Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/323830343a336566303a3a2f33322d313238203d3e20323636363330.roa
File:                     323830343a336566303a3a2f33322d313238203d3e20323636363330.roa (raw, json)
Hash identifier:          2cQoJIoPgnmENAXOBx+Mk0ctBxC4/ax3P0mi4qFOzQ4=
Subject key identifier:   1A:19:49:5F:4A:59:F4:78:E8:C2:10:77:B8:2D:31:72:AB:CE:67:08
Certificate issuer:       /CN=C259FF7D5E9B7C7572068F38AB6EAA70105FA29D
Certificate serial:       6E91F73990B55DEC02C0DCE2F847476A5EF77C4B
Authority key identifier: C2:59:FF:7D:5E:9B:7C:75:72:06:8F:38:AB:6E:AA:70:10:5F:A2:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/323830343a336566303a3a2f33322d313238203d3e20323636363330.roa
Signing time:             Sun 22 Oct 2023 20:49:27 +0000
ROA not before:           Sun 22 Oct 2023 20:44:27 +0000
ROA not after:            Sun 20 Oct 2024 20:49:27 +0000
asID:                     266630
IP address blocks:        2804:3ef0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:91:f7:39:90:b5:5d:ec:02:c0:dc:e2:f8:47:47:6a:5e:f7:7c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C259FF7D5E9B7C7572068F38AB6EAA70105FA29D
        Validity
            Not Before: Oct 22 20:44:27 2023 GMT
            Not After : Oct 20 20:49:27 2024 GMT
        Subject: CN=1A19495F4A59F478E8C21077B82D3172ABCE6708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:db:9e:81:4d:25:9c:1e:f0:99:b6:24:9e:
                    83:e2:c5:56:d1:88:19:34:7c:74:c7:5d:23:e2:e3:
                    83:22:a0:cf:6b:f1:50:73:65:77:da:32:af:0e:63:
                    cf:9e:b7:44:17:98:9f:d5:06:5e:7f:44:b9:f0:68:
                    17:84:dc:4b:9f:c5:2c:56:f5:0b:d8:27:c6:cd:30:
                    8f:98:af:da:ab:48:61:5d:a9:18:09:7e:ea:97:14:
                    e5:75:38:41:ed:83:2f:d6:88:61:d4:01:76:80:c1:
                    16:8f:d8:ef:b8:c0:0c:dd:f7:b3:24:8d:cb:88:51:
                    88:c3:71:4b:5e:25:67:6f:36:64:25:ba:7e:70:0d:
                    99:61:2a:4f:da:8d:be:f0:e4:9c:5b:76:76:4d:80:
                    4f:26:96:d1:44:da:58:64:69:f0:1a:31:74:d3:40:
                    ea:f0:7a:ec:aa:e3:8e:b6:de:82:f0:0e:4c:d1:7d:
                    7e:03:17:d9:0f:21:45:4a:fe:6b:33:ba:3b:9d:c2:
                    f8:91:86:89:e6:c2:ca:0a:a5:4b:58:44:71:9f:f5:
                    e2:72:b2:4b:d8:27:76:25:d5:28:cf:82:cd:80:3d:
                    64:1b:9b:c1:8c:8e:60:a9:f7:97:3d:e0:8e:5a:cc:
                    01:ba:f5:89:2b:07:1e:86:c9:83:dd:9b:d5:3e:dc:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:49:5F:4A:59:F4:78:E8:C2:10:77:B8:2D:31:72:AB:CE:67:08
            X509v3 Authority Key Identifier:
                keyid:C2:59:FF:7D:5E:9B:7C:75:72:06:8F:38:AB:6E:AA:70:10:5F:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/323830343a336566303a3a2f33322d313238203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:ab:67:46:5e:83:ea:88:83:76:5d:ee:f2:0f:3e:e7:6b:
         71:2c:51:c4:b0:82:2f:51:51:7c:2a:7f:49:3f:04:bb:c4:dc:
         d4:b1:59:0d:4a:38:d8:83:b6:0d:7d:a2:7d:cc:65:69:66:4e:
         31:31:8b:71:c2:22:72:42:db:72:6c:34:5f:61:5a:3f:d9:b6:
         c7:b3:c5:f0:59:de:e5:12:41:18:9f:fd:2d:b0:96:2f:bc:03:
         5f:f3:e5:0c:98:bc:8f:25:82:ef:33:2c:28:b6:33:3b:a4:26:
         04:a5:4f:cd:5d:39:ed:cc:d6:a6:5e:2e:6d:42:00:3c:db:2c:
         f9:f2:07:d5:c5:5d:c2:bc:7a:11:5e:ba:6d:39:69:28:bd:8a:
         8e:4a:0b:04:66:4a:12:86:9c:54:b9:0c:34:66:05:d7:ef:3b:
         19:27:17:08:8d:e4:9a:f4:78:d5:c6:a4:99:76:bf:9b:e9:ed:
         08:69:dd:ec:e9:c3:04:7e:bf:f6:c7:96:6a:4e:63:47:cf:20:
         a9:c6:fb:a9:55:58:b1:c3:04:3e:42:63:86:3d:95:6d:57:03:
         1e:6e:91:a7:0f:52:a9:88:b5:78:ff:45:ba:b5:62:c3:9f:94:
         8a:4a:4a:25:3a:ec:40:75:49:59:d8:1f:42:4e:aa:10:c1:08:
         e5:c8:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:23 2025 by rpki-client