Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a6461383a3a2f33322d3438203d3e20323632363035.roa
File:                     323830343a6461383a3a2f33322d3438203d3e20323632363035.roa (raw, json)
Hash identifier:          U7mFRysJA60xNiuUc9mC/Fjkno1ajWIGV6/7CLkLRMw=
Subject key identifier:   31:81:24:F9:9A:9D:E6:BA:FE:5D:6D:C5:14:C3:47:5C:37:4A:C3:55
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       149D18DC7F16E48CB3A0618D0F9C7D3E125E269C
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a6461383a3a2f33322d3438203d3e20323632363035.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     262605
IP address blocks:        2804:da8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9d:18:dc:7f:16:e4:8c:b3:a0:61:8d:0f:9c:7d:3e:12:5e:26:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=318124F99A9DE6BAFE5D6DC514C3475C374AC355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:3e:5c:e6:0c:ac:cb:cc:eb:96:4f:03:60:
                    30:a5:36:23:90:88:1a:37:7a:85:7f:69:70:15:ac:
                    03:f1:31:93:f8:4d:6a:d5:cb:eb:6c:fd:63:a1:9c:
                    bb:81:53:3e:71:e2:2e:eb:df:c3:c3:44:4b:9a:80:
                    42:6f:cf:eb:a3:1c:8f:95:12:10:99:95:a5:9d:3b:
                    a5:02:05:93:76:d0:45:e9:3d:e4:5b:b3:d8:22:12:
                    30:b5:be:73:02:d5:8c:39:13:9c:01:db:ff:dc:8b:
                    94:a6:c8:aa:1a:29:7c:e3:5c:0e:18:cf:3d:63:27:
                    c2:d8:52:a6:77:d9:aa:50:af:1f:ad:cd:c9:a8:48:
                    c6:9c:22:94:64:07:17:87:4f:17:8f:cc:34:6b:ee:
                    aa:b5:10:54:f1:2e:c3:60:15:d0:a6:45:07:bd:d6:
                    04:dd:b2:2b:19:b7:8d:0d:db:b9:08:ec:1e:0a:01:
                    7c:e9:aa:f8:bd:8d:96:7d:3e:4e:c7:aa:6e:b2:5b:
                    93:fb:3f:07:32:68:7a:0f:3f:58:0d:09:b9:c8:60:
                    cc:03:56:d8:cd:50:d1:18:00:57:ec:c1:ca:9d:5f:
                    16:ac:2a:ec:b4:41:df:ee:cf:e1:ed:4f:94:67:8c:
                    1d:c5:30:4c:bc:21:01:a3:01:67:32:b0:b7:82:92:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:24:F9:9A:9D:E6:BA:FE:5D:6D:C5:14:C3:47:5C:37:4A:C3:55
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a6461383a3a2f33322d3438203d3e20323632363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:39:ca:07:f8:a4:58:0d:4a:ed:55:1b:90:8c:73:43:aa:
         1b:0d:33:d7:8a:b4:2a:09:7d:71:3b:0c:3c:1e:b2:55:38:09:
         23:65:1b:e5:9a:ff:10:32:37:c3:34:47:32:2c:f8:5d:54:d9:
         e6:f1:b1:86:41:bc:1a:d9:34:25:95:27:34:3c:0a:d8:11:5c:
         0f:15:a2:88:1e:1d:e2:cf:c5:d8:38:84:d1:08:ea:20:ce:d9:
         ca:86:38:02:6d:b5:34:5b:a3:30:53:19:0d:00:89:74:1a:73:
         f3:21:07:57:79:a3:b5:47:7d:77:74:82:c8:e8:66:b8:3a:88:
         7e:97:49:4e:b1:7f:f3:b2:d1:1e:f5:21:86:e8:e2:0f:20:b5:
         ce:ee:cf:55:5c:de:e1:da:3f:95:2d:b2:f4:af:b0:6e:9e:87:
         7a:1e:bf:1b:d0:91:ee:ea:a0:e3:96:81:ce:fc:09:78:32:ad:
         a9:22:8a:08:bf:70:a5:b4:d9:42:b2:d7:5c:b2:21:14:04:f2:
         b4:ad:9d:57:cf:9c:b3:75:29:e6:fc:30:97:c5:e8:b6:10:b4:
         60:6a:43:94:f3:e8:94:fc:1e:34:be:66:ef:0f:77:34:03:af:
         de:a4:ae:7a:06:19:76:21:ea:ce:de:50:23:db:2a:cb:e1:9c:
         3c:f6:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:28 2025 by rpki-client