Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33322d3332203d3e20323636333638.roa
File:                     323830343a333662633a3a2f33322d3332203d3e20323636333638.roa (raw, json)
Hash identifier:          ECBkQScCFBLSW7IBdtYbPZMaQZ8IONXqpI3gdPzRhp8=
Subject key identifier:   F5:D5:CD:E3:C9:1E:7E:19:BC:0A:73:15:DF:40:76:06:C6:B6:1E:83
Certificate issuer:       /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial:       3475D247C7C34446B573935CED83B25A405BCE07
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33322d3332203d3e20323636333638.roa
Signing time:             Tue 17 Dec 2024 19:54:16 +0000
ROA not before:           Tue 17 Dec 2024 19:49:16 +0000
ROA not after:            Tue 16 Dec 2025 19:54:16 +0000
asID:                     266368
IP address blocks:        2804:36bc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:75:d2:47:c7:c3:44:46:b5:73:93:5c:ed:83:b2:5a:40:5b:ce:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Validity
            Not Before: Dec 17 19:49:16 2024 GMT
            Not After : Dec 16 19:54:16 2025 GMT
        Subject: CN=F5D5CDE3C91E7E19BC0A7315DF407606C6B61E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:ea:64:f4:90:3e:c6:c4:7d:dd:2c:64:37:
                    1f:d0:d4:bd:1d:8a:ea:88:77:f0:f1:3b:7a:d1:37:
                    a4:c8:f0:49:6a:3e:15:e2:1b:04:cc:bf:f9:9f:7a:
                    0c:13:22:fb:0b:51:ab:99:c6:28:5a:f3:d5:6b:21:
                    0a:1e:81:cd:be:df:de:26:8f:d3:96:ec:d7:2f:97:
                    cc:6a:94:11:53:16:fc:a8:df:64:2b:5a:53:91:6d:
                    f0:c0:12:3e:22:2e:81:ce:ce:17:31:10:6a:96:a2:
                    61:20:5d:08:ca:1a:56:b0:de:12:bf:b5:13:da:cb:
                    fd:f9:d0:59:3e:d4:7e:bd:b5:03:3c:50:2a:80:e2:
                    e3:2b:4c:62:fb:5e:69:8d:0e:60:03:25:eb:ce:76:
                    31:b7:38:a3:31:65:4f:df:2f:98:da:75:e6:ea:f8:
                    a9:59:31:e7:73:1e:cc:81:93:02:c7:90:69:e0:54:
                    ec:4e:c5:3b:17:a6:c6:d7:1e:82:f5:d6:9c:7b:9a:
                    2f:aa:ee:e0:b4:ac:c3:20:4e:ed:6e:9a:c1:fd:e5:
                    10:da:58:45:b8:54:8f:16:ee:e9:18:3d:07:41:df:
                    f2:89:be:83:2c:dc:70:4c:02:81:03:fb:01:7f:62:
                    3d:b0:8e:00:2c:2d:87:da:6e:d4:27:22:c4:96:e8:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:CD:E3:C9:1E:7E:19:BC:0A:73:15:DF:40:76:06:C6:B6:1E:83
            X509v3 Authority Key Identifier:
                keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33322d3332203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:35:c9:18:a4:b2:b6:9a:6a:d8:06:03:06:32:05:fa:4d:
         e6:18:86:a6:b4:89:50:56:e7:7f:6d:06:8b:a1:f6:71:79:36:
         47:e4:43:65:93:62:5e:65:cc:cc:b4:02:33:b8:13:fb:c2:c8:
         b2:f9:23:2d:9c:4b:ef:0f:36:2c:20:b8:70:2b:df:67:c2:7f:
         81:71:c3:75:4e:00:61:e3:79:a8:9e:61:e2:78:b9:dc:bf:59:
         60:ae:87:25:33:d4:86:d9:55:cf:b9:51:9a:47:a2:25:7b:8d:
         05:65:12:9c:d3:9c:94:4d:c9:e8:e0:68:ee:ce:45:00:f2:19:
         13:9b:f6:13:e1:4e:ec:42:76:bc:f9:0d:72:23:26:17:7c:44:
         be:ad:6f:3c:27:b9:52:1a:4d:f4:eb:e4:29:12:eb:7d:05:cc:
         3c:0e:38:c5:58:11:8c:b9:2f:98:af:82:ed:b6:29:2d:85:39:
         84:5e:46:c0:b0:f8:64:f5:53:48:c7:c5:7a:84:97:0d:89:6d:
         ef:ff:8b:ce:5c:5b:e2:2b:14:96:c3:ad:4b:dc:0d:df:39:0a:
         8d:46:7c:02:c8:38:a7:e0:26:04:cc:72:be:f7:94:2e:80:3c:
         83:ed:d8:26:41:b8:18:b4:b5:bd:ee:c8:52:08:cc:11:57:26:
         70:ec:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:05 2025 by rpki-client