Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa
File:                     323830343a343630633a3a2f33322d3332203d3e20323636393635.roa (raw, json)
Hash identifier:          OznZVr/X5rqwoiVuc0W4AUGw80TlQei/7qNILDYCbcE=
Subject key identifier:   F1:5A:B4:E8:3D:88:AC:58:E4:EA:90:E2:F9:1E:ED:73:D4:59:D9:7D
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       32B8BD8A14EDA64274812862FF0FA90E14B6B7C4
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa
Signing time:             Fri 20 Sep 2024 19:49:35 +0000
ROA not before:           Fri 20 Sep 2024 19:44:35 +0000
ROA not after:            Fri 19 Sep 2025 19:49:35 +0000
asID:                     266965
IP address blocks:        2804:460c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b8:bd:8a:14:ed:a6:42:74:81:28:62:ff:0f:a9:0e:14:b6:b7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Sep 20 19:44:35 2024 GMT
            Not After : Sep 19 19:49:35 2025 GMT
        Subject: CN=F15AB4E83D88AC58E4EA90E2F91EED73D459D97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8f:59:3d:b7:86:a8:11:b3:f9:78:0f:e1:5b:
                    73:d5:97:3b:b3:17:de:0a:41:3a:5f:1a:1b:3c:51:
                    5e:2f:4d:d1:d9:d6:02:9a:7d:7b:c3:5a:b0:84:9e:
                    fc:60:be:cc:fc:bd:01:19:20:8a:28:db:da:3a:d7:
                    cc:3f:8e:dd:28:9c:5c:88:2b:3a:0b:cc:12:f4:c6:
                    0b:bd:db:86:4f:13:3a:d3:00:d5:77:f1:8a:1a:39:
                    92:68:5d:4c:4e:99:9e:12:b1:51:60:90:2c:e6:fd:
                    7e:fd:8a:d4:a6:bb:38:f7:e3:25:72:82:22:95:b2:
                    c3:57:e7:07:8d:27:e9:b2:b7:6b:44:3f:ad:06:22:
                    a2:d9:03:ce:c5:27:e1:83:4b:a1:1c:a5:d0:e2:ea:
                    f7:79:3f:26:08:93:06:76:e2:3f:2b:54:c7:62:2e:
                    e2:20:1e:26:99:28:a1:f4:69:71:ef:42:14:5a:a1:
                    9a:2a:21:94:a5:f6:55:20:83:b3:d8:a3:35:7c:f2:
                    2a:86:35:eb:9f:44:a1:5f:2b:61:78:0f:96:c9:6e:
                    94:41:14:df:28:66:ad:50:fd:3e:f0:8d:5e:f8:6f:
                    71:60:74:1f:1d:ff:50:bf:b4:ad:a7:fb:90:49:df:
                    cc:8d:73:eb:9d:ff:27:c6:bd:20:bb:87:56:13:1a:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5A:B4:E8:3D:88:AC:58:E4:EA:90:E2:F9:1E:ED:73:D4:59:D9:7D
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:460c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:f8:82:58:00:95:66:ef:d5:af:2f:45:5c:b9:52:35:38:
         10:7d:82:df:5a:9d:55:d8:60:33:6a:41:58:71:f3:13:cc:3c:
         d4:54:f2:69:c9:59:2d:7b:7b:52:92:1d:89:bf:2c:0e:59:b3:
         24:ce:0c:e6:7f:73:2f:6c:af:c0:9d:9c:cb:7f:9e:35:59:bb:
         90:78:ac:68:d7:db:61:2b:57:ea:70:3d:53:dc:b0:e1:76:3e:
         c7:ea:a9:34:c1:04:99:38:30:dd:ae:c3:9f:3e:b6:e4:d7:78:
         4b:91:51:9e:eb:e5:22:28:0a:8f:f1:0b:b9:04:55:9e:c4:0c:
         a3:03:be:4a:d3:13:bc:9b:16:5e:2d:4b:97:10:20:64:cc:9b:
         2f:ec:6f:cf:0c:77:79:60:4e:f0:3c:07:89:de:46:1a:af:5c:
         91:e6:c1:7f:00:24:6b:0e:39:d9:b9:44:c0:d1:09:3c:17:98:
         c5:8e:d1:a8:b1:15:f1:ba:43:c7:81:de:39:cb:00:6a:e9:da:
         10:9b:55:8e:e3:3c:39:1b:d0:d1:40:e0:bc:f8:b2:79:8d:3c:
         99:15:9f:56:f2:e5:4c:bd:16:1b:c2:35:55:b5:9d:cd:67:d4:
         ba:5d:1d:0a:55:fa:43:c6:bf:f3:da:f7:52:f1:e4:d6:5c:a1:
         c1:81:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:19:06 2025 by rpki-client