Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a633030303a3a2f33342d3334203d3e20323638323239.roa
File:                     323830343a346466303a633030303a3a2f33342d3334203d3e20323638323239.roa (raw, json)
Hash identifier:          86BQzkcRf9LOdH576FUnq74M1IJYAu2Q9LSNCkpMpM4=
Subject key identifier:   C0:8C:8F:19:34:DA:55:22:79:D8:22:E9:F3:C4:BE:37:02:65:97:57
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       3E0E1E3E6B36672A69C0BE4582FA2168DA6F51AB
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a633030303a3a2f33342d3334203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:24 +0000
ROA not before:           Wed 03 Jul 2024 21:05:24 +0000
ROA not after:            Wed 02 Jul 2025 21:10:24 +0000
asID:                     268229
IP address blocks:        2804:4df0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0e:1e:3e:6b:36:67:2a:69:c0:be:45:82:fa:21:68:da:6f:51:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:24 2024 GMT
            Not After : Jul  2 21:10:24 2025 GMT
        Subject: CN=C08C8F1934DA552279D822E9F3C4BE3702659757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:2d:46:d9:52:c8:1f:2e:1a:dd:df:ea:da:
                    b3:5e:5a:fa:cc:28:4b:67:69:3e:5c:91:78:80:17:
                    7b:53:21:81:13:e3:24:9b:0a:10:3d:25:2a:05:9b:
                    18:d9:95:83:70:a8:7c:9c:a4:52:ae:c7:8a:cf:d2:
                    59:25:7a:3f:c7:5b:4f:4e:2e:98:4f:73:dc:d3:31:
                    1d:a0:87:77:68:b5:09:3e:a3:bd:8f:9e:39:08:12:
                    43:ac:f8:63:3f:58:95:71:00:d2:91:12:f7:ae:37:
                    7d:87:20:65:1e:36:81:3a:f3:88:29:53:d7:b3:86:
                    21:00:72:ec:5a:2c:93:07:6a:3d:a1:d1:3a:7b:55:
                    7b:2e:cd:82:25:a0:ee:66:d2:1b:de:8b:a3:bd:1c:
                    9f:e6:84:04:df:0e:1f:39:5a:e3:92:4d:5a:9e:27:
                    44:9b:26:8d:6c:31:4c:f8:e1:e9:27:fc:a3:e1:6d:
                    6d:48:61:87:1d:87:11:76:ad:f4:f5:2e:e5:1b:f2:
                    f4:34:fe:92:94:47:0a:35:bf:6c:7c:28:ce:fc:fe:
                    f1:e5:6a:76:e1:61:82:dd:ad:33:24:02:87:ec:ad:
                    b7:72:1c:f0:cb:89:51:5d:46:4a:08:45:13:96:68:
                    a2:36:94:4e:3f:c7:cd:56:80:b7:90:4b:2b:db:fb:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:8F:19:34:DA:55:22:79:D8:22:E9:F3:C4:BE:37:02:65:97:57
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a633030303a3a2f33342d3334203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:91:46:63:ae:b6:5b:30:d8:62:12:07:a1:e2:5e:0f:56:
         97:ee:8f:d7:89:09:e2:da:43:86:96:15:b6:1d:3c:ee:54:2a:
         5f:44:33:6d:62:bc:65:d3:19:ae:55:2b:9c:72:2c:da:b5:30:
         94:ef:41:a0:ba:ed:96:bd:61:e7:65:1b:96:2d:47:9e:c1:83:
         71:82:f4:8a:38:5a:9a:94:63:c6:d0:c8:f1:89:9c:bc:e8:a1:
         e7:73:3c:4d:1a:dc:bd:79:83:65:ba:07:12:84:0d:74:b0:04:
         62:41:ad:a9:fe:b6:a8:bd:35:f9:a0:55:13:ac:ec:0c:43:e1:
         7a:03:18:b6:7d:0d:55:16:8f:6d:1c:86:f6:ae:17:6f:4d:1e:
         ef:ad:91:43:6c:b3:d8:d3:ce:f9:16:1a:ea:98:25:4b:5b:12:
         9b:ec:85:8d:a2:4b:78:72:38:f4:d7:8a:ea:c2:21:b4:1c:97:
         ee:0a:a9:df:4c:ae:c8:e4:dd:44:7f:dc:de:eb:b7:68:49:83:
         35:b8:ab:b7:4a:40:e2:9c:6c:97:27:49:91:81:46:d0:ea:98:
         34:13:66:bf:c8:d8:9c:5f:53:4f:e0:24:93:59:f8:08:fb:b6:
         24:00:57:50:1c:a9:4a:cf:da:cb:f0:62:04:12:7c:8e:11:a5:
         7b:f4:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:56 2025 by rpki-client