Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d3438203d3e20323638313535.roa
File:                     323830343a353865303a3a2f33322d3438203d3e20323638313535.roa (raw, json)
Hash identifier:          pKz7irREMplGRNkwxBMjfJfoHQKsLiuZbTgMBfwz/gE=
Subject key identifier:   58:67:F0:4F:09:9A:24:B0:71:01:66:9E:19:DA:7C:E4:4C:36:3A:A3
Certificate issuer:       /CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
Certificate serial:       5A920040060BDB141E4A9BF8EA6475FC4D017ADF
Authority key identifier: 98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d3438203d3e20323638313535.roa
Signing time:             Sat 02 Oct 2021 17:28:19 +0000
ROA not before:           Sat 02 Oct 2021 17:23:19 +0000
ROA not after:            Sat 01 Oct 2022 17:28:19 +0000
asID:                     268155
IP address blocks:        2804:58e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:92:00:40:06:0b:db:14:1e:4a:9b:f8:ea:64:75:fc:4d:01:7a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
        Validity
            Not Before: Oct  2 17:23:19 2021 GMT
            Not After : Oct  1 17:28:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c3:13:f2:7c:1d:45:07:a7:99:24:fd:e1:70:
                    8b:e6:ba:8e:7f:f0:30:ed:ab:e2:94:56:cd:15:b5:
                    07:ec:a4:f0:6f:4f:4d:5b:5b:61:47:e0:a0:40:b5:
                    a6:0d:c3:12:b8:f2:5c:39:1c:4c:64:13:7f:5b:5a:
                    42:7a:f5:21:cd:8c:0d:e2:ff:02:2a:4b:bb:70:ce:
                    04:8c:45:27:1a:0a:a8:2b:64:22:e1:9b:43:ee:ff:
                    92:b3:fe:4e:0b:8d:c3:c1:ca:4b:39:ce:f9:63:a3:
                    1c:6a:91:eb:2e:24:19:57:c2:b1:a6:39:ba:65:f6:
                    85:92:5e:88:6e:fc:f9:54:9a:5c:54:8f:fd:0f:f5:
                    ee:79:67:68:f7:e4:c1:da:ad:c6:2a:b7:c6:47:2d:
                    6c:0f:6d:af:62:fc:47:17:ae:b0:67:04:df:44:2c:
                    d8:d1:37:d8:e7:5b:f4:3f:1c:8c:ef:10:f3:ae:cd:
                    46:11:9b:e7:13:aa:28:76:f2:26:76:e7:b6:c8:0c:
                    d5:b5:0d:08:2c:2f:26:d7:d0:01:8b:2a:11:5d:da:
                    dc:c1:b9:32:cc:39:e5:07:c4:f5:77:77:2b:0b:54:
                    f4:6c:51:0b:06:c7:b4:d3:52:8f:07:c7:84:79:68:
                    f9:df:47:0b:04:02:02:e5:74:2c:a1:b0:2d:d2:db:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:F0:4F:09:9A:24:B0:71:01:66:9E:19:DA:7C:E4:4C:36:3A:A3
            X509v3 Authority Key Identifier:
                keyid:98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d3438203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:73:41:3b:9a:75:af:80:c5:47:e9:34:f3:85:ed:0c:c8:fb:
         12:33:bf:31:2d:31:d2:00:77:3d:f5:56:83:67:be:87:e8:45:
         d1:47:d6:70:1d:16:5b:73:93:d2:5b:e0:f1:b4:21:9d:fb:b1:
         f2:a3:5d:fb:7d:c4:dc:ba:be:69:06:cf:2c:d8:2e:6f:08:42:
         31:ce:60:82:57:f7:9f:58:13:4b:17:95:cf:84:ac:24:63:8b:
         4d:84:ac:4e:2a:7e:24:c6:89:f9:8b:f3:5c:d9:44:5b:62:95:
         53:b8:a4:01:ee:fe:b4:e1:66:da:2b:d8:e5:ba:3c:3c:ea:9a:
         a2:66:c3:ec:fa:3d:50:0d:12:24:e7:55:94:d0:b3:62:36:93:
         dc:42:0e:64:48:52:44:9b:a8:df:09:50:78:f6:f0:d1:ac:bf:
         95:d1:8d:1e:49:37:f0:09:46:c5:2d:50:65:96:50:dc:93:17:
         21:88:39:70:3c:0f:0b:1b:4e:52:eb:a2:60:02:33:b2:c8:65:
         ad:19:bd:0e:eb:60:a4:0f:83:a1:ad:8c:2c:44:d1:b5:9f:e1:
         de:8d:e1:60:d9:2d:bf:dd:31:54:b3:e8:c2:18:eb:46:32:c2:
         ce:3a:d5:ae:57:74:33:fc:0f:b6:91:eb:83:77:49:f8:33:08:
         91:75:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:02:04 2025 by rpki-client