Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33332d3333203d3e20323639353339.roa
File:                     323830343a363632633a3a2f33332d3333203d3e20323639353339.roa (raw, json)
Hash identifier:          gPv61AoaaqXq7yu2ZLyVTodDsS77E5H0+AwBCGI5yQQ=
Subject key identifier:   96:7E:58:17:61:E7:43:67:78:14:A0:3F:4E:CE:CA:1F:D4:6C:42:CB
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       3517161E8818963DBB6838D851A704C6BB07C045
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33332d3333203d3e20323639353339.roa
Signing time:             Mon 21 Aug 2023 23:14:06 +0000
ROA not before:           Mon 21 Aug 2023 23:09:06 +0000
ROA not after:            Mon 19 Aug 2024 23:14:06 +0000
asID:                     269539
IP address blocks:        2804:662c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:17:16:1e:88:18:96:3d:bb:68:38:d8:51:a7:04:c6:bb:07:c0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Aug 21 23:09:06 2023 GMT
            Not After : Aug 19 23:14:06 2024 GMT
        Subject: CN=967E581761E743677814A03F4ECECA1FD46C42CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8d:16:3b:ca:6a:dc:b5:c1:29:75:18:80:46:
                    be:89:7e:d8:06:fb:be:0d:b0:7c:a8:5c:64:c4:e8:
                    30:50:84:44:96:00:5d:d5:87:78:b6:cd:f2:dd:5b:
                    0d:69:4b:a7:ba:c7:7f:22:3e:4f:81:28:34:05:ef:
                    a2:48:19:7d:d5:e5:25:49:ed:90:dc:7c:26:ff:f9:
                    aa:12:b8:49:8c:27:70:3e:f4:59:38:fa:a5:0c:93:
                    fe:f4:b2:51:29:45:fd:c3:ac:7d:25:e1:74:ad:65:
                    92:c8:ac:25:a9:8a:54:7d:c0:d9:c2:aa:79:e3:4a:
                    8a:1c:0a:cf:e6:d3:92:79:69:fb:93:86:75:2a:70:
                    2d:c2:90:78:50:6d:28:81:64:db:75:c6:d4:70:91:
                    fe:7c:81:9b:c3:f0:18:ea:4f:f3:54:c6:cc:68:26:
                    44:6e:3e:4e:3e:cf:ed:aa:5b:68:12:02:75:12:4d:
                    ae:16:7f:fb:24:8c:4c:fe:b6:b9:cf:f7:8a:60:63:
                    c2:ef:9e:4f:5e:36:0e:ea:94:fd:45:1f:f2:0b:4d:
                    fd:bd:e0:97:3a:66:44:2c:a9:dc:bb:dd:1d:fd:95:
                    7d:2e:8e:11:6e:23:86:99:42:23:dd:20:aa:3e:e5:
                    43:df:ad:7a:74:f1:00:6e:28:0d:be:24:f5:cc:48:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:58:17:61:E7:43:67:78:14:A0:3F:4E:CE:CA:1F:D4:6C:42:CB
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33332d3333203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:e6:a0:a0:37:c6:f2:6c:7b:21:c4:49:49:1f:5d:2c:e0:
         83:d3:ff:df:4c:8e:1f:a0:8e:14:b2:fc:84:c4:41:97:05:50:
         6c:a4:54:62:9d:b0:52:9e:10:ac:3a:2b:05:b5:d7:28:c7:fe:
         1b:4e:1f:00:da:a9:46:4d:9e:4d:0e:4e:28:ec:4a:94:85:d5:
         1a:4e:c7:fd:8c:d2:af:bb:2e:a8:4c:3a:b2:32:88:a7:a7:ff:
         ca:c7:4f:90:6b:52:6f:e6:05:46:b1:33:1a:73:7b:72:b7:d2:
         67:12:02:c6:a0:9c:1e:0f:ef:0e:2e:1a:3c:6b:ed:62:1a:7c:
         96:a9:7c:5b:1c:a4:29:7a:ca:97:ba:13:3e:ac:49:aa:ca:a5:
         b3:b5:6b:9c:91:38:74:cf:24:6c:04:4d:ce:5a:30:9d:65:42:
         0f:78:9f:84:b8:9b:ec:e0:05:7e:fd:41:33:9d:03:2e:39:74:
         f2:28:4e:b5:29:a9:b8:4e:6e:b1:91:44:95:8b:c1:af:f5:52:
         9a:58:b8:a5:a7:ee:e6:04:02:e8:2c:38:3c:cf:84:1b:1b:5a:
         36:7c:fd:40:8a:07:9f:df:8d:38:10:b5:ad:1c:a8:7d:4e:44:
         a7:15:0e:fb:45:a7:94:4a:7b:40:5e:54:01:2f:24:0d:02:11:
         f6:b2:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:20 2025 by rpki-client