Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/323830343a356637383a3a2f33322d3332203d3e20323639313032.roa
File:                     323830343a356637383a3a2f33322d3332203d3e20323639313032.roa (raw, json)
Hash identifier:          ML8uMB94ZhCuv6roLM85NT7yXGa0wWsYldAPDvBsM0Q=
Subject key identifier:   08:2E:92:F3:F1:8D:43:D6:7F:59:51:74:7F:47:EE:19:B9:A4:48:09
Certificate issuer:       /CN=2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B
Certificate serial:       6461D03AA979B0CD563E1B55823F87F02ECA0579
Authority key identifier: 2D:CA:FB:3D:2D:82:42:05:A3:59:EE:5D:E2:FF:C4:C0:7D:1B:4A:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/323830343a356637383a3a2f33322d3332203d3e20323639313032.roa
Signing time:             Mon 15 Jul 2024 20:05:08 +0000
ROA not before:           Mon 15 Jul 2024 20:00:08 +0000
ROA not after:            Mon 14 Jul 2025 20:05:08 +0000
asID:                     269102
IP address blocks:        2804:5f78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:61:d0:3a:a9:79:b0:cd:56:3e:1b:55:82:3f:87:f0:2e:ca:05:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B
        Validity
            Not Before: Jul 15 20:00:08 2024 GMT
            Not After : Jul 14 20:05:08 2025 GMT
        Subject: CN=082E92F3F18D43D67F5951747F47EE19B9A44809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7f:19:00:0e:2a:1a:8c:79:88:bb:21:77:5a:
                    cc:4c:b6:3f:79:f9:6f:6d:a3:9b:e4:4f:18:e1:4a:
                    8e:10:43:bd:e3:ad:3d:68:82:ea:c2:50:30:bf:4a:
                    94:c8:91:9a:6a:e0:ca:a8:fd:1c:c6:81:22:0b:15:
                    25:c8:1f:f7:bb:da:27:79:81:13:44:d0:af:3b:45:
                    2a:af:ae:aa:67:85:65:78:8c:c4:fb:ec:d6:dc:1f:
                    4c:bc:12:50:36:71:6a:2d:f9:a8:a0:72:31:f2:60:
                    24:cf:e3:c6:e6:50:64:b8:66:14:ec:6c:f2:c6:4e:
                    15:0b:e3:57:e2:0e:6d:9a:d0:de:3b:40:dc:0c:69:
                    b5:9b:d5:a0:e6:27:f5:5b:f4:f9:96:44:44:07:7e:
                    b2:c8:90:b8:60:8c:14:9f:2a:cc:d5:61:26:a2:7f:
                    c4:e5:c6:68:be:82:19:8e:21:f6:ec:da:e5:24:ae:
                    70:e0:aa:ae:8f:a7:fb:5b:67:f4:37:d5:4e:7d:fd:
                    38:24:4a:0f:0b:83:a0:2e:3d:4a:af:3a:40:a2:6e:
                    3a:15:69:f3:c3:fd:e9:f2:e1:f0:d0:2c:38:8e:c7:
                    64:b3:64:59:b2:7b:c8:1c:90:50:bd:17:d1:53:5c:
                    b2:ea:93:24:3a:3b:ac:55:43:96:ab:98:20:00:ef:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2E:92:F3:F1:8D:43:D6:7F:59:51:74:7F:47:EE:19:B9:A4:48:09
            X509v3 Authority Key Identifier:
                keyid:2D:CA:FB:3D:2D:82:42:05:A3:59:EE:5D:E2:FF:C4:C0:7D:1B:4A:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/323830343a356637383a3a2f33322d3332203d3e20323639313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:3c:09:95:94:e6:7e:2e:bc:fd:90:1d:db:de:73:c9:17:
         70:22:b1:27:7e:6d:b6:16:b7:7f:7c:6a:ee:d8:ac:39:9e:a1:
         85:7f:2c:24:64:16:a9:b3:46:c1:8b:3b:3f:e2:c8:cc:4b:d6:
         09:6c:e6:48:7e:0b:41:25:31:f1:08:fa:ba:15:3c:ee:53:43:
         75:5e:ba:61:f9:b7:70:55:1d:70:33:09:7d:0c:c4:96:f6:5f:
         1d:ac:95:3f:18:5b:62:3d:a4:b9:a9:26:a3:7b:da:84:48:f9:
         73:94:1a:8e:37:63:fa:46:77:11:2f:98:a0:9f:c1:2f:ee:4a:
         04:ab:db:53:31:8e:b0:97:f2:74:b3:81:1a:8b:2c:56:eb:24:
         8e:be:03:4a:29:96:0d:2b:63:f4:56:3a:83:3b:f3:0a:b4:b9:
         54:a1:ee:b4:41:2e:59:44:cd:d0:07:57:c8:46:99:95:cb:f6:
         7b:2a:1e:19:ce:e6:0c:75:27:69:4a:6c:9e:11:78:92:9c:db:
         ce:9c:5f:a8:3b:44:1f:7d:60:36:e7:ce:5f:80:03:79:b6:05:
         e6:f7:ed:b8:cb:95:e0:b6:99:cd:a2:8d:5e:a2:fa:f1:ac:29:
         dc:e0:08:63:57:51:dc:91:06:da:50:f4:f6:4a:12:48:db:b2:
         49:06:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:38:08 2025 by rpki-client