Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33322d3332203d3e20323638363136.roa
File:                     323830343a353365633a3a2f33322d3332203d3e20323638363136.roa (raw, json)
Hash identifier:          8teBjOVG96PFD+qFKRydPffVmdIKGo+bhTa95pTatU8=
Subject key identifier:   74:38:05:80:E3:56:8C:5F:BD:F2:DE:54:EE:57:9F:A0:4B:61:7C:74
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       2D8EF34C0502C27E562B05533B224C1522D8D4F9
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33322d3332203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:38 +0000
ROA not before:           Tue 05 Sep 2023 13:59:38 +0000
ROA not after:            Tue 03 Sep 2024 14:04:38 +0000
asID:                     268616
IP address blocks:        2804:53ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:f3:4c:05:02:c2:7e:56:2b:05:53:3b:22:4c:15:22:d8:d4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:38 2023 GMT
            Not After : Sep  3 14:04:38 2024 GMT
        Subject: CN=74380580E3568C5FBDF2DE54EE579FA04B617C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:50:93:18:d7:71:04:81:25:4d:4c:ea:2a:
                    d6:10:eb:77:31:24:26:96:53:bf:b2:90:7f:1b:3d:
                    71:be:fa:05:2b:b8:ba:ac:57:1d:3d:d4:47:83:34:
                    65:51:3d:52:f1:60:c6:4b:51:a5:17:38:00:69:42:
                    d8:87:49:0e:f8:6e:e1:31:19:06:23:4a:56:f6:c3:
                    48:cd:59:3c:8e:2b:a9:0c:fb:b2:a6:37:43:2f:51:
                    35:f7:ee:c5:2b:44:82:a8:12:13:ba:82:50:79:e1:
                    76:78:92:4f:08:d5:87:6e:4b:ee:f1:05:ca:ed:6d:
                    9f:2c:1f:87:10:83:c0:7c:54:97:f9:6c:1e:2e:db:
                    d3:d4:74:92:ca:e3:af:15:c9:22:13:5a:58:92:5d:
                    5a:0f:e2:c6:94:0e:dd:7f:f2:24:52:69:f3:cd:10:
                    00:09:cb:b5:95:61:b2:a4:2f:49:91:7a:4a:cc:39:
                    5f:f1:96:72:69:87:d4:c7:5b:e3:dc:39:75:5c:20:
                    05:ee:aa:2a:ca:55:31:89:5e:c4:39:7b:8f:9b:61:
                    86:ba:60:59:2a:c3:85:55:5b:99:cb:f5:29:ca:09:
                    8a:0b:5f:fa:45:02:65:b4:80:ea:6a:1f:00:ac:2a:
                    af:87:5b:ff:e5:8e:a8:05:3e:a8:dc:7e:26:7b:04:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:38:05:80:E3:56:8C:5F:BD:F2:DE:54:EE:57:9F:A0:4B:61:7C:74
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33322d3332203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:fa:59:26:b8:24:0a:16:3e:57:2c:0e:56:3a:24:2d:18:
         81:cd:d4:3a:f3:46:7c:69:5b:23:5b:a5:2b:a3:81:27:9d:71:
         c7:24:e8:03:67:95:57:ac:06:12:d6:a4:61:bd:93:7c:4d:0e:
         1e:5e:6d:23:e2:91:88:03:e7:5e:88:cd:70:ef:ad:8b:27:2b:
         cf:b4:25:bc:27:2c:d8:19:c9:6f:d5:32:0a:df:0d:6e:bc:26:
         f6:5f:ad:ed:7e:6a:cb:b5:33:46:cc:40:f7:0b:3d:15:37:da:
         1f:d4:76:19:49:4a:d5:7e:75:03:57:5f:b2:62:d5:9d:de:74:
         de:ef:7e:17:d1:8a:d0:35:6c:59:39:40:52:ae:f3:81:47:54:
         73:91:ed:22:a6:b4:2b:39:2d:44:e8:fe:45:9e:91:5e:e2:7a:
         ba:61:91:4e:d7:87:9d:d1:5f:d3:5b:47:bd:fc:00:ed:e1:fb:
         ef:12:17:20:38:a3:a4:e5:9b:b4:7c:63:71:df:14:04:5e:bf:
         af:bf:26:eb:b0:7a:97:08:6a:dc:65:33:ab:f3:cf:77:1a:1e:
         b8:ef:44:0c:c0:b1:15:9d:0f:dd:cd:54:f5:90:ef:6a:b5:34:
         db:3d:79:06:f0:f2:07:f8:cd:1c:af:58:3d:fa:28:4d:ff:50:
         27:e8:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:46 2025 by rpki-client