Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa
File:                     323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa (raw, json)
Hash identifier:          ZDfATEtXYd9aNZcIwu9YCOnfpASu9mQxScQ07DE8mKY=
Subject key identifier:   69:B6:29:33:D9:A6:CD:B4:09:C6:47:65:EF:8E:F5:78:4F:61:2A:A7
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       7AF3ED73B3EBAA84DEAA0926C68132B30368683B
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa
Signing time:             Thu 18 Jan 2024 19:50:00 +0000
ROA not before:           Thu 18 Jan 2024 19:45:00 +0000
ROA not after:            Thu 16 Jan 2025 19:50:00 +0000
asID:                     265425
IP address blocks:        2804:33ec:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f3:ed:73:b3:eb:aa:84:de:aa:09:26:c6:81:32:b3:03:68:68:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Jan 18 19:45:00 2024 GMT
            Not After : Jan 16 19:50:00 2025 GMT
        Subject: CN=69B62933D9A6CDB409C64765EF8EF5784F612AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:05:71:3b:27:61:fc:26:a7:c9:6a:2d:3e:
                    d8:62:18:90:9e:27:63:9d:b0:93:0d:d6:c4:ae:55:
                    52:a6:27:89:73:6b:69:cd:41:cd:5b:74:cd:a2:c2:
                    12:49:f2:e0:b0:0d:1d:cb:57:56:96:d5:b6:42:19:
                    f2:aa:20:5f:ce:5f:a9:be:d3:c7:a5:06:18:87:b6:
                    1f:49:c5:09:3d:57:04:8f:11:99:56:f2:57:f8:e8:
                    93:dc:d5:5e:44:1c:d9:19:da:59:0b:1a:b9:46:74:
                    d2:e3:90:26:20:27:7a:f4:00:52:e4:f3:62:ed:98:
                    96:7b:df:17:d2:02:9f:17:17:fd:2f:c9:4f:24:d4:
                    c8:94:22:34:8e:13:30:4c:bb:fb:72:24:82:eb:66:
                    30:2a:f8:9e:36:72:b5:2f:ec:ba:cd:b1:98:43:92:
                    7c:50:06:2f:84:8b:16:c7:5d:8c:67:38:21:1d:d1:
                    75:1a:6b:33:9b:1d:97:e4:80:82:04:36:7b:a7:9c:
                    91:b3:c4:41:f9:3e:01:be:08:93:11:4c:57:7a:78:
                    f7:94:bb:8f:8b:92:a4:dd:38:12:e6:96:54:1e:09:
                    c2:82:59:93:ec:6e:9c:11:81:a1:6b:71:79:fb:4c:
                    9b:44:da:be:af:f9:cc:d8:c1:55:d4:19:57:2c:a7:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:29:33:D9:A6:CD:B4:09:C6:47:65:EF:8E:F5:78:4F:61:2A:A7
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:11:fd:95:47:e7:2d:d1:27:cc:89:08:de:e1:3a:6f:43:
         ec:da:b5:dd:68:91:45:91:78:f9:e2:64:1d:87:a2:18:a8:b8:
         7f:48:b9:0e:21:de:3b:5c:d6:16:e5:5c:3d:28:a1:c5:be:22:
         ed:13:18:8e:cc:46:9c:3c:60:c4:db:93:b2:25:f6:f7:0b:7e:
         cd:84:76:44:cf:f5:07:8d:30:2c:86:aa:75:3c:2b:e6:3a:5e:
         5c:4d:31:ad:1c:fc:f8:49:d5:69:34:02:c1:d4:4f:85:d0:b4:
         aa:c6:69:87:29:cb:4f:eb:5b:b0:f6:d3:95:9e:1f:0e:bf:c7:
         ce:fa:15:56:5b:75:09:6c:55:e8:93:8d:31:18:ad:c2:80:47:
         dd:26:10:05:50:b9:ae:f5:4f:da:0c:88:db:8c:4f:13:0d:2c:
         77:8f:e0:f2:da:fc:bc:00:aa:45:db:47:5f:47:e1:dd:36:79:
         69:1b:c9:f7:fb:01:ed:0e:9d:a1:98:a1:cd:9b:08:9f:bf:cc:
         b1:ca:23:2b:d6:68:20:b8:28:a7:ee:c0:32:2c:c5:45:a0:d7:
         0c:1a:7b:eb:f9:05:3a:31:f5:18:15:e2:19:9d:20:47:59:84:
         1f:82:d1:a6:4a:e4:81:75:cb:29:80:f3:9d:50:c0:3e:dc:37:
         89:98:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:43 2025 by rpki-client