Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa
File:                     323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa (raw, json)
Hash identifier:          tTvxxvvHtBgSsnlaCyQaHwQsvKv6J4y1o0txwiCElXY=
Subject key identifier:   E3:5A:F8:E2:F9:B3:8D:8E:12:D0:D7:92:AE:43:79:BF:1E:5F:5F:D8
Certificate issuer:       /CN=692E5389B43EC82E803E641336341B3122E298F3
Certificate serial:       1274D03F80A626FA2254F864A5FE08E52728549C
Authority key identifier: 69:2E:53:89:B4:3E:C8:2E:80:3E:64:13:36:34:1B:31:22:E2:98:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692E5389B43EC82E803E641336341B3122E298F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa
Signing time:             Wed 17 Jan 2024 14:28:08 +0000
ROA not before:           Wed 17 Jan 2024 14:23:08 +0000
ROA not after:            Wed 15 Jan 2025 14:28:08 +0000
asID:                     270989
IP address blocks:        2804:7490:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:74:d0:3f:80:a6:26:fa:22:54:f8:64:a5:fe:08:e5:27:28:54:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692E5389B43EC82E803E641336341B3122E298F3
        Validity
            Not Before: Jan 17 14:23:08 2024 GMT
            Not After : Jan 15 14:28:08 2025 GMT
        Subject: CN=E35AF8E2F9B38D8E12D0D792AE4379BF1E5F5FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:78:20:d9:42:8f:a6:6b:a3:86:b8:35:f7:
                    3c:03:6c:33:12:31:51:1b:81:a3:3a:19:07:c1:60:
                    1d:e4:70:e6:83:91:0a:40:7b:f9:72:d9:5b:cb:be:
                    3f:4f:8f:23:dd:64:b1:88:e3:98:f8:ee:07:d1:b5:
                    73:92:18:11:ee:70:09:9d:cc:aa:f7:62:58:41:c3:
                    3d:8e:2a:1a:97:61:6e:6b:bf:d9:e7:bf:d4:d9:d8:
                    fe:e6:68:f4:60:c2:95:3a:63:58:3e:e0:9d:c3:a4:
                    ab:ac:a0:a7:5a:f9:5d:a3:e0:5c:72:8d:3c:87:0e:
                    7a:28:24:82:82:01:0b:35:8f:29:34:ca:f8:fd:26:
                    75:14:82:12:ef:9b:a8:a3:08:de:3d:06:32:11:08:
                    40:f3:96:54:91:d7:6f:f8:07:27:29:2d:9c:70:07:
                    21:ec:d3:48:a7:52:58:ad:64:07:af:2b:b0:b3:d9:
                    ea:c2:56:ab:da:cd:1c:3b:0b:ae:55:01:19:8b:3f:
                    75:fa:0c:7c:bc:0c:88:05:9b:57:78:10:76:b8:54:
                    be:62:a3:84:4d:76:07:c6:f2:7b:f5:20:4b:6b:14:
                    71:c4:c4:27:52:3e:10:66:9e:d4:66:a1:7a:68:aa:
                    15:4e:f9:f1:3f:ef:ed:2c:b2:2d:63:44:13:22:df:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5A:F8:E2:F9:B3:8D:8E:12:D0:D7:92:AE:43:79:BF:1E:5F:5F:D8
            X509v3 Authority Key Identifier:
                keyid:69:2E:53:89:B4:3E:C8:2E:80:3E:64:13:36:34:1B:31:22:E2:98:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/692E5389B43EC82E803E641336341B3122E298F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692E5389B43EC82E803E641336341B3122E298F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:39:06:e1:36:db:cc:9a:34:fe:0d:c5:af:40:80:fa:6b:
         9c:80:06:98:05:80:a0:02:3c:72:2f:b7:f6:79:88:7d:55:7c:
         ac:e3:ef:50:e4:5a:88:65:62:71:33:60:f1:64:75:91:b2:11:
         ce:d9:d2:33:3a:6e:e3:f5:aa:6a:c5:5f:26:88:88:29:12:ee:
         8a:e3:b3:9b:78:c3:79:d1:09:e8:0f:6f:3b:22:78:1c:f3:43:
         48:b2:2f:07:e7:37:5a:4e:c4:65:7a:3c:cb:d2:ff:64:63:c6:
         cc:38:30:ef:b9:d8:22:ca:72:f5:0f:74:95:74:54:92:64:76:
         8b:7d:66:3a:da:6e:77:73:41:3e:21:29:0f:9c:f2:61:34:d5:
         45:7e:19:7a:a3:cf:a5:21:fd:c9:6f:12:9c:e0:58:cc:18:a0:
         01:d6:9f:ad:6c:9a:05:a9:e6:57:af:58:02:ed:e0:6a:dc:ad:
         cb:02:8b:35:b9:d5:9f:b5:83:ce:ab:d2:88:df:6a:18:d4:47:
         46:ed:9e:70:e8:fc:11:ae:e0:1f:4d:a9:7e:95:09:e9:96:50:
         3f:af:c7:ab:3f:2e:84:43:1e:8f:94:23:26:d6:5a:ec:ca:b9:
         00:a4:70:47:89:03:8d:2d:1b:19:8e:47:9e:4c:87:03:94:dd:
         6d:d9:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:51 2025 by rpki-client