Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d3332203d3e20323635343636.roa
File:                     323830343a333439343a3a2f33322d3332203d3e20323635343636.roa (raw, json)
Hash identifier:          F99lhRwt6OqI9zvI0mT7S+AkD86XLqoo25o/R785Pak=
Subject key identifier:   7F:F9:D3:8D:8E:6B:C5:A3:94:D7:60:4B:44:8B:7E:F1:BC:32:98:36
Certificate issuer:       /CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
Certificate serial:       56C84F75D23CA3DC917BB6C55BA3161DFDCFE12D
Authority key identifier: 21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d3332203d3e20323635343636.roa
Signing time:             Tue 21 Feb 2023 23:06:39 +0000
ROA not before:           Tue 21 Feb 2023 23:01:39 +0000
ROA not after:            Tue 20 Feb 2024 23:06:39 +0000
asID:                     265466
IP address blocks:        2804:3494::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c8:4f:75:d2:3c:a3:dc:91:7b:b6:c5:5b:a3:16:1d:fd:cf:e1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
        Validity
            Not Before: Feb 21 23:01:39 2023 GMT
            Not After : Feb 20 23:06:39 2024 GMT
        Subject: CN=7FF9D38D8E6BC5A394D7604B448B7EF1BC329836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:45:d0:57:ea:8c:06:62:8c:6a:eb:01:c3:
                    3d:d1:1f:aa:36:4b:cb:52:cc:c9:d5:ac:23:36:a7:
                    f9:04:60:6c:0c:a5:71:d0:95:5d:65:04:f5:6c:18:
                    65:26:b3:3e:00:d4:dc:2d:52:38:1a:7b:1a:12:8e:
                    70:c3:69:14:68:f2:ad:85:25:0d:53:05:4a:cf:97:
                    35:dc:49:cd:7b:9c:bb:05:bd:9c:a1:9b:59:48:62:
                    cf:65:29:6b:89:e1:ed:fa:a3:8f:2d:79:15:49:8a:
                    8b:38:4e:a9:bd:5c:dd:e3:d4:bc:0c:8a:66:51:57:
                    5f:2c:8f:b5:47:60:ea:51:8b:e2:ba:f8:99:6f:a5:
                    5e:c4:18:54:11:52:3b:24:d8:67:c1:cf:6d:0c:a4:
                    7a:d6:0d:b0:bb:c8:c2:e1:5a:fe:a0:cf:cd:88:86:
                    6e:cd:2d:e5:f6:44:c8:2e:4c:ed:e0:97:ca:4d:70:
                    87:9a:14:23:6b:36:e8:79:7a:5e:45:0b:d2:10:68:
                    40:3c:f2:e9:b5:75:83:8d:c6:f0:59:3f:51:2b:2f:
                    66:86:1e:23:b8:47:e2:65:5c:0a:d0:d9:03:70:f1:
                    01:67:ed:ef:bb:40:39:44:c4:96:32:99:45:34:47:
                    c9:6a:a7:ba:26:55:f4:ce:f1:5a:9f:16:c0:54:63:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:D3:8D:8E:6B:C5:A3:94:D7:60:4B:44:8B:7E:F1:BC:32:98:36
            X509v3 Authority Key Identifier:
                keyid:21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d3332203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3494::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:da:7f:e4:6e:c5:4b:96:60:df:30:17:a5:bb:a9:0e:d3:
         88:eb:85:cd:ff:75:74:cb:ec:d7:5f:77:99:13:d8:13:6a:28:
         c7:0a:c2:f8:cc:7a:aa:70:c9:2a:d4:0e:a7:a8:35:39:fb:e7:
         c2:cf:c4:f1:f2:c2:29:71:d4:d7:66:64:ef:96:9c:1a:c6:78:
         a6:98:3e:80:4f:66:a8:cf:f0:fa:a1:d5:20:f3:8a:d3:4d:f1:
         d0:02:7c:e1:24:d3:ce:9f:9a:6c:77:dd:ee:ea:67:86:12:01:
         7f:4b:b0:2a:fa:71:e1:3f:93:3e:fd:f9:64:52:50:f9:31:40:
         15:04:9f:54:8c:8c:0d:fa:d6:4a:eb:5d:07:8d:e1:08:c7:ef:
         9c:7c:1d:95:de:b8:da:6c:be:88:59:84:06:0c:b9:47:e2:16:
         59:49:6c:b3:83:b3:08:ea:74:32:22:5a:a0:b4:88:9b:4e:ca:
         99:7c:09:4f:ce:da:ad:25:03:b2:a0:41:c9:ea:5b:ad:34:f6:
         75:88:f5:e1:c6:5e:9e:df:57:b2:18:d9:34:73:c8:ce:39:fc:
         ef:f5:ab:54:e4:60:ee:94:ca:0c:dd:9d:1f:63:09:fc:c1:99:
         de:da:12:46:56:59:3f:c0:2b:a5:0b:9d:1a:da:a5:b1:42:e1:
         ec:84:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:44 2025 by rpki-client