Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          muIYnBO8HOIa1aMXPw2qhXe0+t+o9z1qcN/03H/5WVw=
Subject key identifier:   04:27:E0:00:75:C2:A6:39:FA:01:F4:75:E2:04:D5:E7:6F:FB:DE:FE
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       37B2F27134B886B44F91B328558BCE3B0656A98B
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:58:32 +0000
ROA not before:           Mon 19 Feb 2024 20:53:32 +0000
ROA not after:            Mon 17 Feb 2025 20:58:32 +0000
asID:                     267942
IP address blocks:        2804:5590:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:f2:71:34:b8:86:b4:4f:91:b3:28:55:8b:ce:3b:06:56:a9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:53:32 2024 GMT
            Not After : Feb 17 20:58:32 2025 GMT
        Subject: CN=0427E00075C2A639FA01F475E204D5E76FFBDEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:78:78:d7:bc:e6:18:d4:ed:9c:0f:17:b8:
                    0b:6e:03:75:d3:8f:a3:b1:24:2f:ae:04:68:7e:6f:
                    8e:6d:b2:7b:c7:8f:56:3a:f3:c6:9f:a6:f8:96:26:
                    94:e6:0a:57:11:9e:c9:bb:d1:79:77:60:12:e1:3f:
                    f9:d3:6e:9e:51:28:0a:37:75:1a:fc:b0:42:ff:de:
                    e4:2e:00:85:95:97:41:e2:54:cb:28:ea:38:47:25:
                    01:48:fe:a3:5b:0a:18:7a:30:78:75:f7:0f:08:b1:
                    11:59:9f:b6:0f:15:d1:7e:2e:56:33:2c:ff:36:03:
                    f6:90:fa:c5:9d:12:76:54:fd:b1:d2:d7:00:c3:bc:
                    cd:13:b9:93:9d:13:04:7a:ba:27:6f:b7:cd:4e:ba:
                    51:17:88:22:73:99:b9:3f:6c:2e:d0:83:9b:29:80:
                    4c:ec:04:3a:77:29:8e:5d:f2:e8:18:5e:80:30:45:
                    11:4b:72:82:46:5e:88:fc:2d:54:dc:5f:cb:b3:00:
                    ba:bc:6f:1c:ab:f5:23:91:88:7e:34:3d:46:97:d7:
                    62:e9:c2:93:20:34:85:a3:f6:c3:0f:c6:c9:66:70:
                    e6:ef:ac:2d:87:78:60:c8:56:7d:5c:dd:9b:05:2f:
                    e1:86:4d:9d:82:3f:26:4f:dd:0a:ae:48:17:57:8c:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:27:E0:00:75:C2:A6:39:FA:01:F4:75:E2:04:D5:E7:6F:FB:DE:FE
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:77:d0:53:62:c5:fa:6c:ec:86:fe:c3:8f:50:c1:eb:be:
         38:48:52:6f:f7:25:a4:14:db:94:12:ce:87:f1:8e:b8:51:00:
         cd:0b:cd:a1:e6:16:17:91:c8:d6:5e:f0:8d:88:8f:e4:00:a1:
         f5:56:09:64:35:be:4a:82:62:93:bc:fb:1a:9c:a2:e8:f2:37:
         52:26:19:96:4a:de:d0:cd:ff:2a:1a:1b:ff:f5:aa:90:4f:c1:
         3a:0d:fc:6b:b1:19:0c:09:7d:de:19:e5:4f:a9:8d:1e:8b:ab:
         b1:5c:b1:6c:f3:0c:ec:d7:7e:46:cf:20:cf:c2:53:84:dc:8b:
         c2:cb:43:d3:80:ef:82:e5:16:41:9d:e0:1a:a5:e9:86:04:cc:
         3c:fd:d0:ff:9a:2c:06:05:7b:9e:e4:ec:43:dc:78:38:09:d2:
         7b:c3:2c:a2:5f:39:9c:dd:72:21:d0:66:7a:33:95:fc:a3:1f:
         8c:ae:7d:59:9c:b1:6f:62:c4:a2:cc:b8:aa:77:0b:92:0c:e9:
         32:58:49:4d:65:64:7f:0a:e3:3e:02:b3:91:81:04:68:9c:b8:
         a7:5c:23:b4:7c:67:ab:55:e9:ac:59:47:6b:84:ef:a1:87:f3:
         e2:43:5d:a7:a6:a7:20:cd:23:80:e0:1a:40:4f:8b:5e:ac:25:
         96:1c:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:04 2025 by rpki-client