Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d3332203d3e203238313931.roa
File:                     323830343a6332633a3a2f33322d3332203d3e203238313931.roa (raw, json)
Hash identifier:          5a3rHUYaBbR3+n14voocZ19pRSGJ3LVNAx+inAdxFkY=
Subject key identifier:   CB:32:DB:23:16:4B:05:03:C6:AE:92:D8:1D:F9:95:5B:8F:F3:B7:B2
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       459B724C527463ABB669092D215D5E5D6C77BB70
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d3332203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:28 +0000
ROA not before:           Wed 17 Apr 2024 11:37:28 +0000
ROA not after:            Wed 16 Apr 2025 11:42:28 +0000
asID:                     28191
IP address blocks:        2804:c2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:72:4c:52:74:63:ab:b6:69:09:2d:21:5d:5e:5d:6c:77:bb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:28 2024 GMT
            Not After : Apr 16 11:42:28 2025 GMT
        Subject: CN=CB32DB23164B0503C6AE92D81DF9955B8FF3B7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:0b:86:f3:3c:47:30:45:e6:67:74:af:5e:
                    d2:3c:4f:6e:d4:b5:7d:26:d7:87:84:32:ab:08:3d:
                    38:4f:53:1b:df:78:a0:de:a4:a0:72:24:cb:6a:ae:
                    72:89:32:30:6f:34:dd:17:72:4c:1b:f8:85:01:01:
                    10:d4:f1:91:ef:7c:0f:d2:63:51:90:04:5c:37:65:
                    88:96:25:26:06:8e:f6:c8:8c:83:64:b7:30:f1:68:
                    ff:ba:30:d7:fa:79:95:5a:02:ca:13:88:1c:eb:d4:
                    02:cf:45:be:39:cd:75:9b:ad:14:58:2c:37:10:3c:
                    6d:00:6a:41:d1:76:5e:1a:8a:9f:a0:f1:9e:a8:7e:
                    45:6a:5a:68:ca:0d:99:e9:2a:2e:84:bf:5f:67:88:
                    38:6b:3f:08:95:7a:91:91:e3:d0:9d:61:ea:9f:5d:
                    ba:bf:cc:95:f3:57:58:69:e2:af:1d:f7:ed:c9:7c:
                    85:0c:46:06:a2:44:23:96:d3:4f:88:67:d7:df:62:
                    28:72:1a:15:60:74:43:89:69:dd:eb:34:61:bb:08:
                    44:b3:de:d7:ac:a3:a0:d0:d2:f5:33:50:61:c2:cc:
                    23:36:87:36:2c:93:6f:ef:7f:c6:4b:50:21:73:dc:
                    76:8a:1d:6f:da:bc:25:9a:b6:47:d6:4d:42:11:27:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:32:DB:23:16:4B:05:03:C6:AE:92:D8:1D:F9:95:5B:8F:F3:B7:B2
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d3332203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:ae:c0:6c:06:aa:17:71:b3:7f:d5:c2:0d:c6:d3:46:ba:
         1e:a8:0f:a6:18:5a:d9:41:47:9e:05:60:92:a1:4a:93:c2:e7:
         72:c7:18:71:c6:a5:96:02:84:3c:f4:a9:ff:59:a4:d7:cc:5a:
         c0:56:64:0d:a5:8c:cd:15:87:f3:c7:e8:54:9d:85:3a:18:81:
         3f:ad:35:0e:d2:22:e9:63:a0:88:33:90:fa:8e:70:b5:cd:45:
         74:a7:fe:13:31:e8:57:0c:d6:4b:2c:bd:95:61:49:5a:40:b3:
         b1:7f:45:54:97:74:fa:d8:97:2d:19:83:78:66:a7:b1:00:2d:
         6a:ac:84:e8:54:2a:3c:1c:56:92:03:7c:a1:59:2e:02:7d:b3:
         e7:8d:43:0f:e7:8d:9a:b7:91:a4:81:00:f7:69:47:fa:a2:30:
         aa:c0:fe:75:2d:a2:62:ab:bd:a0:9a:8b:be:29:b7:d3:78:a3:
         30:b2:2d:7b:7a:e4:42:0e:bd:b3:fb:79:16:c8:5b:1e:35:9d:
         44:98:31:7d:a2:ed:a3:77:c8:cd:67:4f:1f:06:b9:c7:44:12:
         ca:01:48:e8:77:2f:ba:8a:d7:e2:26:61:db:d9:a9:bd:d8:86:
         23:50:a4:98:5c:5b:52:09:7a:04:52:d1:09:5e:15:2e:27:ac:
         88:3b:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:38 2025 by rpki-client