Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          0Zug9FWh4lQ6ajBFL9526xpjwnj7dr8fUrXgEGIxo8E=
Subject key identifier:   CD:F2:C5:78:A0:4F:F1:BD:62:54:B2:8F:0E:E8:41:22:32:FA:AC:31
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       18DACB8478A054F5DC1DC81FC6F7D4880DEBF79B
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:03 +0000
ROA not before:           Tue 26 Sep 2023 14:55:03 +0000
ROA not after:            Tue 24 Sep 2024 15:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:cb:84:78:a0:54:f5:dc:1d:c8:1f:c6:f7:d4:88:0d:eb:f7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:03 2023 GMT
            Not After : Sep 24 15:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:10:dd:b3:d2:38:43:3c:97:9f:9b:1c:81:
                    1e:59:4e:12:aa:39:d0:1d:c0:db:55:39:63:15:b5:
                    a9:a6:0d:02:8f:72:d9:b8:7a:b5:5a:3e:92:42:05:
                    be:aa:55:6f:99:82:bc:e7:02:2b:4e:b1:8e:b6:8e:
                    d3:b2:93:a1:1c:3b:ca:32:de:cf:e1:ca:cc:85:d1:
                    84:0c:41:ce:4f:c1:08:0d:57:1f:66:7b:7d:80:42:
                    ba:65:a5:86:31:c5:af:0d:bb:3d:83:24:e6:db:bb:
                    e4:b8:b7:4a:04:af:98:e2:74:f0:3c:c6:e7:a2:98:
                    33:30:ca:b2:b0:1c:b9:9b:a8:64:4d:ec:26:b1:32:
                    7a:b6:fe:dd:ce:63:77:51:e0:d9:cf:73:9a:71:8b:
                    e4:05:a7:60:f4:21:c8:b4:53:58:66:67:13:40:87:
                    d2:26:a4:98:44:b1:43:49:57:79:bd:3f:33:5b:49:
                    bc:e1:8f:8d:b4:51:47:97:47:7f:56:7f:a2:dc:c9:
                    e6:4b:5f:aa:fe:08:3c:1d:cd:c7:9d:a1:df:ff:49:
                    52:9f:96:81:72:ba:46:67:89:af:11:43:c2:9b:a7:
                    6d:21:d3:02:5d:75:1f:18:e7:19:b4:32:33:1e:1e:
                    91:88:d5:58:29:ba:06:0a:5b:6f:cf:4a:51:56:b0:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F2:C5:78:A0:4F:F1:BD:62:54:B2:8F:0E:E8:41:22:32:FA:AC:31
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:c8:78:8a:54:04:ec:f8:5e:c0:13:b3:8a:29:91:f9:d2:
         dc:7a:9c:f6:f3:74:b7:b8:c0:33:dc:76:b8:23:57:87:78:e4:
         90:a2:c9:7a:1a:c1:33:80:a5:65:f0:2a:be:3d:af:d4:cf:7a:
         8f:3e:db:68:9e:1e:24:0a:34:51:c5:3f:41:ec:00:45:09:ab:
         7b:1a:1d:84:85:da:cf:06:17:d8:e5:64:9d:d2:56:77:18:38:
         e7:02:44:02:b6:c5:59:b9:38:39:e0:70:5c:b5:8c:a4:c0:0a:
         ad:2d:da:e8:cb:89:2f:41:10:c6:5d:d0:cc:4d:44:29:6b:ec:
         f2:c7:69:bd:c5:8e:0a:3b:ef:54:86:6c:27:a4:ad:49:ec:4e:
         9e:5b:b4:8c:1a:6a:39:43:31:65:e8:d4:82:35:ec:c0:16:bd:
         a6:f6:7e:48:bf:3d:01:02:08:73:58:56:32:de:79:75:17:ae:
         1f:7d:6f:b2:24:bc:b5:e6:9c:1f:a4:f2:93:d5:92:1b:d4:39:
         2a:87:f6:7b:e6:50:78:4d:52:4b:bc:35:61:fb:af:73:a9:4f:
         7d:38:bc:ec:4a:6a:1a:26:65:7b:3b:4a:83:7c:55:11:4a:26:
         29:78:af:a7:41:e8:c4:49:76:10:a3:ff:8f:41:f8:be:4e:ab:
         fc:14:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:37 2025 by rpki-client