Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/323830343a376565303a3a2f33322d3438203d3e20323731363531.roa
File:                     323830343a376565303a3a2f33322d3438203d3e20323731363531.roa (raw, json)
Hash identifier:          qfFuXzkl2MGk3ogJQ/mYn4og81bHC0vuMrL0xZunAIk=
Subject key identifier:   F2:9C:74:DD:F2:1C:26:EB:DF:76:F3:B2:65:A8:9E:C7:5B:CA:4D:86
Certificate issuer:       /CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
Certificate serial:       553121FA7A3B0023E5BDEC351E6D3235A77EEAFF
Authority key identifier: CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/323830343a376565303a3a2f33322d3438203d3e20323731363531.roa
Signing time:             Thu 05 Jan 2023 13:57:32 +0000
ROA not before:           Thu 05 Jan 2023 13:52:32 +0000
ROA not after:            Thu 04 Jan 2024 13:57:32 +0000
asID:                     271651
IP address blocks:        2804:7ee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:21:fa:7a:3b:00:23:e5:bd:ec:35:1e:6d:32:35:a7:7e:ea:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
        Validity
            Not Before: Jan  5 13:52:32 2023 GMT
            Not After : Jan  4 13:57:32 2024 GMT
        Subject: CN=F29C74DDF21C26EBDF76F3B265A89EC75BCA4D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:c6:e2:c2:72:20:bb:00:4b:7c:f1:47:a3:
                    54:9f:11:cd:5f:61:ab:93:30:11:7b:d0:e6:83:30:
                    f1:21:a4:9d:4f:eb:7a:cb:fb:5d:af:39:11:32:bb:
                    61:8f:bd:cd:90:05:bf:82:bc:38:dc:c1:d3:c7:d8:
                    6b:26:e1:bf:35:9f:9a:5c:6e:76:a3:53:57:9e:6b:
                    d3:89:c5:95:d8:0f:7a:f8:6a:9a:22:c0:aa:26:e0:
                    71:cc:ae:73:ce:01:aa:d7:b2:78:7e:d6:35:b3:fd:
                    a6:50:3f:0c:a2:7e:07:ad:89:09:b1:d9:70:1b:87:
                    f8:b5:47:b7:b4:04:d9:84:0c:32:1d:3c:20:f8:1d:
                    d3:74:51:e1:93:53:d1:bc:fb:39:02:90:2d:5d:8f:
                    2f:4c:93:de:01:ca:38:d5:25:27:ec:fa:ec:ea:cb:
                    bb:b2:8f:06:bc:87:d8:72:8f:ae:ae:77:6b:fc:50:
                    c2:ba:41:23:62:aa:d0:bd:1c:71:3b:71:47:43:01:
                    15:72:ab:4e:f8:c3:f4:7a:9d:c9:8d:fd:d2:56:14:
                    24:88:83:43:fb:1c:8c:35:fb:c8:b3:aa:8a:56:a2:
                    57:be:69:e8:62:48:ef:d8:b3:0e:1d:36:89:f4:48:
                    64:c0:2a:5a:4e:c6:e9:20:b6:bf:5f:e6:1e:61:65:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:74:DD:F2:1C:26:EB:DF:76:F3:B2:65:A8:9E:C7:5B:CA:4D:86
            X509v3 Authority Key Identifier:
                keyid:CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/323830343a376565303a3a2f33322d3438203d3e20323731363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:60:06:a0:73:41:3a:30:fa:a1:79:e7:cb:58:e5:e9:65:7c:
         00:65:28:cc:2d:9e:3b:c7:89:a2:ba:04:c2:2f:f6:05:67:d9:
         7a:ec:01:47:3a:02:bf:38:a9:7c:88:41:7c:a6:8f:68:4b:b7:
         d9:75:74:e3:e3:89:ce:ee:e2:03:6e:08:e0:cc:f0:2f:6c:8d:
         d0:6a:ff:f9:c7:79:8b:47:17:92:7f:c5:5d:cb:11:3d:a0:b0:
         90:9d:3d:af:36:40:1b:f1:e6:4b:2f:90:dc:87:85:d9:5c:83:
         75:4d:14:f4:c2:70:6a:1a:94:fd:74:73:6d:ef:84:20:bb:6f:
         df:6e:0b:74:ba:80:3f:79:d5:68:87:34:12:44:cf:41:fa:ba:
         df:ef:48:4b:88:9a:4b:5b:d5:55:69:b8:f6:3e:5f:48:a8:45:
         38:2a:3f:c5:53:cd:43:b0:21:b6:dd:9e:ad:2c:f2:e8:65:12:
         95:91:b4:d3:15:1a:eb:ba:8d:56:3a:41:b3:84:0f:81:1a:8a:
         ea:94:fa:8b:42:81:08:4c:85:89:d4:72:1e:5d:28:28:30:e2:
         16:a1:5a:c5:05:33:0b:c3:7e:b2:a1:35:ae:48:ac:61:0e:e8:
         6f:27:87:9a:1b:f4:b6:48:91:b1:bf:64:49:3f:55:4e:f9:3e:
         13:a2:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:00 2025 by rpki-client