Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3430203d3e20323636393631.roa
File:                     323830343a343630303a3a2f33322d3430203d3e20323636393631.roa (raw, json)
Hash identifier:          qCXVEGzOMWe5TsUC1MpORxvZckdv/+wlb5CuOFMAYao=
Subject key identifier:   39:6F:CB:57:7C:67:70:F9:1F:05:84:92:0C:4A:96:5A:D6:DA:EA:26
Certificate issuer:       /CN=292B3551658387A06B4D370FC9E211E696A15EB4
Certificate serial:       0E6DCEB44D9235F7972FFBD7CED8C0D647A1246E
Authority key identifier: 29:2B:35:51:65:83:87:A0:6B:4D:37:0F:C9:E2:11:E6:96:A1:5E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/292B3551658387A06B4D370FC9E211E696A15EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3430203d3e20323636393631.roa
Signing time:             Fri 29 Nov 2024 13:04:03 +0000
ROA not before:           Fri 29 Nov 2024 12:59:03 +0000
ROA not after:            Fri 28 Nov 2025 13:04:03 +0000
asID:                     266961
IP address blocks:        2804:4600::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6d:ce:b4:4d:92:35:f7:97:2f:fb:d7:ce:d8:c0:d6:47:a1:24:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292B3551658387A06B4D370FC9E211E696A15EB4
        Validity
            Not Before: Nov 29 12:59:03 2024 GMT
            Not After : Nov 28 13:04:03 2025 GMT
        Subject: CN=396FCB577C6770F91F0584920C4A965AD6DAEA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:cf:cb:56:d6:af:a8:a5:89:54:8e:ec:aa:
                    ac:35:c7:a8:6b:d5:f4:96:dd:fc:6d:95:88:8c:64:
                    e0:fa:a0:a8:a7:83:56:fe:5c:e7:ae:f1:a5:8a:c8:
                    a6:11:eb:22:f0:88:bc:e7:56:d2:dd:cb:21:15:fa:
                    7d:26:5a:cd:19:37:0b:8c:87:68:e4:d4:92:33:4b:
                    18:bd:55:32:29:a8:45:83:7a:fe:30:4a:04:da:0e:
                    ab:af:29:a5:e6:fb:9b:39:a6:8e:ee:f6:ff:c0:a8:
                    a9:ac:56:ff:1c:6c:e8:fd:23:ed:ca:d5:9f:e7:53:
                    51:85:bf:ea:b2:48:be:99:fe:5e:30:00:2c:a4:5e:
                    70:ca:4a:39:8d:de:be:0a:25:e1:0a:11:ee:71:a9:
                    e3:50:b5:56:b1:05:9f:54:5a:03:16:dc:b0:93:84:
                    dc:8e:f7:11:55:c9:52:08:84:2e:5e:e0:c1:98:83:
                    7e:ee:3e:5d:51:d1:8d:7e:81:07:e4:ed:0a:5c:94:
                    4c:57:a5:1f:4c:37:92:77:26:df:81:17:a3:27:25:
                    47:7a:cc:15:31:33:1b:34:05:c2:0f:83:4d:ac:3c:
                    12:3d:08:25:a4:fd:13:da:12:4d:71:56:b3:21:25:
                    af:fe:e5:ae:2f:c8:e8:b9:a0:65:a4:e1:f9:36:14:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:CB:57:7C:67:70:F9:1F:05:84:92:0C:4A:96:5A:D6:DA:EA:26
            X509v3 Authority Key Identifier:
                keyid:29:2B:35:51:65:83:87:A0:6B:4D:37:0F:C9:E2:11:E6:96:A1:5E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/292B3551658387A06B4D370FC9E211E696A15EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/292B3551658387A06B4D370FC9E211E696A15EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3430203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:f9:60:b6:79:bf:54:bb:62:e9:c8:e1:15:b6:1e:5a:64:
         61:dc:60:76:18:1a:4f:17:17:dd:59:e2:f3:58:f9:e2:ac:d8:
         02:6d:45:9f:20:bb:10:a1:60:3c:8f:e6:3d:6c:8c:92:13:93:
         1f:1a:fd:51:64:7d:78:8c:b4:a3:c0:7d:e0:ac:cf:a1:f0:68:
         4d:f3:cd:b6:3a:5f:eb:de:a4:88:a8:f2:4d:ea:b2:7a:db:63:
         85:c9:ac:b5:05:a8:64:2c:36:6b:9d:26:40:3b:a8:91:35:92:
         e6:ee:e0:03:e8:35:ad:18:47:eb:53:bc:59:1f:98:9c:54:25:
         55:4a:96:b0:d0:ae:92:50:ef:b0:ce:c5:7d:8e:60:29:d1:4d:
         cc:c3:12:74:85:56:75:d2:f1:51:fa:58:66:cd:8a:1f:ec:3b:
         5c:e8:53:db:34:98:3f:e5:65:6b:e0:2c:6d:a4:85:65:c4:b8:
         88:89:d2:b0:20:ad:60:a9:c3:ee:03:16:a5:6d:e2:fe:24:23:
         a1:b3:61:5d:77:b7:5f:44:65:35:f3:6c:09:d8:e6:25:9f:05:
         53:fa:a6:74:00:b5:a4:ee:2b:48:c9:d9:70:00:5e:9e:e0:f8:
         a2:98:61:e2:84:9d:86:d7:51:56:1a:80:4d:35:0d:de:9d:93:
         54:6b:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:49 2025 by rpki-client