Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a383030303a3a2f33342d3334203d3e203238363536.roa
File:                     323830343a333363633a383030303a3a2f33342d3334203d3e203238363536.roa (raw, json)
Hash identifier:          Yten4D3QObdY+gY4OmDPd+QZBZWPsCetOMJSHq/0E8Q=
Subject key identifier:   81:D5:D7:63:71:51:8D:E1:EC:48:0C:B5:05:BF:45:C4:E1:3D:11:55
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       7921188661A7ECBBA3A6F7DDC62FFB45893E915B
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a383030303a3a2f33342d3334203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 17:59:36 +0000
ROA not before:           Sun 19 Mar 2023 17:54:36 +0000
ROA not after:            Sun 17 Mar 2024 17:59:36 +0000
asID:                     28656
IP address blocks:        2804:33cc:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:18:86:61:a7:ec:bb:a3:a6:f7:dd:c6:2f:fb:45:89:3e:91:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 17:54:36 2023 GMT
            Not After : Mar 17 17:59:36 2024 GMT
        Subject: CN=81D5D76371518DE1EC480CB505BF45C4E13D1155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:05:e9:98:a6:61:00:c4:c5:0a:68:70:de:
                    82:41:d2:82:ab:2c:ff:a3:7d:a7:7e:ae:cd:28:41:
                    d1:f7:ac:55:6c:08:83:5e:65:62:84:93:b7:a9:c2:
                    ea:be:b9:6c:51:2c:ac:9d:51:1c:d7:36:b9:1f:b8:
                    b6:fc:2f:9b:5a:c9:d2:a2:a1:bf:b2:43:77:ac:0b:
                    c9:9a:0f:8f:33:f8:80:49:e6:ee:fd:7f:36:2e:9a:
                    18:81:55:2f:89:6e:91:93:9a:75:a3:07:40:0b:e9:
                    03:1b:18:1c:8d:b0:c2:21:8c:be:a1:ca:bb:89:eb:
                    ef:b9:82:96:0c:03:5b:5a:17:79:df:78:e8:78:81:
                    86:a4:9c:c6:81:db:12:92:51:23:46:fb:a7:3c:f2:
                    de:26:46:a4:f1:a3:b8:2e:80:4a:9c:a7:5f:91:36:
                    fd:bb:f1:7c:21:76:3a:db:17:c8:42:f0:b4:8a:c1:
                    f6:36:60:b4:a3:a2:3e:7e:00:1b:a0:e7:e1:bc:f7:
                    f2:92:20:33:08:a5:76:ca:b9:e5:5d:dd:a3:08:59:
                    66:43:fa:a4:bd:da:5e:c5:95:07:09:0e:48:f4:ea:
                    f3:92:ef:6a:db:fd:2b:08:77:51:bb:59:a1:4c:fa:
                    06:68:63:f7:0c:7d:4d:c6:16:15:36:22:a5:f6:03:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D5:D7:63:71:51:8D:E1:EC:48:0C:B5:05:BF:45:C4:E1:3D:11:55
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a383030303a3a2f33342d3334203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33cc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:d3:18:e9:d1:5f:94:24:bc:8c:b7:3d:fb:01:4f:81:38:d0:
         e9:b0:1f:3f:89:c8:3c:af:04:68:84:3a:de:7b:f1:fa:8c:ab:
         bc:dc:0d:8a:59:ea:87:84:06:37:b0:43:f5:1c:1c:d5:45:9c:
         44:55:fb:b8:3c:c0:79:dd:58:0e:f4:c3:d4:c3:92:16:5b:cb:
         65:9f:2b:62:36:b3:8b:96:36:ad:e2:a7:d6:c2:96:e6:dc:80:
         39:d0:bd:c1:40:c7:35:90:36:61:59:1d:09:a3:ed:3e:61:06:
         a8:ff:bc:82:a2:c7:89:0a:22:69:ec:5a:20:04:ea:31:c0:70:
         d3:96:56:0a:fe:66:9b:2b:41:96:ba:c4:30:de:5a:b5:16:46:
         d6:04:4b:5d:97:45:fb:71:16:ae:f8:a2:55:cb:39:17:0e:b0:
         65:5b:b9:e4:72:73:38:b6:4d:49:e4:7b:8d:d1:1d:50:57:12:
         16:24:88:b4:6e:ae:b8:e9:28:99:31:86:c7:7f:a1:a2:28:aa:
         57:fb:bc:55:99:ef:b8:11:b3:02:72:3b:87:d7:b1:9f:d7:eb:
         bd:77:62:37:2f:cc:ce:c4:41:30:a1:ef:d9:00:b0:1a:05:15:
         67:af:51:53:cf:3a:a4:62:5f:69:df:5f:ee:ff:86:04:98:0a:
         d3:29:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:13 2025 by rpki-client