Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          Z0J+UfbWbJ2VVbrbVOP0Sx7am8nvbf25l/AZurGzqpI=
Subject key identifier:   94:B7:95:99:66:B8:07:75:DD:C2:84:60:82:F5:A7:5D:96:A9:C9:72
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       104BB8811E7FE733654FB2329B7F52A9D136A1FE
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:58:04 +0000
ROA not before:           Mon 19 Feb 2024 20:53:04 +0000
ROA not after:            Mon 17 Feb 2025 20:58:04 +0000
asID:                     267942
IP address blocks:        2804:5590:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4b:b8:81:1e:7f:e7:33:65:4f:b2:32:9b:7f:52:a9:d1:36:a1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:53:04 2024 GMT
            Not After : Feb 17 20:58:04 2025 GMT
        Subject: CN=94B7959966B80775DDC2846082F5A75D96A9C972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:d6:0d:4b:c5:6a:3f:c2:a4:c3:9c:3a:23:
                    61:a9:57:79:f4:3c:9f:ed:18:e4:62:53:fa:07:31:
                    30:df:37:d3:7d:c6:e7:97:9d:93:0a:f4:d0:32:f1:
                    d2:17:9a:d4:e0:d3:e1:0d:3a:7b:cb:95:c3:f7:b8:
                    98:45:e5:3b:09:42:33:f7:67:18:b5:ed:d9:3a:f2:
                    86:9e:60:6e:44:c0:77:df:ac:78:34:b3:7f:ef:fb:
                    d5:af:f9:0d:71:38:c8:2d:87:87:bb:f3:79:96:cc:
                    e4:24:4f:f0:1e:f1:74:f2:b4:da:ea:ec:2a:e8:42:
                    d9:3d:32:82:d3:9c:3a:3b:6c:92:ac:0d:a7:43:a0:
                    37:ae:c8:96:9b:16:42:82:1f:ae:69:4f:50:52:6b:
                    9b:d6:11:0b:9d:ac:b3:5f:a5:a7:f5:39:dc:92:1e:
                    ab:b6:16:d8:75:3c:7e:20:d5:18:51:dd:2f:e3:a9:
                    23:01:bc:f0:93:f8:92:5b:1c:ea:98:89:48:c4:94:
                    db:bb:8b:73:ae:d6:b2:b0:c8:c5:e9:77:46:13:4a:
                    bc:a6:3e:d7:a9:45:ce:b0:60:56:17:4c:ed:d4:cf:
                    e5:9a:8c:f5:f5:82:86:3c:3f:fa:49:c3:68:67:11:
                    9c:03:ce:ef:0c:d3:d5:0d:e7:2a:c2:f3:6f:83:85:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:95:99:66:B8:07:75:DD:C2:84:60:82:F5:A7:5D:96:A9:C9:72
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:83:18:50:92:18:79:e1:14:5e:2a:66:fb:b5:a8:a8:6a:43:
         be:1e:32:bd:c1:6f:b6:77:e3:51:a9:2e:b8:99:64:0f:15:ad:
         25:55:dc:52:59:3e:0d:33:01:63:23:e9:0a:b5:78:9c:e9:11:
         85:db:94:7e:10:58:eb:d0:1a:37:8c:d2:8a:cb:bd:a1:9b:9a:
         76:a7:82:1f:56:89:e7:5b:37:2c:09:aa:07:da:5a:bc:81:14:
         44:85:f4:d6:ff:b1:21:cf:39:52:da:7a:13:38:73:da:7e:ce:
         16:34:90:62:0d:f2:83:62:53:7d:ce:b6:4d:85:1b:e5:4d:1a:
         6e:d3:41:86:72:bc:bb:a4:03:ab:ab:bc:b5:34:b5:a7:cb:0f:
         c8:82:91:2f:99:81:7e:bb:b9:e9:6e:96:1d:3c:1a:cc:20:03:
         e5:d2:b5:d6:47:80:22:93:de:62:49:cf:a2:c4:fa:e4:42:ff:
         a3:e6:12:3d:48:35:f5:a1:58:30:cf:be:a9:f9:80:46:00:59:
         8b:3f:55:3f:25:a2:6d:f0:2e:d3:68:cd:5a:fc:9f:e7:68:da:
         d6:a9:1b:5a:8a:f1:c4:91:0e:72:2e:0c:90:25:7d:5e:1e:cc:
         4f:9c:44:65:2a:9b:22:63:ef:99:7b:32:56:1e:32:72:07:9a:
         5e:1a:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:40 2025 by rpki-client