feb 15 04:45:23 2024 GMT
            Not After : Feb 13 04:50:23 2025 GMT
        Subject: CN=7704337A04434BE416DC4AD4681D82A7CD91451A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:46:a0:d2:aa:83:3a:ff:03:97:e3:7e:9a:
                    b9:b0:4a:84:a9:ad:7d:ce:d5:cf:df:fe:2c:c1:e2:
                    1f:95:cf:44:f3:b8:1a:74:73:c5:5f:57:05:4f:bd:
                    f0:cd:0d:74:e4:26:a7:0c:76:dd:89:d5:af:26:67:
                    21:f2:ba:86:c2:b7:11:7b:36:2c:c4:27:5d:9c:4d:
                    d6:ba:31:90:c2:fa:fc:ab:a0:24:42:5d:2f:35:a4:
                    25:19:7d:2e:be:8a:55:b8:ce:20:5b:8f:c4:c1:85:
                    ac:28:d3:d8:97:8b:f6:3b:72:d5:18:09:c2:cc:f3:
                    b2:3d:3a:2c:9c:49:71:ad:3e:0e:52:58:d7:ff:25:
                    3b:d1:91:db:49:56:ab:80:dc:b1:7e:dc:99:eb:50:
                    0f:05:54:c6:25:89:7c:c8:c4:56:f9:77:35:0e:d3:
                    75:10:fa:dd:d0:46:1d:5e:ae:7e:8c:f1:c4:e3:18:
                    a3:2c:be:ae:17:b9:0c:4c:2f:a9:90:33:85:52:82:
                    cc:0b:a5:b6:2a:6e:2d:63:40:2b:f0:39:12:37:5c:
                    98:9a:ae:6f:c2:12:ff:70:40:7c:dd:9b:83:f7:a8:
                    dc:2a:a4:5d:d5:5c:b2:fb:07:7e:e9:5b:34:2d:60:
                    eb:ba:aa:dc:db:e7:06:35:de:1f:98:6d:7c:57:f3:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:33:7A:04:43:4B:E4:16:DC:4A:D4:68:1D:82:A7:CD:91:45:1A
            X509v3 Authority Key Identifier:
                keyid:5F:F7:1C:DD:AB:4B:88:F6:16:3D:96:DC:07:EF:1E:57:99:13:3F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d313238203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:9e:36:7d:b9:ef:1f:74:a5:5f:09:e6:02:d8:dc:dd:05:44:
         03:9d:18:bd:3c:c0:d7:57:18:77:a9:0d:c7:4a:11:4d:00:6e:
         70:e2:67:e0:32:e5:c0:5d:d3:63:36:71:e7:a7:d2:4f:d5:24:
         9d:a6:3f:1e:c2:42:eb:f6:d7:11:55:eb:0e:83:3f:1a:e3:8f:
         a5:15:77:19:17:f0:24:1e:21:ca:c2:c1:44:e8:60:cc:8f:5d:
         6b:d1:fe:15:31:0c:b8:4e:63:9b:12:ad:a8:90:a6:34:7e:0f:
         6e:7a:19:a4:98:14:27:04:96:94:96:c4:24:b5:82:f3:d3:84:
         a4:2c:56:99:28:e4:86:3c:75:3f:ab:00:52:59:d7:a5:10:79:
         b1:9a:52:3e:e6:c9:63:77:40:9b:49:2e:65:95:8f:be:e3:af:
         66:6e:eb:63:a1:55:f1:53:39:f7:66:af:46:2f:d8:17:e4:45:
         f8:13:b7:2e:01:2a:56:50:1d:c6:40:fc:92:2d:23:4f:ce:9b:
         06:fa:54:cd:dc:39:38:64:77:7e:b9:c6:d0:3c:77:6d:85:fe:
         92:39:bd:03:e0:90:4f:5c:a7:2a:c2:5c:4b:d5:ff:d6:3f:e4:
         57:22:2d:62:24:20:72:86:71:ff:aa:c1:99:6a:83:33:1e:8f:
         8c:b2:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:22 2025 by rpki-client