Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/323830343a343738383a3a2f33322d3336203d3e20323637303630.roa
File:                     323830343a343738383a3a2f33322d3336203d3e20323637303630.roa (raw, json)
Hash identifier:          El+sNWa9Fyb9Ph1KGph0VvE7GAxIXcrXE0BgekhPg0s=
Subject key identifier:   E4:88:8A:57:98:01:47:1E:1B:48:E8:E2:67:D7:70:EF:25:6B:61:CF
Certificate issuer:       /CN=206195A3F31278D368CE482292CC9971A22AC833
Certificate serial:       03300883C94581C595AA2403D2133D395FC13DBF
Authority key identifier: 20:61:95:A3:F3:12:78:D3:68:CE:48:22:92:CC:99:71:A2:2A:C8:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206195A3F31278D368CE482292CC9971A22AC833.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/323830343a343738383a3a2f33322d3336203d3e20323637303630.roa
Signing time:             Wed 07 Feb 2024 14:51:06 +0000
ROA not before:           Wed 07 Feb 2024 14:46:06 +0000
ROA not after:            Wed 05 Feb 2025 14:51:06 +0000
asID:                     267060
IP address blocks:        2804:4788::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:30:08:83:c9:45:81:c5:95:aa:24:03:d2:13:3d:39:5f:c1:3d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206195A3F31278D368CE482292CC9971A22AC833
        Validity
            Not Before: Feb  7 14:46:06 2024 GMT
            Not After : Feb  5 14:51:06 2025 GMT
        Subject: CN=E4888A579801471E1B48E8E267D770EF256B61CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:c1:88:50:3a:c1:27:cf:9b:cb:0e:cc:97:
                    98:ba:21:3d:45:5c:0a:5e:4e:db:41:ad:72:6e:75:
                    a1:74:3b:e2:eb:af:d6:f1:c7:e5:eb:ad:3d:3a:6c:
                    3a:bd:26:59:18:33:33:25:9f:ca:50:2a:c4:a3:79:
                    00:28:d1:35:58:27:82:51:cf:e7:19:50:9c:da:a0:
                    03:42:3c:af:f6:43:5c:2d:72:31:de:b8:a5:33:ec:
                    52:7b:87:e5:35:10:42:f0:66:5e:9b:a2:d8:da:a0:
                    bc:75:96:67:8f:51:2c:46:cf:b5:41:6f:be:2f:71:
                    ac:5b:06:b7:20:0d:40:c7:de:63:e0:64:44:4e:1c:
                    96:c3:b0:84:26:89:2d:48:f0:08:49:a8:72:c8:be:
                    04:89:76:c0:8f:81:6c:0f:66:20:e9:19:62:8f:6e:
                    d5:42:0e:cd:f2:93:9e:3e:af:d1:94:64:3d:6c:15:
                    bc:66:eb:9e:9c:6b:20:9b:d4:c8:d8:58:6f:63:ff:
                    fd:9e:a3:68:6b:36:d1:c6:38:1c:d0:25:bd:71:7e:
                    3c:99:3e:2a:63:3a:82:c2:17:7b:d0:b0:5a:53:58:
                    e3:96:66:c0:b7:c9:f9:cf:c2:46:6a:a0:25:e7:2d:
                    b2:43:98:6a:57:cb:88:e2:d6:e6:c9:00:b7:c6:84:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:8A:57:98:01:47:1E:1B:48:E8:E2:67:D7:70:EF:25:6B:61:CF
            X509v3 Authority Key Identifier:
                keyid:20:61:95:A3:F3:12:78:D3:68:CE:48:22:92:CC:99:71:A2:2A:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206195A3F31278D368CE482292CC9971A22AC833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/323830343a343738383a3a2f33322d3336203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4788::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:e0:a4:bc:06:d5:86:e4:83:37:b9:5f:9b:4f:dc:f7:62:
         a6:06:81:19:ba:dc:62:4f:bb:c9:c0:e8:2c:ee:5d:b7:87:0b:
         9e:82:66:94:90:29:5f:69:79:cb:eb:fe:c2:96:2e:ef:51:36:
         0a:5b:f6:07:b6:6f:e3:14:b9:09:c4:aa:4f:5e:97:73:48:9e:
         52:f2:a0:23:17:97:02:9e:e1:2d:5e:da:9b:9f:61:41:8f:8a:
         94:c0:44:53:79:a9:ca:59:6a:08:bf:eb:3d:b7:49:6f:45:8d:
         9f:70:74:79:f0:7e:bb:33:ea:8c:d6:ad:be:6e:80:11:eb:a5:
         19:8a:72:44:e8:57:08:b5:a2:35:06:06:d6:37:5a:d4:98:f8:
         34:14:62:e4:bd:87:a2:f9:d6:19:24:25:5e:6b:b4:05:2e:02:
         16:9b:2d:f3:8f:fc:ab:93:bf:ec:24:d7:e5:8e:4d:fb:a6:c8:
         35:1d:aa:75:64:32:6f:b9:64:2d:79:42:43:b8:c4:bb:91:9d:
         2f:96:36:92:49:71:10:b6:e3:6f:1e:69:8c:0f:ce:e7:44:de:
         00:8d:64:e3:c2:24:c6:97:3f:1b:f5:d7:8f:72:b0:d9:f0:5a:
         ce:cc:8b:b8:f4:dc:16:3f:ff:81:12:9a:49:b4:81:ce:da:2a:
         56:f8:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:17 2025 by rpki-client