Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
File:                     323830343a343531383a3a2f33322d3438203d3e20323637363732.roa (raw, json)
Hash identifier:          KHYMO9Mgv9cYYJWfFZzenfPo9d55BtJb+qISk2q19us=
Subject key identifier:   68:EC:EC:0A:14:2A:F7:EC:00:31:8A:C9:78:6D:4C:4A:94:88:23:A8
Certificate issuer:       /CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
Certificate serial:       054F660F1D78D236AF6D6AEDF7BB3FC8770B6897
Authority key identifier: DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
Signing time:             Wed 10 Apr 2024 13:17:54 +0000
ROA not before:           Wed 10 Apr 2024 13:12:54 +0000
ROA not after:            Wed 09 Apr 2025 13:17:54 +0000
asID:                     267672
IP address blocks:        2804:4518::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4f:66:0f:1d:78:d2:36:af:6d:6a:ed:f7:bb:3f:c8:77:0b:68:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
        Validity
            Not Before: Apr 10 13:12:54 2024 GMT
            Not After : Apr  9 13:17:54 2025 GMT
        Subject: CN=68ECEC0A142AF7EC00318AC9786D4C4A948823A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:b4:e1:48:08:f4:21:51:ba:c9:82:1e:9a:
                    71:5e:25:5c:c9:13:18:25:94:8b:99:0e:5a:45:cc:
                    29:11:17:fe:eb:29:7e:a8:71:11:03:ea:58:51:60:
                    cd:d4:27:97:59:8a:54:0a:1b:57:03:d4:ac:27:0f:
                    15:45:5d:68:ff:a3:b5:cd:e8:2d:87:7b:77:1d:3a:
                    80:80:b1:d1:d3:e7:ec:cd:d3:79:6e:1b:e8:87:45:
                    fd:9f:a6:e3:57:24:ec:dc:b1:5d:e0:5a:05:f9:61:
                    7a:84:1e:e4:52:c9:d6:6a:09:24:95:81:bd:a2:f3:
                    73:37:ad:00:2f:f1:54:5d:04:41:4a:af:76:a6:d9:
                    52:5e:9a:5c:14:63:49:02:75:76:93:fd:12:2d:17:
                    61:62:f3:81:fe:12:b2:7e:d4:b0:73:23:c9:1f:68:
                    a4:2f:0a:a3:9e:8b:9d:67:cc:15:aa:58:f2:7c:ec:
                    97:a9:a7:e5:61:a5:9b:9e:0a:10:2c:36:b1:8d:b1:
                    b7:c7:63:55:9f:c4:d0:36:cf:c2:15:97:b1:86:e2:
                    a9:24:c9:c4:7c:ef:a9:f0:56:81:c2:3a:b7:5d:a7:
                    10:c3:84:90:69:0d:52:cd:b8:57:78:da:14:d9:6e:
                    6b:59:a4:c8:a0:6a:a0:fc:9b:21:74:ac:49:fd:6f:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EC:EC:0A:14:2A:F7:EC:00:31:8A:C9:78:6D:4C:4A:94:88:23:A8
            X509v3 Authority Key Identifier:
                keyid:DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4518::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:30:f5:a5:cb:a8:50:c3:c0:a2:b0:f5:81:63:89:b6:d9:87:
         a8:72:61:c4:ac:c4:bf:17:9d:6e:6f:30:f5:98:93:2e:da:ad:
         6d:51:cd:8c:5f:92:77:24:67:14:60:2e:ff:ac:99:fd:58:4e:
         bf:32:47:0f:eb:d8:6e:02:93:99:14:ca:1b:cc:1d:1c:5b:ab:
         4c:1b:7a:57:34:3d:5a:be:a9:df:2e:a0:a1:23:c4:47:c5:45:
         a2:d3:61:e4:b5:fa:11:7c:e5:0e:2d:53:a5:a3:85:d6:dd:e3:
         04:61:c0:d6:de:0d:e6:9b:22:cf:62:40:76:24:3f:23:dc:ce:
         46:8a:c9:d3:aa:34:e9:df:b0:37:4c:a7:bc:c7:54:43:68:06:
         db:b5:95:3b:4f:64:b3:b3:ff:76:cd:ce:7b:26:7e:7e:e5:ee:
         7b:49:c1:b9:60:38:dc:8d:ac:96:1e:02:05:6d:3c:2b:0f:0a:
         8b:e3:36:c7:d8:02:bb:21:6b:42:56:35:33:b8:a7:f6:ca:0e:
         f5:9b:32:9e:e7:6d:28:6d:d5:82:41:47:8c:e3:03:9c:3c:7d:
         7b:23:a7:51:3d:af:18:aa:fa:61:f9:e8:23:93:87:0b:62:dd:
         d9:d9:2e:9d:a3:d4:a7:1d:e0:57:3a:0d:6b:db:b0:23:df:5c:
         47:6e:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:04 2025 by rpki-client