Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/323830343a363334383a3a2f33322d313238203d3e20323639333531.roa
File:                     323830343a363334383a3a2f33322d313238203d3e20323639333531.roa (raw, json)
Hash identifier:          3pAFmgn8ZquL1M3z6klyEbilrM0OQXSL6lzZd0Cz8ys=
Subject key identifier:   FC:17:5D:84:F3:A5:AE:51:05:71:B6:1B:82:6F:BB:CF:4A:5D:7B:52
Certificate issuer:       /CN=5EDCB685FD87B973BFE66FA36C4F4E0D24734821
Certificate serial:       31D725DE25C0F329E8974B66BF1DAE5760DAB799
Authority key identifier: 5E:DC:B6:85:FD:87:B9:73:BF:E6:6F:A3:6C:4F:4E:0D:24:73:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/323830343a363334383a3a2f33322d313238203d3e20323639333531.roa
Signing time:             Fri 09 Feb 2024 17:53:49 +0000
ROA not before:           Fri 09 Feb 2024 17:48:49 +0000
ROA not after:            Fri 07 Feb 2025 17:53:49 +0000
asID:                     269351
IP address blocks:        2804:6348::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:25:de:25:c0:f3:29:e8:97:4b:66:bf:1d:ae:57:60:da:b7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCB685FD87B973BFE66FA36C4F4E0D24734821
        Validity
            Not Before: Feb  9 17:48:49 2024 GMT
            Not After : Feb  7 17:53:49 2025 GMT
        Subject: CN=FC175D84F3A5AE510571B61B826FBBCF4A5D7B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:2a:f7:be:32:65:fa:de:95:6d:9d:01:77:
                    a6:eb:37:da:04:97:16:79:02:0b:f5:f8:1f:16:5c:
                    65:ce:83:6a:36:de:0d:a4:b1:3f:7f:44:e6:f6:11:
                    60:9d:41:2c:ff:62:5a:34:a4:ff:0d:06:d6:45:cf:
                    55:fe:79:be:99:24:5d:a2:ab:33:98:51:96:f8:81:
                    69:c7:2e:83:62:83:4d:5e:be:7e:08:67:be:4b:a1:
                    5f:3b:d8:f3:d6:79:22:08:19:8b:3e:27:24:c8:2e:
                    79:c2:d3:3b:c9:e7:88:bd:e4:04:d6:ea:c2:b1:c1:
                    07:7f:bf:58:55:c6:3d:b4:86:25:6f:b6:e4:70:39:
                    89:ac:b7:65:01:41:33:b0:0e:65:8c:14:52:ba:b6:
                    6f:39:03:ec:9c:2b:00:29:bd:8c:db:43:69:27:df:
                    35:31:54:2f:b0:c2:6a:fc:c9:9a:3e:25:9b:02:49:
                    8b:9d:f8:6f:42:24:d2:63:07:2a:b3:3d:23:7f:e7:
                    c1:a6:65:7d:fd:fd:8a:69:42:f3:f1:d8:a2:8d:bd:
                    d2:31:0b:60:04:89:67:0e:f3:4f:f3:8b:c4:75:0e:
                    61:99:02:1d:b0:5a:e3:c7:d8:3d:3a:09:79:08:64:
                    06:ca:46:7a:1f:fc:9d:7f:d1:8b:92:ff:0c:55:0a:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:5D:84:F3:A5:AE:51:05:71:B6:1B:82:6F:BB:CF:4A:5D:7B:52
            X509v3 Authority Key Identifier:
                keyid:5E:DC:B6:85:FD:87:B9:73:BF:E6:6F:A3:6C:4F:4E:0D:24:73:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/323830343a363334383a3a2f33322d313238203d3e20323639333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6348::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:7f:d8:51:92:b1:e6:2c:e8:71:fb:d0:90:9b:15:ac:bc:
         23:a5:f7:38:68:72:89:d0:7e:e5:58:b4:7b:fb:f2:ff:e3:95:
         3e:fd:6e:8d:8d:2b:09:95:ab:fa:eb:30:cf:53:ec:af:cc:4c:
         49:1e:51:82:76:8f:b1:6c:04:a4:1a:16:81:00:28:9c:a0:05:
         9e:d2:21:93:28:7a:c8:7f:d7:3d:45:33:d8:5d:4f:ed:2c:65:
         9b:a6:f2:34:1c:eb:f6:96:0f:2f:1f:49:34:a5:1d:bc:15:99:
         78:d3:08:f7:65:59:4d:5f:30:99:20:69:62:ea:d8:9d:15:f1:
         c8:27:96:c8:97:fa:c1:b9:bc:63:b4:45:13:f7:bd:90:34:61:
         ca:c3:c0:12:ab:d9:1a:bc:14:79:2f:59:cc:70:c5:f8:35:e4:
         14:79:58:7f:e7:a0:d5:f3:dd:33:73:9c:4e:3e:97:b1:74:67:
         7e:5e:ca:90:b4:28:62:f6:c2:0b:68:9f:0c:06:20:80:55:7b:
         c9:c0:ac:fb:e4:b1:3b:ff:61:34:bc:f0:9d:95:23:f3:28:d2:
         63:90:ae:55:44:fe:d9:ef:2d:ec:f5:7f:e0:7e:61:07:16:0f:
         f5:08:0c:3b:5a:f4:9b:1c:84:50:90:56:cd:be:f9:e1:ba:81:
         09:5b:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:27 2025 by rpki-client