Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/323830343a373135383a3a2f33322d3334203d3e20323730373833.roa
File:                     323830343a373135383a3a2f33322d3334203d3e20323730373833.roa (raw, json)
Hash identifier:          eU6dxgtzABspNk5XdFIUyiD53yKTGrT0FiLlKPmJURw=
Subject key identifier:   CF:A9:CB:1A:CE:F2:72:46:8F:9C:3B:35:E6:A9:7A:44:E2:41:1F:26
Certificate issuer:       /CN=0B60CA91C9FDE7598DB53A0F81A254B9177EAF49
Certificate serial:       691C734A71D8178527E34C6271C0998FF8F9DC00
Authority key identifier: 0B:60:CA:91:C9:FD:E7:59:8D:B5:3A:0F:81:A2:54:B9:17:7E:AF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/323830343a373135383a3a2f33322d3334203d3e20323730373833.roa
Signing time:             Thu 22 Feb 2024 14:19:13 +0000
ROA not before:           Thu 22 Feb 2024 14:14:13 +0000
ROA not after:            Thu 20 Feb 2025 14:19:13 +0000
asID:                     270783
IP address blocks:        2804:7158::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1c:73:4a:71:d8:17:85:27:e3:4c:62:71:c0:99:8f:f8:f9:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B60CA91C9FDE7598DB53A0F81A254B9177EAF49
        Validity
            Not Before: Feb 22 14:14:13 2024 GMT
            Not After : Feb 20 14:19:13 2025 GMT
        Subject: CN=CFA9CB1ACEF272468F9C3B35E6A97A44E2411F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:31:de:1b:e8:35:62:c8:d2:b1:00:4e:3e:
                    f8:8f:ca:30:38:99:44:13:21:52:48:c4:1d:4e:0b:
                    e3:a2:92:c7:85:9f:40:96:3e:e2:9c:89:aa:6b:29:
                    6b:81:a6:9a:d0:d0:03:db:bb:cb:c5:ab:7b:43:02:
                    3a:51:1e:32:43:3b:ef:a5:fc:af:4d:f7:70:61:44:
                    3a:3c:2b:27:5c:5d:af:bf:75:09:57:18:3a:1e:f6:
                    cb:94:33:0f:5a:aa:bb:71:43:e6:d1:2f:20:b2:be:
                    dc:49:4d:9f:2f:55:3e:b1:9f:30:16:e9:91:58:84:
                    38:c2:bf:d6:55:da:70:ad:d7:e4:94:19:5a:b7:7a:
                    80:10:06:e9:31:cf:e2:07:15:01:ca:11:30:32:52:
                    35:12:35:ab:43:ec:af:89:7d:62:38:2c:56:3f:0d:
                    9c:ed:27:4b:24:ab:37:89:bc:16:9b:d1:bb:7c:95:
                    b0:37:df:c0:4d:37:56:26:dc:5a:07:db:0e:38:32:
                    86:a3:0f:f5:0a:b8:7b:be:09:40:a6:f0:96:b3:40:
                    5c:b8:6e:32:41:09:9c:0d:bd:04:de:24:44:09:93:
                    f7:fc:a9:5b:43:ec:33:0b:cc:4e:82:df:a2:82:df:
                    a5:a7:29:fa:2b:21:66:78:96:ec:4e:9a:41:47:7b:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:CB:1A:CE:F2:72:46:8F:9C:3B:35:E6:A9:7A:44:E2:41:1F:26
            X509v3 Authority Key Identifier:
                keyid:0B:60:CA:91:C9:FD:E7:59:8D:B5:3A:0F:81:A2:54:B9:17:7E:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/323830343a373135383a3a2f33322d3334203d3e20323730373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7158::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:20:67:70:24:4a:67:21:22:28:fa:0a:3f:53:22:bb:83:03:
         45:a6:2b:df:a5:8d:67:2d:54:63:18:32:65:42:5d:22:db:7d:
         27:fa:2a:97:39:1e:87:5f:aa:78:67:c9:7e:64:53:99:24:00:
         e7:36:03:d2:d9:32:05:d3:b5:a7:75:0c:55:b8:84:20:02:0f:
         ac:db:db:11:0a:28:31:a0:b7:ec:e6:13:55:3f:83:ca:90:65:
         d1:6e:27:2d:f6:4e:52:d9:1a:f4:d0:9e:6a:98:bd:0f:0b:9d:
         dd:ec:e1:55:1c:2c:01:04:b3:25:db:48:47:3f:e7:32:d6:8c:
         56:2f:d6:ac:0e:dc:14:e0:af:91:31:15:14:c7:51:5d:a5:d6:
         ff:2d:a2:eb:49:39:54:4f:f4:89:8d:b3:2d:60:6a:d5:85:9b:
         cd:14:05:09:71:cc:77:9e:17:5f:ba:4c:93:0a:d4:b1:02:dd:
         b9:16:d8:4e:8b:43:67:be:3c:32:1d:d5:40:ca:d0:2e:4e:60:
         f9:a7:d7:af:90:80:94:dd:87:ef:56:91:ee:c6:cc:00:7c:ff:
         49:3b:54:df:50:d5:17:eb:6f:d7:8a:57:50:10:20:c5:a5:e4:
         ec:1f:80:42:02:4a:c2:42:b8:bd:4a:6c:a4:4f:ad:f9:df:b0:
         4b:09:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:29 2025 by rpki-client