Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa
File:                     323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa (raw, json)
Hash identifier:          TETdb0fi0PARRqjR4Rg2LEBaFZ8R2m8erEhlWHkW8Ho=
Subject key identifier:   5E:93:7C:BB:EF:5F:AB:B1:0D:05:B4:20:89:54:DB:4F:0E:66:84:21
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       5EBDBADAC8044A8E650C272867774283246F1A10
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:15 +0000
ROA not before:           Mon 08 Apr 2024 20:00:15 +0000
ROA not after:            Mon 07 Apr 2025 20:05:15 +0000
asID:                     28220
IP address blocks:        2804:54:1d00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:ba:da:c8:04:4a:8e:65:0c:27:28:67:77:42:83:24:6f:1a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:15 2024 GMT
            Not After : Apr  7 20:05:15 2025 GMT
        Subject: CN=5E937CBBEF5FABB10D05B4208954DB4F0E668421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:3b:6a:41:c1:6d:db:3c:ac:08:dd:51:c1:
                    97:25:f7:25:71:9c:8d:3c:b9:89:76:d1:a5:e5:4b:
                    4f:66:06:d8:43:54:6d:dd:58:6e:3c:1a:03:15:94:
                    19:7c:9c:fc:2b:24:b9:ad:37:be:03:d0:cb:39:b3:
                    9c:ef:26:5e:6d:5a:36:83:12:b7:d4:e0:ba:a9:09:
                    2d:92:2b:96:76:a7:d5:db:8f:58:f3:f4:be:2a:60:
                    de:71:28:6c:b8:fb:a5:0c:c7:8c:df:d9:44:a4:84:
                    03:49:f8:90:b2:2f:c5:18:da:43:87:1a:7f:e1:8e:
                    5d:7c:16:9f:5f:1f:14:cd:e9:8f:cd:9e:83:42:6b:
                    32:f7:bb:0a:b3:0b:96:a6:7c:4d:ca:4c:7e:ad:f7:
                    79:10:7f:2a:5a:cb:29:1f:5c:5d:70:08:6b:51:08:
                    65:6b:23:a0:b3:e8:da:f3:ec:a6:37:32:dc:ad:6e:
                    b4:22:24:30:72:4f:d1:d5:bb:bf:82:64:ad:3c:2f:
                    b7:21:b8:40:2a:65:dd:97:c0:b6:5b:da:a4:32:fe:
                    af:9c:12:c6:d8:d1:ac:7a:ae:5c:d3:99:f8:55:dd:
                    42:73:5f:a6:42:2f:5c:5d:8e:16:fe:ee:53:e1:62:
                    b6:a4:80:18:67:15:06:2c:5b:10:9f:3f:4e:0e:a3:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:93:7C:BB:EF:5F:AB:B1:0D:05:B4:20:89:54:DB:4F:0E:66:84:21
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:b5:7a:7b:f4:75:41:73:16:d8:13:4e:8c:3e:be:12:06:
         ef:dc:a7:d0:1f:d7:13:a4:cb:10:1f:9e:34:0d:2d:d3:6f:86:
         d7:5e:c8:53:5f:bb:0d:01:e1:26:4d:28:2e:c6:9e:e5:3a:84:
         84:4b:ec:e0:b7:0b:4f:91:2a:c6:80:b7:c5:c9:7e:49:a3:27:
         ec:3c:35:19:c4:7e:b5:46:db:0f:3c:ad:f7:7f:e6:e0:58:a4:
         38:78:10:ec:3a:0f:1c:8c:0f:a8:2f:39:61:fb:74:f0:19:8d:
         4e:88:41:cd:f3:27:a3:72:26:ef:b2:8b:93:2f:4d:32:ee:01:
         0e:c6:0c:d5:82:de:34:cc:0c:7c:e6:9f:3c:6d:3c:66:6e:00:
         d5:9d:97:9c:8f:33:c6:37:69:0b:47:08:5e:4c:fa:8e:35:8a:
         b6:bc:0a:5c:a8:4a:fe:74:9c:38:b9:4d:c9:49:bd:7f:77:fb:
         f0:38:ba:93:d6:81:f6:35:ca:4f:94:62:74:5a:4c:ba:c0:cf:
         51:aa:4f:d3:37:4d:2d:ce:cc:6d:c4:7f:67:68:8b:1a:92:cb:
         c8:90:33:f3:36:f4:4a:1c:4c:3c:17:7d:86:34:7b:fa:91:8d:
         09:4f:9a:04:1e:56:f3:d3:c2:2f:a5:40:5b:0d:c0:b3:2e:a0:
         02:01:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:16 2025 by rpki-client