Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          DTvwlOEAJAw83iZbmHMEpuntkmnfbRiknhPUVvSnAbA=
Subject key identifier:   32:FC:A0:94:B7:52:C5:9B:34:6A:B6:A2:54:00:F4:62:27:C2:F7:78
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       3C5A27D2EAF7CD334CC85ECA422C58958F2DDD5E
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:08 +0000
ROA not before:           Fri 08 Nov 2024 14:19:08 +0000
ROA not after:            Fri 07 Nov 2025 14:24:08 +0000
asID:                     267027
IP address blocks:        2804:4708:c000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5a:27:d2:ea:f7:cd:33:4c:c8:5e:ca:42:2c:58:95:8f:2d:dd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:08 2024 GMT
            Not After : Nov  7 14:24:08 2025 GMT
        Subject: CN=32FCA094B752C59B346AB6A25400F46227C2F778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:6b:de:fc:d4:76:ef:c6:24:67:1d:a6:03:
                    9d:59:05:39:98:9c:cc:fc:a8:ea:ff:e0:28:b4:33:
                    8e:48:c5:ce:0d:9b:41:ff:70:32:73:7a:6e:01:74:
                    26:ce:33:16:2a:2f:82:9e:17:4a:bb:af:6d:f4:5c:
                    e1:a1:20:fd:7c:2f:7c:6c:39:a5:76:9c:a5:e0:10:
                    2a:aa:90:b4:7d:9c:9c:55:3d:d3:88:6a:31:92:85:
                    e3:cd:fd:80:93:4b:4d:91:d9:1b:f5:66:d2:b0:d3:
                    80:a1:71:53:06:0c:40:ad:76:c3:18:85:52:47:26:
                    96:9c:08:b2:b3:fe:fc:2c:f9:2d:24:fb:0e:79:63:
                    9a:cb:a1:16:38:96:db:56:46:cb:d6:6f:e7:fb:8f:
                    9a:d2:e0:d9:77:20:85:3e:c1:1f:26:cc:f8:64:ea:
                    e6:64:cb:8d:75:4d:f6:9c:60:10:ae:20:44:40:24:
                    ad:84:ec:5d:7e:31:a9:16:9d:5f:ac:05:e5:ac:7f:
                    97:42:c7:3b:8a:f3:00:c2:61:10:20:5a:dd:f0:1f:
                    da:a0:05:63:8c:12:b2:a9:72:98:be:d9:c5:f8:d8:
                    a1:87:ab:1e:11:4b:77:96:74:e9:bc:23:68:56:07:
                    ec:0b:a6:68:98:3b:90:72:6e:f8:8b:77:2a:82:c0:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:A0:94:B7:52:C5:9B:34:6A:B6:A2:54:00:F4:62:27:C2:F7:78
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         61:51:4c:52:e9:4a:aa:e3:76:79:89:73:1f:76:5d:a2:81:d8:
         a4:2d:d8:42:db:bf:4d:86:13:a7:f8:ac:9c:4a:4a:93:27:ba:
         bd:14:89:76:e6:0b:a0:2d:36:38:43:a0:03:d9:85:0a:f7:14:
         70:21:dc:76:63:7c:dd:64:b6:e9:30:44:d3:e0:bb:a8:25:e5:
         06:33:ce:7f:ab:eb:f9:55:7c:88:9a:5c:4d:07:59:8d:4d:97:
         24:f3:e4:88:8b:53:aa:d9:63:23:a1:72:42:ee:b6:ce:ae:0a:
         e6:ab:1e:ab:c8:fe:35:b9:32:8c:1c:4f:d2:3f:cc:d4:a1:5f:
         44:6e:d7:4b:cc:71:1a:a3:f6:4a:8d:a0:b7:a8:27:63:63:37:
         80:dd:27:1b:4e:19:67:9a:93:af:11:0d:4b:f2:7a:1c:a7:62:
         0f:b5:60:ab:7c:95:2a:76:8c:c3:76:e3:32:cf:04:b5:d3:35:
         bd:1c:af:d9:33:5a:37:56:89:01:5c:9b:01:5c:ec:d4:c2:00:
         7a:66:ac:2a:78:a4:41:36:b4:26:f0:5a:53:a0:69:97:90:52:
         b2:b2:33:7d:9e:62:9b:8d:2d:ae:82:20:5e:19:21:ed:dd:97:
         30:21:1d:3a:e5:4c:38:ab:94:ae:d7:de:1f:96:4c:be:19:6e:
         94:d9:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:43:40 2025 by rpki-client