Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/323830343a356530383a3a2f33322d3536203d3e20323639303037.roa
File:                     323830343a356530383a3a2f33322d3536203d3e20323639303037.roa (raw, json)
Hash identifier:          h2n+RPhmIhdaVLm72Y2MqEwWkQh7BGOPt03NWs9OlIU=
Subject key identifier:   45:5C:AB:85:62:DA:91:79:59:27:BE:09:7F:69:FD:08:C2:3B:22:C5
Certificate issuer:       /CN=812A72E8A31772F79D13ABBE8D369A69FF8CF55E
Certificate serial:       15608FB05E1FCDC2361C3F5E39D1B0A251F54081
Authority key identifier: 81:2A:72:E8:A3:17:72:F7:9D:13:AB:BE:8D:36:9A:69:FF:8C:F5:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/323830343a356530383a3a2f33322d3536203d3e20323639303037.roa
Signing time:             Sat 03 Jun 2023 22:53:11 +0000
ROA not before:           Sat 03 Jun 2023 22:48:11 +0000
ROA not after:            Sat 01 Jun 2024 22:53:11 +0000
asID:                     269007
IP address blocks:        2804:5e08::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:60:8f:b0:5e:1f:cd:c2:36:1c:3f:5e:39:d1:b0:a2:51:f5:40:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812A72E8A31772F79D13ABBE8D369A69FF8CF55E
        Validity
            Not Before: Jun  3 22:48:11 2023 GMT
            Not After : Jun  1 22:53:11 2024 GMT
        Subject: CN=455CAB8562DA91795927BE097F69FD08C23B22C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f4:f1:f1:ca:c7:99:a5:a6:d7:af:0b:f9:4c:
                    c5:39:de:25:1a:67:d9:c1:09:42:2f:0d:a5:0b:1a:
                    2b:d5:ca:d5:08:2e:cf:e3:cf:a9:a7:05:e3:55:b0:
                    dc:4f:96:72:b9:72:96:8a:d3:61:a0:c0:cc:b8:32:
                    bd:5a:04:0a:8c:5b:cb:8b:7c:22:08:5c:e1:38:99:
                    50:fc:a7:0f:dd:06:ff:9e:2b:13:43:b1:c3:cb:fd:
                    9f:9b:fe:42:55:a2:4f:88:e7:4a:7c:52:35:38:2a:
                    8c:6a:72:9c:32:9f:d0:ef:ef:57:5c:18:fe:e3:17:
                    43:e5:b2:92:06:8f:a4:41:fb:ce:d3:0a:40:a5:72:
                    97:ab:e5:0b:19:5c:f1:13:1e:40:5d:92:a4:bb:fc:
                    a5:e0:9e:bb:86:be:f4:1a:8e:4b:f7:4a:b6:0e:e1:
                    51:d2:33:1c:09:19:e0:92:cc:84:9e:33:a1:9a:a8:
                    4e:b4:f9:d4:c8:f0:32:7f:49:bc:3c:1c:aa:92:72:
                    2b:18:ce:64:7c:95:11:36:14:59:f2:14:cd:fc:33:
                    28:81:8c:5c:ea:24:95:11:88:f6:a9:ed:c0:40:63:
                    cb:d5:99:d7:e8:76:89:05:b4:9b:6c:7a:d0:7d:05:
                    25:98:c2:34:a6:32:c8:6a:91:5e:ec:77:89:22:8e:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:AB:85:62:DA:91:79:59:27:BE:09:7F:69:FD:08:C2:3B:22:C5
            X509v3 Authority Key Identifier:
                keyid:81:2A:72:E8:A3:17:72:F7:9D:13:AB:BE:8D:36:9A:69:FF:8C:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/323830343a356530383a3a2f33322d3536203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:4c:d3:31:a0:a5:e1:33:63:b4:9b:43:ac:3c:b6:78:c7:
         93:99:79:df:09:e8:d6:73:4c:30:0e:d2:2f:8d:9a:13:9d:98:
         97:6e:3e:45:45:40:25:2d:2e:47:42:13:f1:5e:fb:8e:2d:99:
         77:dc:3a:bb:ef:85:00:1e:d1:99:c4:db:7e:85:dd:aa:00:ab:
         69:ef:c7:ae:4f:44:5a:22:74:49:07:64:26:7a:0f:4f:80:3f:
         5a:eb:d1:18:e6:a2:e2:18:ea:94:82:4d:00:97:1d:ce:8c:7e:
         84:3b:47:d8:b2:aa:c0:ae:64:3d:35:6f:68:27:4b:a9:bd:77:
         6f:81:ad:74:4c:b9:6c:f6:15:b5:30:ed:e9:46:45:8e:ec:04:
         1a:e6:18:ba:6a:a5:a0:cd:fb:2c:9f:ca:49:a0:76:37:e8:07:
         a8:ab:3d:c1:fc:a9:27:7b:fd:5c:68:88:fa:9a:1b:d6:03:f7:
         3f:e3:6e:32:e9:71:54:8b:f5:b0:f3:5f:91:96:e0:86:2c:81:
         ed:40:1a:23:dc:1b:4c:60:a0:01:2a:ba:f9:9b:80:dc:90:51:
         4d:1b:de:0d:74:d6:c8:eb:7e:6a:16:94:83:8e:96:f5:fe:1a:
         c6:f3:1c:c9:e8:03:5f:1c:c2:c0:92:a4:1a:fd:c4:c7:19:8e:
         bd:bc:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:48 2025 by rpki-client