Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/323830343a336664303a383030303a3a2f33332d3333203d3e20323635393137.roa
File:                     323830343a336664303a383030303a3a2f33332d3333203d3e20323635393137.roa (raw, json)
Hash identifier:          KrVdtKBZqvKILgxGG7rOZ5GY1wr3hkdEUEEVNxoiWJc=
Subject key identifier:   6F:5A:EB:0F:1D:89:68:2A:1A:3D:33:4A:B9:A7:FD:C5:F4:FE:12:BA
Certificate issuer:       /CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
Certificate serial:       7D5341C1FD1C74D8051B488F60566A7B20DA954A
Authority key identifier: DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/323830343a336664303a383030303a3a2f33332d3333203d3e20323635393137.roa
Signing time:             Tue 02 Jan 2024 14:00:00 +0000
ROA not before:           Tue 02 Jan 2024 13:55:00 +0000
ROA not after:            Tue 31 Dec 2024 14:00:00 +0000
asID:                     265917
IP address blocks:        2804:3fd0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:53:41:c1:fd:1c:74:d8:05:1b:48:8f:60:56:6a:7b:20:da:95:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
        Validity
            Not Before: Jan  2 13:55:00 2024 GMT
            Not After : Dec 31 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100AA6502688BAAB50881F0C0DC30F0F27BEB98655275E0B1894DAA44679AEC7D9F31654350DC85ABF2C7D25E1ABAB48EE44A720B7DDC641E2A0B8915263A0A473C343303BC88259DC1AF996371373462F897EAE8D008ED42843E6146C5A7E685BCB06A8852B006DA3B567915903D063780FECF83A8449566703F83BEFFE3A5AACBAE660791D8C21747463717FA627231DDF6D6A5A80BB8D01BB51F8234FC30E4A45EF9A12CA848554BE001751F5158DE0938877A7DFC44B052E086F3B03C7592CEDB580E30D14F2B428CCADD980591C72A5174272D3AE4A7A77D17AE8FD79D7D5B6EBB64231D3A21FCB8F7FC4DACAD8BC9F55CA745D43B1F6D30B2516199F6A14D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:02:68:8b:aa:b5:08:81:f0:c0:dc:30:f0:
                    f2:7b:eb:98:65:52:75:e0:b1:89:4d:aa:44:67:9a:
                    ec:7d:9f:31:65:43:50:dc:85:ab:f2:c7:d2:5e:1a:
                    ba:b4:8e:e4:4a:72:0b:7d:dc:64:1e:2a:0b:89:15:
                    26:3a:0a:47:3c:34:33:03:bc:88:25:9d:c1:af:99:
                    63:71:37:34:62:f8:97:ea:e8:d0:08:ed:42:84:3e:
                    61:46:c5:a7:e6:85:bc:b0:6a:88:52:b0:06:da:3b:
                    56:79:15:90:3d:06:37:80:fe:cf:83:a8:44:95:66:
                    70:3f:83:be:ff:e3:a5:aa:cb:ae:66:07:91:d8:c2:
                    17:47:46:37:17:fa:62:72:31:dd:f6:d6:a5:a8:0b:
                    b8:d0:1b:b5:1f:82:34:fc:30:e4:a4:5e:f9:a1:2c:
                    a8:48:55:4b:e0:01:75:1f:51:58:de:09:38:87:7a:
                    7d:fc:44:b0:52:e0:86:f3:b0:3c:75:92:ce:db:58:
                    0e:30:d1:4f:2b:42:8c:ca:dd:98:05:91:c7:2a:51:
                    74:27:2d:3a:e4:a7:a7:7d:17:ae:8f:d7:9d:7d:5b:
                    6e:bb:64:23:1d:3a:21:fc:b8:f7:fc:4d:ac:ad:8b:
                    c9:f5:5c:a7:45:d4:3b:1f:6d:30:b2:51:61:99:f6:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:EB:0F:1D:89:68:2A:1A:3D:33:4A:B9:A7:FD:C5:F4:FE:12:BA
            X509v3 Authority Key Identifier:
                keyid:DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/323830343a336664303a383030303a3a2f33332d3333203d3e20323635393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5b:c1:1c:d1:04:67:7e:0e:77:f7:c7:d6:83:7d:90:93:7c:76:
         44:ea:43:b0:d4:3c:72:d8:8d:2a:0f:f9:86:fa:9b:99:4c:23:
         03:db:3d:51:b2:5c:b1:96:f4:77:7e:fc:34:e2:12:7b:43:20:
         90:ae:ea:18:33:c7:7f:c2:1e:a1:c3:93:16:b5:22:b2:93:4d:
         30:0b:c2:78:54:89:48:dc:d9:3e:1e:3b:ee:c7:b9:b3:5f:1e:
         dc:25:b1:27:e6:db:81:51:ed:67:3e:c9:75:d5:40:50:69:86:
         d6:73:95:28:44:1e:b9:2c:07:4d:76:13:cd:9b:2a:3f:6b:15:
         46:dd:af:8b:83:b0:c6:5f:de:95:a5:a3:66:7c:68:c6:2a:39:
         67:9c:6d:4e:96:54:5b:e7:5e:95:47:6a:11:94:e9:19:ef:22:
         32:f1:b6:63:4d:2e:6f:bf:94:d1:89:26:a9:37:54:c1:cf:02:
         1c:f1:01:3e:bc:69:e7:5b:89:39:bb:49:0c:a4:05:a1:b8:a8:
         26:f4:48:19:7e:e5:51:02:f2:71:b3:df:dd:c8:41:65:53:14:
         e2:02:1b:24:04:da:42:1f:7b:e2:92:a1:29:69:25:a3:45:72:
         fc:a2:6e:1e:7b:8b:7b:17:a4:0f:b7:51:0e:4d:1a:c8:4c:31:
         b8:13:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:38 2025 by rpki-client