Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/323830343a353436343a3a2f33322d3332203d3e20323638363437.roa
File:                     323830343a353436343a3a2f33322d3332203d3e20323638363437.roa (raw, json)
Hash identifier:          Z11fVdg8i7hiAehXMrXLyN16Q8hSOIjY2E2yMNPYFhY=
Subject key identifier:   FE:16:81:E1:C3:50:0D:0C:C3:3A:0A:AE:06:F5:8E:41:46:E4:49:BA
Certificate issuer:       /CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
Certificate serial:       142FAD4614F9A221A9D426A8EB4D52D24B77B464
Authority key identifier: AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/323830343a353436343a3a2f33322d3332203d3e20323638363437.roa
Signing time:             Sat 14 Aug 2021 21:00:01 +0000
ROA not before:           Sat 14 Aug 2021 20:55:01 +0000
ROA not after:            Sun 14 Aug 2022 21:00:01 +0000
asID:                     268647
IP address blocks:        2804:5464::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2f:ad:46:14:f9:a2:21:a9:d4:26:a8:eb:4d:52:d2:4b:77:b4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Validity
            Not Before: Aug 14 20:55:01 2021 GMT
            Not After : Aug 14 21:00:01 2022 GMT
        Subject: CN=3082010A0282010100E561E7F1AE6AA436483FA54CBAF22BEA424DB879C95FA52F15DE8F96F0C97E6C6A6AA62BD48A0DD6849046C9D8CE87B3DDE9BBB5B320E56BA31AF469436187A810E66011F174978E24EC52F8DC2F4DF53326491AD53ABF7864BB7FFDC1031852FD39CCC58142F44C0F7EAF59C66339F41CF3D8210A9D12138108B4B739BD4CC1D129CBBBA790D638ACCA085A93441DCB8FD559DA1601710DB1304556AFC14856AFC85FE60B5934B8F3D7E7929B57A64C8710DB4F8D409D8519AFCD56B6E7E9683AA1BDB6F87F40E76762FDD7E93195832F71A32094839B80BFB26E6EFE1FEB84E9F2A0F17DFDD1A7D2D86565FC6948C2322D7F2DD24B4A2AAB326E20DF2AACEF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:e7:f1:ae:6a:a4:36:48:3f:a5:4c:ba:f2:
                    2b:ea:42:4d:b8:79:c9:5f:a5:2f:15:de:8f:96:f0:
                    c9:7e:6c:6a:6a:a6:2b:d4:8a:0d:d6:84:90:46:c9:
                    d8:ce:87:b3:dd:e9:bb:b5:b3:20:e5:6b:a3:1a:f4:
                    69:43:61:87:a8:10:e6:60:11:f1:74:97:8e:24:ec:
                    52:f8:dc:2f:4d:f5:33:26:49:1a:d5:3a:bf:78:64:
                    bb:7f:fd:c1:03:18:52:fd:39:cc:c5:81:42:f4:4c:
                    0f:7e:af:59:c6:63:39:f4:1c:f3:d8:21:0a:9d:12:
                    13:81:08:b4:b7:39:bd:4c:c1:d1:29:cb:bb:a7:90:
                    d6:38:ac:ca:08:5a:93:44:1d:cb:8f:d5:59:da:16:
                    01:71:0d:b1:30:45:56:af:c1:48:56:af:c8:5f:e6:
                    0b:59:34:b8:f3:d7:e7:92:9b:57:a6:4c:87:10:db:
                    4f:8d:40:9d:85:19:af:cd:56:b6:e7:e9:68:3a:a1:
                    bd:b6:f8:7f:40:e7:67:62:fd:d7:e9:31:95:83:2f:
                    71:a3:20:94:83:9b:80:bf:b2:6e:6e:fe:1f:eb:84:
                    e9:f2:a0:f1:7d:fd:d1:a7:d2:d8:65:65:fc:69:48:
                    c2:32:2d:7f:2d:d2:4b:4a:2a:ab:32:6e:20:df:2a:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:81:E1:C3:50:0D:0C:C3:3A:0A:AE:06:F5:8E:41:46:E4:49:BA
            X509v3 Authority Key Identifier:
                keyid:AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/323830343a353436343a3a2f33322d3332203d3e20323638363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5464::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:6a:48:8e:d3:1a:67:49:83:bb:d8:7d:3c:01:6d:f3:f8:5c:
         97:84:47:08:d9:84:67:72:3c:39:de:8a:e2:a0:8b:cd:cc:fb:
         5b:f6:9b:eb:2f:7d:26:c0:41:f1:42:88:e9:a8:42:04:cd:e8:
         a2:51:97:ba:5d:e3:2b:6b:ba:fc:85:d8:5b:cf:72:32:6a:d3:
         42:b2:3d:75:df:7e:bf:1d:50:4d:ad:09:7f:3d:ac:a1:a4:a7:
         27:fd:b1:9c:95:f0:32:eb:73:16:df:b6:b0:2c:37:de:1d:aa:
         ef:c7:5c:99:5a:d9:71:d4:83:cd:a6:78:d8:ac:0e:4d:54:51:
         ab:cd:bb:ab:db:25:ce:5f:18:bf:45:33:b3:fb:27:75:56:15:
         b3:37:35:c7:81:60:5b:85:3f:5e:c1:db:d9:9a:8e:6c:d4:3d:
         a3:75:30:d4:29:49:2e:bb:71:d5:21:df:91:06:7c:c1:b5:b7:
         d6:ec:bd:2d:90:16:c3:b5:a1:b2:ed:b2:4b:49:fd:2a:1f:58:
         62:19:02:43:32:c0:88:cf:4e:bb:db:23:2c:49:5b:ea:95:b6:
         67:bb:e3:ec:db:dd:01:55:c1:48:fa:73:94:68:10:b9:eb:50:
         dc:8c:b9:70:42:70:27:32:ca:e2:09:a8:cd:c4:17:b0:d5:e6:
         8f:aa:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:22 2025 by rpki-client