Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (raw, json)
Hash identifier:          cIYGVIG4YpjTNc871LHWlelBmTlSQhp5VxpmiyYFXAI=
Subject key identifier:   CB:12:76:4A:59:88:16:79:75:EB:1D:82:C9:7E:49:48:0A:B1:7A:2D
Certificate issuer:       /CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
Certificate serial:       01DC0C6AD10359A932DAADF32CF031BEBF2DC01D
Authority key identifier: DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
Signing time:             Thu 14 Dec 2023 13:24:27 +0000
ROA not before:           Thu 14 Dec 2023 13:19:27 +0000
ROA not after:            Thu 12 Dec 2024 13:24:27 +0000
asID:                     269145
IP address blocks:        2804:6018::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dc:0c:6a:d1:03:59:a9:32:da:ad:f3:2c:f0:31:be:bf:2d:c0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
        Validity
            Not Before: Dec 14 13:19:27 2023 GMT
            Not After : Dec 12 13:24:27 2024 GMT
        Subject: CN=CB12764A5988167975EB1D82C97E49480AB17A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:49:ea:a8:bb:70:8f:d1:b6:d8:4d:ac:92:b0:
                    bf:23:b8:be:1b:9b:51:06:fd:71:df:51:73:42:99:
                    01:1a:a9:b3:da:b5:7f:ed:65:dc:1f:f6:bf:ca:b3:
                    ee:b6:3f:87:69:b9:ff:a3:27:1b:98:3f:cc:94:5d:
                    42:f1:7f:f0:3c:f9:df:11:c1:d5:0c:b8:3b:66:d0:
                    6c:5f:a9:17:07:af:6e:fe:ee:2b:3b:d0:d2:59:b5:
                    ba:73:b7:93:7f:66:75:05:e7:e0:8a:96:3b:70:27:
                    86:a1:24:8a:61:f7:16:37:54:1e:83:ab:02:72:0d:
                    65:5e:04:01:d8:46:48:e3:b8:ba:af:fe:cf:2a:c7:
                    a8:b4:4d:d0:08:5e:b1:d5:0c:b3:98:03:6f:55:3d:
                    12:ab:13:cb:94:0c:28:15:39:a9:03:6a:26:db:6f:
                    12:a8:35:2d:b2:fb:eb:35:dc:93:d4:c1:b9:51:31:
                    04:79:77:18:dd:90:97:c1:be:26:9c:c3:ae:a0:36:
                    c9:1a:53:86:9e:3b:04:94:7b:3d:ec:2c:a9:c5:9e:
                    f0:3e:9f:b0:5e:1a:4e:bb:bd:82:7a:6f:04:9d:f8:
                    d5:9d:7f:bd:e5:ec:8e:ff:c7:77:d0:92:49:31:e9:
                    b5:1f:6a:60:14:c3:87:ad:3a:c4:81:32:ce:71:65:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:12:76:4A:59:88:16:79:75:EB:1D:82:C9:7E:49:48:0A:B1:7A:2D
            X509v3 Authority Key Identifier:
                keyid:DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:47:fc:82:3e:99:ca:f7:dd:bc:1e:a2:8e:07:d0:94:65:b1:
         bb:d9:1c:cb:6e:b4:c9:e3:02:1e:94:ed:64:0e:98:6e:c5:90:
         6a:7c:82:62:95:d5:8f:13:49:d7:f8:3f:3e:8f:66:9c:6c:32:
         b7:ec:0a:1e:8f:39:6d:57:93:24:b8:ea:95:fe:ca:05:b0:d3:
         03:7b:4a:50:83:ec:0a:d7:9d:87:95:05:cc:05:e6:02:33:67:
         e2:83:9b:cf:96:75:fb:fb:79:a7:e8:7f:13:60:b3:d4:42:ef:
         64:5a:cc:65:27:fc:17:d9:2c:fa:aa:51:d8:ac:9c:e9:c0:da:
         d2:5a:7d:1c:30:b1:bc:ef:84:66:d6:6c:10:32:73:dc:af:93:
         66:53:8e:98:39:83:8c:d5:06:4b:52:71:d6:9a:48:a0:18:a4:
         f1:b7:42:17:d8:c0:ea:66:97:f3:b5:da:7c:e5:d6:9f:ac:e5:
         e2:ba:78:51:70:31:a1:1f:2d:ad:ef:06:f4:cc:d0:69:46:7c:
         dd:d4:44:a9:b3:c4:11:dd:c9:b9:7e:b9:e3:df:1b:86:63:90:
         fc:9b:8c:02:6b:6d:77:56:f5:73:12:0e:3b:47:d9:35:26:15:
         c2:8c:a0:1d:c8:03:cd:cf:5e:3c:ba:38:72:43:fd:5f:8b:05:
         db:54:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:07 2025 by rpki-client