Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/323830343a6161383a3a2f33322d3438203d3e203532393033.roa
File:                     323830343a6161383a3a2f33322d3438203d3e203532393033.roa (raw, json)
Hash identifier:          3I/LibBGbUNk8g2XUbV8f9zDuxbhYdAWcACB7jXyjvc=
Subject key identifier:   06:A8:EC:10:24:AE:41:CB:F1:49:82:CA:83:D9:C6:E9:2C:F8:34:BA
Certificate issuer:       /CN=663B04E84B40B6C39816F987E77ACDAD976C215F
Certificate serial:       53DE45015F3B554DAFD956531E033F016DA751F6
Authority key identifier: 66:3B:04:E8:4B:40:B6:C3:98:16:F9:87:E7:7A:CD:AD:97:6C:21:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/663B04E84B40B6C39816F987E77ACDAD976C215F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/323830343a6161383a3a2f33322d3438203d3e203532393033.roa
Signing time:             Tue 22 Aug 2023 15:25:37 +0000
ROA not before:           Tue 22 Aug 2023 15:20:37 +0000
ROA not after:            Tue 20 Aug 2024 15:25:37 +0000
asID:                     52903
IP address blocks:        2804:aa8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:de:45:01:5f:3b:55:4d:af:d9:56:53:1e:03:3f:01:6d:a7:51:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663B04E84B40B6C39816F987E77ACDAD976C215F
        Validity
            Not Before: Aug 22 15:20:37 2023 GMT
            Not After : Aug 20 15:25:37 2024 GMT
        Subject: CN=06A8EC1024AE41CBF14982CA83D9C6E92CF834BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:9b:a2:db:da:7c:bb:85:8c:eb:4a:f6:28:
                    f8:ee:64:49:30:75:a8:af:b9:a6:06:b1:ab:18:c8:
                    10:1e:06:e9:62:49:2f:9d:fa:26:7f:0c:97:ca:a7:
                    ad:03:30:f3:9a:c5:fe:b3:b1:31:d1:4f:39:d9:00:
                    7a:aa:dd:36:ee:b1:a5:5d:a9:72:15:98:55:7a:11:
                    e6:c5:9b:30:59:98:84:9f:73:bb:04:1e:38:36:1a:
                    2f:ab:dd:37:00:83:98:1b:1e:66:b2:ca:3b:f9:2d:
                    cb:01:68:7e:71:8c:8c:7d:f3:0d:96:09:35:8e:66:
                    0f:9e:ac:5f:ec:0e:ee:16:35:20:4a:5f:b7:bf:10:
                    4c:27:98:c4:3f:8b:74:c1:e0:87:7b:f5:f4:90:11:
                    c2:cb:3b:92:12:1d:e5:1b:38:cd:d0:05:ce:cd:25:
                    83:95:8b:8d:cc:2a:24:7a:c8:36:29:2d:90:6e:23:
                    ec:bd:4f:4a:03:65:0c:f2:33:7c:fb:0c:88:4a:72:
                    ad:8b:58:fc:1c:e8:04:cb:15:6c:0a:a4:31:64:bf:
                    7f:0f:fd:34:8e:55:86:65:dc:57:7f:ce:b7:42:bc:
                    af:54:64:f1:8b:ca:de:0c:78:32:e1:66:13:9d:43:
                    b1:58:64:95:ed:d0:ec:29:78:01:af:a5:9b:73:b0:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A8:EC:10:24:AE:41:CB:F1:49:82:CA:83:D9:C6:E9:2C:F8:34:BA
            X509v3 Authority Key Identifier:
                keyid:66:3B:04:E8:4B:40:B6:C3:98:16:F9:87:E7:7A:CD:AD:97:6C:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/663B04E84B40B6C39816F987E77ACDAD976C215F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/663B04E84B40B6C39816F987E77ACDAD976C215F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/323830343a6161383a3a2f33322d3438203d3e203532393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:aa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:75:23:53:29:93:45:64:61:78:4d:da:0c:3e:ae:ae:7d:
         00:28:b8:da:65:0b:d5:a7:9d:4b:f0:89:a4:fe:0b:6c:8d:8a:
         40:46:f7:fe:f4:b1:4a:64:a2:83:d6:d9:45:4d:08:c1:5e:02:
         c3:dd:e3:8b:e0:72:ca:3e:92:23:e3:d0:01:73:31:6d:f5:10:
         09:99:30:3f:1a:69:93:b8:cc:25:56:55:2e:0a:58:45:3e:d7:
         0e:a2:fd:2f:40:17:2d:94:18:39:75:e1:a5:11:e3:f6:fb:8a:
         f8:07:05:52:4c:07:20:3b:cd:e3:5a:2e:50:b9:98:23:f2:25:
         a4:02:b2:c6:db:05:db:43:1f:9a:24:d0:d0:63:c8:9d:9c:0d:
         7f:1d:7f:bd:fa:db:f6:78:d8:fc:67:f6:c2:87:98:e8:52:a9:
         f3:bc:ad:e0:f2:ff:84:75:c5:1d:48:b2:bf:16:ba:5b:7d:0b:
         33:11:34:c4:0d:4c:93:1c:19:31:8a:8c:5c:38:a8:82:8a:48:
         6a:b1:83:a2:e5:4e:ed:e5:70:40:3b:35:51:d4:7d:7c:a8:3b:
         42:26:64:4d:ba:0f:63:6b:94:72:00:58:f4:88:c5:61:fc:46:
         c4:5c:ab:4e:7d:b3:41:e4:7d:c3:74:26:19:05:b9:cb:cf:5e:
         d5:27:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:03 2025 by rpki-client