Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3330303a3a2f34382d3438203d3e20323731343636.roa
File:                     323830343a376266383a3330303a3a2f34382d3438203d3e20323731343636.roa (raw, json)
Hash identifier:          jBx70HvjvOJsMIXPfkIZyshH85mzJZmvmxmrsFpqlHc=
Subject key identifier:   AB:05:FD:16:9D:5C:E3:1F:E0:FB:5B:14:A2:C8:0C:7C:E8:8B:D6:7B
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       0EF74B0AA0B87D5B3ADA2EF699A4592BB486D877
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3330303a3a2f34382d3438203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:49 +0000
ROA not before:           Wed 28 Feb 2024 20:10:49 +0000
ROA not after:            Wed 26 Feb 2025 20:15:49 +0000
asID:                     271466
IP address blocks:        2804:7bf8:300::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:4b:0a:a0:b8:7d:5b:3a:da:2e:f6:99:a4:59:2b:b4:86:d8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:49 2024 GMT
            Not After : Feb 26 20:15:49 2025 GMT
        Subject: CN=AB05FD169D5CE31FE0FB5B14A2C80C7CE88BD67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:2c:70:de:66:ae:29:84:d4:db:8b:0b:55:
                    1a:9f:a9:59:8b:14:a2:22:c4:2b:96:e0:53:b1:b5:
                    d9:27:93:3c:78:fb:a4:14:dd:05:23:93:5d:2c:50:
                    cb:e1:8b:20:80:6f:00:16:38:b0:bc:00:c4:54:85:
                    5c:66:bd:f1:62:d6:7a:15:d7:c9:da:fa:3c:3d:c5:
                    58:f3:13:f0:4c:71:2d:8a:fe:ae:1f:87:f8:c7:15:
                    ef:35:47:af:43:f9:85:ea:0b:01:81:56:ab:a3:1f:
                    03:11:6d:ec:45:79:8a:e5:5a:d6:43:66:ba:c7:cf:
                    64:81:1a:a8:df:a1:f0:0c:6d:a0:01:ba:e0:b0:35:
                    39:09:e2:8b:9c:d9:41:2a:00:78:03:dd:8c:e9:0b:
                    40:c1:09:5a:df:f0:73:34:73:d8:04:4a:1c:ef:73:
                    fa:df:ae:09:b1:3b:2c:8b:2f:af:04:ea:11:a2:aa:
                    89:e0:47:d0:8d:82:b8:52:8f:aa:b8:5e:3c:de:e2:
                    bc:75:4a:5c:5a:3e:f7:81:c1:97:26:73:02:b9:7b:
                    57:fd:08:a1:c2:fb:fd:3c:18:83:2b:f0:82:af:57:
                    88:ed:54:01:c4:83:89:26:03:66:0c:b2:a9:65:fe:
                    fe:91:c5:02:00:f9:df:e5:6a:96:14:ae:c3:6e:e2:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:05:FD:16:9D:5C:E3:1F:E0:FB:5B:14:A2:C8:0C:7C:E8:8B:D6:7B
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3330303a3a2f34382d3438203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:90:bf:b5:75:49:83:ab:eb:2a:d0:ad:1e:e3:b9:f4:92:
         fb:89:94:50:3f:35:ff:da:62:6d:53:24:02:ff:58:8e:7f:65:
         db:30:d2:9f:f6:b9:ee:26:ad:fb:79:14:3f:d7:19:95:b5:6a:
         8f:5f:5b:1b:d0:61:2f:71:e3:0f:56:3a:60:d6:04:5a:32:dd:
         0a:ec:3f:1f:36:8a:e8:a7:9d:ec:e6:1b:0e:c8:06:28:99:b7:
         ec:bf:48:9c:af:7d:4a:ca:e6:e3:da:d8:9a:b3:f9:bb:87:56:
         2b:e2:54:a4:bd:83:e7:59:8f:43:f3:de:95:51:ff:69:80:36:
         93:fe:e6:99:7e:ce:66:9b:c5:b5:c7:aa:05:16:26:2d:9c:61:
         98:cd:e7:19:75:74:97:e1:64:9e:d7:77:38:16:f9:bc:b9:b4:
         c0:96:c8:c4:03:c6:2f:4d:4a:5b:5f:f6:1b:76:03:d5:0a:ca:
         71:78:c8:99:fb:a5:68:34:50:08:0d:96:e5:5f:91:a8:17:f3:
         a4:21:fb:6e:d8:3d:c6:97:a5:bb:7d:28:16:17:fc:7c:5e:05:
         4d:29:72:fc:6e:d9:31:41:e4:a9:d4:cf:88:6e:cd:c6:2d:8a:
         d8:1d:39:d9:24:9b:81:35:05:0f:c3:dd:a9:4c:24:03:09:63:
         47:c3:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:53 2025 by rpki-client