Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a363030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a363030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          aeBtWS+POaolBI4CdDKvMD3wQ2i0PRXqHS0Noq2om08=
Subject key identifier:   56:A9:8F:9C:65:E4:A9:76:D5:C5:06:91:24:86:FD:60:78:DA:FD:BD
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       6482069CDADCA9D49A1171D8C029A8A0C0626E08
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a363030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:42 +0000
ROA not before:           Sat 09 Dec 2023 12:58:42 +0000
ROA not after:            Sat 07 Dec 2024 13:03:42 +0000
asID:                     61717
IP address blocks:        2804:1b44:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:82:06:9c:da:dc:a9:d4:9a:11:71:d8:c0:29:a8:a0:c0:62:6e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:42 2023 GMT
            Not After : Dec  7 13:03:42 2024 GMT
        Subject: CN=56A98F9C65E4A976D5C506912486FD6078DAFDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:73:c6:23:c2:f2:63:ee:01:1e:07:1b:cb:
                    51:9b:18:b8:79:2e:13:50:36:db:b0:8d:71:8e:c2:
                    cb:e4:e1:65:33:3b:d3:a4:a5:a1:4a:a9:4e:79:40:
                    f0:0d:28:72:17:f9:b3:39:86:8a:49:a7:f9:94:86:
                    ae:e5:44:f2:db:b8:03:b6:c2:e6:2e:da:15:ee:fe:
                    dc:0a:72:4e:ec:17:db:57:9a:c8:cc:62:0e:4f:6f:
                    6b:fe:04:38:94:47:5c:82:c9:4f:bc:31:67:61:10:
                    f2:be:1b:aa:67:27:a8:9b:96:f3:b1:c9:35:0e:59:
                    54:d5:68:0f:43:db:50:b3:d5:a9:31:53:f0:10:4d:
                    0f:27:94:89:f3:47:76:c6:5c:7c:12:9f:e7:0e:7d:
                    b3:72:0b:69:31:2d:8f:ae:8f:bb:7a:81:2c:9c:ba:
                    1a:e2:58:7e:cb:ba:cf:df:40:98:e8:44:85:b5:41:
                    49:20:3b:dd:bf:8f:61:a4:b5:60:bf:5f:78:66:01:
                    0c:cb:1c:0d:6f:6f:79:91:d5:65:8b:d6:41:95:04:
                    4c:ad:b7:61:15:0a:0a:c6:f4:8c:5c:12:f8:96:bc:
                    23:eb:03:10:dc:8e:f9:e0:28:59:f6:e8:6c:ba:69:
                    af:66:79:16:3e:81:b5:6b:32:2b:8f:48:2e:39:2e:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:8F:9C:65:E4:A9:76:D5:C5:06:91:24:86:FD:60:78:DA:FD:BD
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a363030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b0:ce:ac:41:df:b2:02:ec:2e:93:92:16:58:8b:29:63:8a:ae:
         52:ba:db:a6:0a:77:4f:7d:26:5a:7f:2f:a2:2e:f0:ae:09:1e:
         f9:45:5a:1a:2e:2a:83:36:fd:44:88:c5:db:9a:9c:e6:8c:fd:
         01:a7:a2:09:2f:60:e4:5e:92:c7:70:bb:ec:cf:6d:de:49:7c:
         41:91:c1:ae:28:80:ed:a8:0d:8f:1c:32:d9:a5:e8:da:74:1e:
         da:99:53:13:70:27:0a:32:bc:9b:f0:6e:fd:4a:12:9c:e7:0b:
         00:1e:14:d0:f6:3d:39:5c:1c:7f:b4:d0:8c:fe:b8:07:1d:7b:
         3a:d3:16:97:94:a7:e4:89:a0:53:53:6d:c6:62:49:58:f7:eb:
         bb:eb:12:5d:c9:9d:dc:67:45:ce:64:ca:5b:98:0f:ae:d4:c1:
         be:5f:2f:65:26:10:43:6a:1e:8f:cc:79:cc:0f:39:49:4a:64:
         d1:8a:18:2f:b2:1d:dd:93:96:b8:1a:14:bd:5c:2a:31:d2:00:
         96:54:12:c0:91:41:d4:23:eb:7e:1a:0f:6d:4e:ef:b0:9c:06:
         2a:a1:e5:9f:7b:ae:c4:fd:ed:07:e8:29:9e:c7:7a:a0:42:d5:
         49:4f:53:64:2c:b9:de:16:02:04:80:a7:1c:e7:c6:46:d4:db:
         c7:87:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:56 2025 by rpki-client