Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
File:                     323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa (raw, json)
Hash identifier:          PjQB34mH0BjmiuFzuwZeAL5DZCsPkc37xKe+muRGtaw=
Subject key identifier:   AC:A1:F2:3B:A8:41:22:12:02:43:28:DA:A3:C8:87:4E:4C:56:9F:6B
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       2A71FAB1E986CFB4FAE15C6C96F289ADEC93CD9F
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
Signing time:             Tue 06 Feb 2024 00:59:13 +0000
ROA not before:           Tue 06 Feb 2024 00:54:13 +0000
ROA not after:            Tue 04 Feb 2025 00:59:13 +0000
asID:                     271612
IP address blocks:        2804:7e40:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:71:fa:b1:e9:86:cf:b4:fa:e1:5c:6c:96:f2:89:ad:ec:93:cd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Feb  6 00:54:13 2024 GMT
            Not After : Feb  4 00:59:13 2025 GMT
        Subject: CN=ACA1F23BA8412212024328DAA3C8874E4C569F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:7b:86:9a:86:e7:97:d2:76:ad:76:d5:00:
                    a9:01:0e:7f:18:e5:e4:16:f2:18:12:ab:c4:96:c5:
                    fc:8d:29:23:5f:be:0b:7b:90:c8:a5:5b:48:47:1c:
                    03:54:31:6b:ca:e8:b2:1f:e9:57:45:c7:2d:87:ac:
                    1b:a1:ca:5f:fc:dd:51:ef:c5:43:cd:0d:8a:df:a2:
                    97:e0:27:2b:73:9c:19:6f:15:9e:c9:63:6a:3b:e5:
                    f3:18:14:74:1f:0c:af:33:ec:96:d4:06:26:64:1c:
                    a3:de:d7:21:a2:24:6f:91:cf:89:b7:01:36:fa:50:
                    a0:8b:58:d1:88:2a:f4:0c:8c:bc:6e:78:2b:ef:71:
                    e4:ec:64:36:fe:97:1d:54:9a:b7:06:60:dc:7e:ea:
                    42:c3:0f:ba:98:fd:e2:4f:65:3c:65:75:8d:a4:75:
                    a3:b4:6e:0c:16:8a:17:d8:d1:e9:65:ef:2b:43:89:
                    b5:fd:9d:17:da:36:9b:58:0d:e3:d8:a4:0e:49:95:
                    8a:23:53:9a:89:4e:87:48:de:82:49:ae:6a:3e:6e:
                    97:5d:2c:02:ed:81:0c:63:95:9f:9b:ce:f9:5d:ea:
                    a5:c0:c5:79:b2:82:ea:c4:69:97:51:8b:d2:ab:27:
                    06:46:83:eb:13:3e:31:fa:5e:c6:fa:b4:93:56:8f:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A1:F2:3B:A8:41:22:12:02:43:28:DA:A3:C8:87:4E:4C:56:9F:6B
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:7d:ac:19:19:dc:de:96:2d:7c:3d:a8:3a:50:64:89:fd:
         a3:8d:5e:e8:ec:66:9c:40:7d:cb:05:7e:ac:9d:a5:76:72:40:
         aa:6b:03:15:fa:ac:4e:fa:a5:30:4a:68:71:eb:af:3f:dd:98:
         39:9c:ae:da:fd:5a:4b:ba:0e:53:f7:c3:df:f7:1d:c8:8f:09:
         fe:a7:2e:da:f0:8d:e3:c0:18:db:0a:5e:e6:aa:fc:aa:73:b9:
         b0:b2:09:09:56:5e:67:58:a7:2a:19:48:0a:8b:31:d4:14:ee:
         27:ff:78:17:16:40:d0:ab:e0:d2:a5:d0:09:90:ed:49:c6:36:
         f0:ae:54:a7:75:73:fe:4b:15:5c:aa:79:12:7e:90:24:26:d8:
         8d:f9:5f:72:dc:de:77:5c:b8:d6:60:cc:10:eb:33:0e:ed:32:
         45:0e:3a:c6:44:fd:25:51:23:36:e1:ef:86:ab:b6:0b:e4:ee:
         53:02:ab:82:8f:eb:26:3a:69:3d:43:86:21:55:c2:4b:01:15:
         b8:75:b2:12:7f:2a:22:33:b7:07:8f:5a:58:ae:a4:5b:ca:63:
         c8:31:7a:2e:b4:c1:2b:ff:2c:e1:65:28:f8:56:9a:8d:ea:c4:
         bb:68:9b:31:eb:b2:f1:16:54:3e:c5:32:3c:8a:c8:40:45:55:
         1c:7a:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:09 2025 by rpki-client