Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33322d3332203d3e20323638363738.roa (raw, json)
Hash identifier:          4nxXp0sQ5qIDUmvyp8zBSWEkgCT//pjRxCWxJOuhT/8=
Subject key identifier:   33:07:7C:B4:DB:54:8C:07:DB:4B:73:9B:02:C6:27:8C:8C:A5:2F:B3
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       7B2B1F8E7AD47089E4399000F423620C5C801423
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:23:57 +0000
ROA not before:           Tue 30 Jul 2024 12:18:57 +0000
ROA not after:            Tue 29 Jul 2025 12:23:57 +0000
asID:                     268678
IP address blocks:        2804:54ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2b:1f:8e:7a:d4:70:89:e4:39:90:00:f4:23:62:0c:5c:80:14:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:18:57 2024 GMT
            Not After : Jul 29 12:23:57 2025 GMT
        Subject: CN=33077CB4DB548C07DB4B739B02C6278C8CA52FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:eb:dd:9b:81:81:9a:65:75:a0:4a:33:4c:
                    93:67:aa:5f:99:57:6f:a7:32:27:38:53:7f:0d:0f:
                    2d:3d:98:49:01:83:42:80:58:21:e0:e1:a2:ca:4d:
                    75:ae:c1:94:1f:f1:bf:fc:b8:2b:d7:3f:f3:04:46:
                    58:5a:9f:d3:9e:3c:bd:e9:15:ad:39:0b:21:96:5c:
                    70:02:86:73:dc:c7:c1:02:a3:81:19:80:fd:27:9f:
                    27:42:24:8e:ef:97:ff:40:cf:d6:48:11:e2:ba:bb:
                    56:94:02:c7:4b:b8:02:85:32:9a:00:76:82:e8:02:
                    1c:e6:77:39:71:e9:59:af:51:c5:8b:ef:b2:7a:72:
                    69:35:7a:c8:0c:e5:11:32:8a:9a:59:c4:4d:b3:7e:
                    a3:b8:9b:ce:37:87:8d:00:56:6d:c9:60:d6:0f:d2:
                    69:3c:d5:4c:dc:c5:93:b9:29:0f:59:1e:6f:d2:60:
                    4f:90:d5:53:e4:dc:c8:e7:cc:75:10:0f:bf:65:ed:
                    76:1b:7e:f9:c6:72:1b:6c:11:5f:4a:7b:52:e1:37:
                    fa:4a:8d:75:9c:33:d5:79:58:d9:d6:cc:71:b4:20:
                    c4:2e:58:9a:25:69:dd:3b:6c:72:ee:d9:70:7b:5e:
                    04:e0:76:0f:e6:27:db:8f:76:b5:4a:f5:32:11:ac:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:7C:B4:DB:54:8C:07:DB:4B:73:9B:02:C6:27:8C:8C:A5:2F:B3
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:02:40:26:15:b2:9b:3b:43:73:74:ce:93:a7:d7:61:ee:fe:
         9b:a7:32:55:05:7a:bc:09:9d:7e:18:dc:37:86:a9:ef:17:3c:
         7e:2d:81:3d:a6:cf:fc:1a:83:40:ed:75:37:b5:25:63:ba:c0:
         5e:fa:ad:2c:b7:06:8b:40:2d:9e:ab:32:f7:5a:51:c0:69:38:
         56:29:85:e3:10:0e:53:6c:88:fe:1c:de:b7:e3:b7:59:e9:19:
         f1:23:da:c7:e2:0c:4a:c3:c7:ee:3d:00:41:a2:8b:3a:b8:9f:
         b1:19:58:11:51:bc:df:6e:a8:ca:3b:fc:47:83:6d:b3:72:ba:
         9b:b4:ca:06:c7:a3:f1:75:b0:bb:99:ce:89:5a:33:3d:12:3c:
         75:90:f5:a1:1f:4a:f6:79:aa:b3:a2:8a:1f:0c:dc:42:27:fe:
         33:d1:7f:90:b9:2c:67:d8:39:c3:12:f2:fb:9f:4d:ce:b4:a7:
         99:e4:41:84:2f:e6:c9:d3:d7:6a:c6:d0:9b:d6:39:8a:a5:3d:
         86:43:71:43:85:2f:52:82:11:31:38:ee:62:7f:69:ef:5f:cc:
         9e:f9:c6:2a:11:40:39:20:5d:7e:2e:4a:ea:2c:7a:c1:13:26:
         11:93:05:70:c3:3f:ef:12:d6:6b:e1:dc:30:4a:6b:56:72:c1:
         78:70:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:05 2025 by rpki-client