Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a3a2f33332d3333203d3e20323638363332.roa
File:                     323830343a353432383a3a2f33332d3333203d3e20323638363332.roa (raw, json)
Hash identifier:          cdkyRMr1Oy8GAW8mQk02sdb+ewKISeXkcU+wCHJUw+M=
Subject key identifier:   72:0B:00:DD:0A:6B:10:55:D9:C5:2D:68:16:75:18:19:D9:63:2E:E9
Certificate issuer:       /CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
Certificate serial:       74A452BF57C8B286FA777399D326588D5B371755
Authority key identifier: E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a3a2f33332d3333203d3e20323638363332.roa
Signing time:             Tue 07 Nov 2023 20:20:04 +0000
ROA not before:           Tue 07 Nov 2023 20:15:04 +0000
ROA not after:            Tue 05 Nov 2024 20:20:04 +0000
asID:                     268632
IP address blocks:        2804:5428::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a4:52:bf:57:c8:b2:86:fa:77:73:99:d3:26:58:8d:5b:37:17:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Validity
            Not Before: Nov  7 20:15:04 2023 GMT
            Not After : Nov  5 20:20:04 2024 GMT
        Subject: CN=720B00DD0A6B1055D9C52D6816751819D9632EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:40:91:bf:a4:94:7d:a1:8c:f1:36:6d:b2:
                    9d:83:6f:3a:4a:a3:aa:7f:74:3e:13:81:98:e7:37:
                    64:6d:30:d1:62:59:62:ea:4e:cf:ec:cc:cc:99:d7:
                    87:56:8e:b8:b9:53:99:f3:a1:66:a3:bd:26:3f:10:
                    5d:a1:55:55:aa:22:b3:13:3e:1f:bd:3f:92:9e:e8:
                    30:8b:08:74:9b:4f:86:29:f9:27:c4:f3:84:08:55:
                    56:34:44:1b:00:73:e4:c6:09:80:88:c7:a3:42:10:
                    28:d7:d9:17:6b:86:23:33:94:ee:e1:96:5e:b1:86:
                    8f:e1:ad:60:16:6e:b8:47:1f:85:5c:0c:73:09:75:
                    1c:6c:da:18:b8:ee:a4:87:ae:fd:ea:c0:f5:cc:8f:
                    e4:06:92:c0:c8:f6:5e:08:4d:5a:ba:56:db:88:41:
                    87:3c:8f:c4:10:f1:18:dc:b1:fd:66:7e:98:5f:2c:
                    eb:bd:64:8d:0f:73:a8:75:a6:08:fa:eb:77:75:4a:
                    84:6d:89:83:fd:06:fd:9e:78:a9:d8:d0:85:f8:8b:
                    ce:42:5f:f6:da:ef:e8:b6:dd:5f:50:bc:e1:94:41:
                    77:6f:07:d9:c8:c3:8c:e4:30:f6:07:da:c3:94:ee:
                    6a:d3:77:57:cb:eb:7a:76:cd:10:2a:38:14:5a:0b:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:00:DD:0A:6B:10:55:D9:C5:2D:68:16:75:18:19:D9:63:2E:E9
            X509v3 Authority Key Identifier:
                keyid:E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a3a2f33332d3333203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5428::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:34:cf:86:3b:08:c7:90:51:55:1f:4f:81:76:3b:0c:a0:ba:
         97:8c:bd:ac:42:24:6d:b6:87:a7:5b:37:5d:97:b9:78:e9:de:
         df:b1:b0:58:d0:a8:de:84:2b:a2:39:52:46:33:1e:94:3f:17:
         b6:bb:97:e5:75:02:b8:d4:fc:c3:21:4b:32:51:8c:9e:82:85:
         cb:5c:1e:cd:81:8d:29:b2:f3:3a:b3:7a:c6:9e:24:d9:91:8c:
         b8:2d:8a:ba:f0:e9:4c:27:ee:c1:d8:b2:91:7c:bd:d7:c2:5f:
         a0:da:c1:34:20:bb:24:35:e0:0f:22:61:30:63:e7:3f:de:3d:
         23:bd:91:f4:0d:1b:e0:09:17:fe:08:2b:79:9f:94:96:1c:ba:
         62:a1:c2:5c:91:88:9d:d0:94:d0:88:04:b8:04:b1:53:c4:71:
         15:c0:9a:02:c4:98:04:e8:6a:e8:17:5e:10:71:25:f7:c5:8a:
         23:1b:3e:92:2e:41:42:b1:c4:1f:45:0b:18:f6:91:df:8a:6f:
         b3:fb:6b:d8:ab:42:6e:64:df:21:f3:33:64:b7:f9:1e:a3:74:
         26:f1:c2:36:a5:7c:df:e0:38:90:b6:b4:96:77:32:c0:19:1c:
         99:87:90:69:f9:b2:c2:e9:96:c8:9f:dc:19:12:43:a1:95:0f:
         11:c1:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:19 2025 by rpki-client