Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33332d3333203d3e20323634393135.roa
File:                     323830343a326664383a3a2f33332d3333203d3e20323634393135.roa (raw, json)
Hash identifier:          /datAvlEEpRiZKDMeyL/qI9DDAcn5WeRnSZJxRrmEn8=
Subject key identifier:   B1:86:57:7D:FD:AE:ED:C5:C4:60:9A:63:EF:C1:78:8E:69:16:78:CA
Certificate issuer:       /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial:       3DADDA94BBB0DD9B9A220D69A22F0CB8BFA26401
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33332d3333203d3e20323634393135.roa
Signing time:             Tue 13 Feb 2024 15:52:44 +0000
ROA not before:           Tue 13 Feb 2024 15:47:44 +0000
ROA not after:            Tue 11 Feb 2025 15:52:44 +0000
asID:                     264915
IP address blocks:        2804:2fd8::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ad:da:94:bb:b0:dd:9b:9a:22:0d:69:a2:2f:0c:b8:bf:a2:64:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
        Validity
            Not Before: Feb 13 15:47:44 2024 GMT
            Not After : Feb 11 15:52:44 2025 GMT
        Subject: CN=B186577DFDAEEDC5C4609A63EFC1788E691678CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:04:60:73:0b:66:9c:23:68:f6:e2:15:08:
                    26:35:5b:5a:86:58:4c:b9:24:72:15:40:9a:73:20:
                    ff:dd:75:32:92:b9:7e:18:32:47:0b:5f:32:ad:7f:
                    ee:25:a9:da:4c:35:75:ee:26:4d:3f:8f:45:9d:13:
                    20:02:30:32:ea:cc:7d:df:80:5b:b6:b5:30:bf:8e:
                    d5:6e:69:fc:50:bc:5e:b6:cf:bf:74:06:0b:37:61:
                    b3:02:61:3a:f2:fa:59:2a:a3:e6:77:97:e9:c4:ae:
                    27:25:ca:29:75:12:3d:7d:1a:b9:66:c5:89:58:e6:
                    20:dd:16:bd:86:53:44:1d:f8:c9:be:98:d1:c9:ef:
                    a5:bc:75:b6:a3:44:af:68:c1:cf:61:09:f8:e1:a2:
                    1d:2d:32:d6:4d:58:dc:88:48:16:13:19:26:28:b7:
                    40:70:69:f6:4b:58:55:1f:5f:b4:82:75:66:96:94:
                    d4:57:0a:a8:b1:af:12:a4:40:c8:c0:6e:80:e8:d4:
                    06:ec:41:bd:d4:f7:99:6c:31:39:5a:a0:62:ea:b0:
                    4b:ed:59:31:c5:6d:c5:94:79:3f:f0:0c:92:74:df:
                    15:7e:3a:ad:39:29:42:40:a3:62:67:5b:4e:6b:b3:
                    a7:44:cb:73:45:1f:b0:29:50:b4:24:cc:cd:5c:d1:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:86:57:7D:FD:AE:ED:C5:C4:60:9A:63:EF:C1:78:8E:69:16:78:CA
            X509v3 Authority Key Identifier:
                keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33332d3333203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:48:56:de:cc:eb:61:1c:03:14:c1:2d:31:ea:e5:4b:a7:12:
         c1:a1:d9:e0:52:96:31:a7:13:0e:ee:ab:ad:43:7c:6f:7c:1f:
         17:78:f5:21:9a:5f:67:c5:b1:5b:08:7c:dc:d3:08:60:eb:39:
         76:9a:94:c0:f5:c4:47:97:6d:22:23:f0:ed:79:18:12:e2:07:
         39:66:87:9b:0e:16:e0:21:4f:68:63:ea:2e:ea:b3:8f:91:03:
         12:cf:a8:08:e0:e9:1e:ed:12:d3:e9:47:3c:ea:1f:1e:95:e3:
         54:67:f9:66:83:43:08:6d:4b:a5:4a:5f:98:60:98:fa:17:30:
         df:1c:0f:49:28:cf:73:c0:ed:60:12:e7:08:cd:c2:c3:1e:d3:
         5c:c2:ae:1d:d3:a4:1a:74:6c:ca:e8:49:51:45:aa:e0:4d:68:
         7e:73:f3:48:fb:4d:8f:4b:12:ef:94:43:ca:d3:3e:f2:11:8d:
         75:74:8f:04:30:34:4f:15:f8:68:49:05:18:6f:f6:d3:ce:c1:
         50:e9:b5:c1:dd:b3:b8:54:d2:fe:e0:30:c2:f8:1c:42:17:75:
         b5:29:22:85:05:15:fd:71:c9:40:9e:1a:56:6e:5b:c9:a4:7b:
         22:72:c8:aa:42:a6:28:ea:ca:60:99:82:e7:84:65:4f:59:d6:
         0d:d6:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:45 2025 by rpki-client