Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          C2wnUm/yqPsHhFFWgIQeBHiS8ArfcNBwAGMYb5+xmPk=
Subject key identifier:   E4:0A:2E:25:A9:AB:3A:2B:EA:4A:0D:14:77:CC:60:DF:5C:B3:A5:8E
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       42B9A4FEBCE40779B1CC3254CDF4FB105D376AD3
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:01 +0000
ROA not before:           Tue 12 Sep 2023 04:55:01 +0000
ROA not after:            Tue 10 Sep 2024 05:00:01 +0000
asID:                     262713
IP address blocks:        2804:640:7f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b9:a4:fe:bc:e4:07:79:b1:cc:32:54:cd:f4:fb:10:5d:37:6a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:01 2023 GMT
            Not After : Sep 10 05:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:e1:28:32:e3:94:1a:9d:55:ea:02:32:e5:
                    19:5e:67:b9:70:a1:b9:e8:29:aa:43:53:e8:44:94:
                    dd:31:cc:0f:a8:06:b6:1b:6c:85:b7:51:94:bd:1a:
                    a1:54:23:9e:51:1b:98:97:da:63:ca:b0:b1:33:11:
                    f5:0c:ea:63:4f:e1:31:f6:ff:c2:55:f8:1a:ac:b7:
                    16:5e:57:99:04:89:68:77:17:b9:f9:aa:48:5c:86:
                    38:d8:43:fd:52:79:24:7c:a0:c9:a4:c1:f0:32:cf:
                    26:a5:1e:4f:5d:c0:ac:8a:03:04:30:a8:24:b1:23:
                    75:33:f3:e0:b2:c8:27:44:d1:36:cf:b1:bf:10:3e:
                    9c:ed:9d:83:9b:e9:ce:56:83:f1:3e:22:d7:c9:b4:
                    2d:cb:7f:6a:da:e0:94:68:e3:ad:77:73:3d:26:58:
                    7f:f9:d1:72:f5:60:47:c8:51:84:4a:85:66:17:7b:
                    76:2c:77:f8:2a:49:89:f0:d0:60:fd:d7:9f:2b:81:
                    59:37:b1:ed:bb:3d:ca:98:a0:c8:26:12:2e:15:e5:
                    22:68:fb:9a:63:59:ee:48:61:2a:cb:86:bb:95:55:
                    ed:5f:42:07:e9:cf:b2:1b:88:c5:0d:0c:d0:0c:5b:
                    0f:d8:06:ec:47:a1:20:c9:8f:33:0a:d3:0a:26:b5:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0A:2E:25:A9:AB:3A:2B:EA:4A:0D:14:77:CC:60:DF:5C:B3:A5:8E
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:d4:b4:b3:d0:a2:c9:53:e2:86:e7:8e:75:2b:06:80:ee:
         0a:79:e8:a2:09:d0:03:ab:b4:40:80:63:4b:35:73:ce:c4:41:
         c1:fe:e2:e7:14:2b:fe:6e:e2:8f:3e:cf:ea:ed:f3:a6:f9:85:
         41:5a:d4:b7:bb:40:88:f6:8e:54:19:c1:01:a1:0f:03:a2:68:
         2e:29:52:40:a6:78:ae:00:b4:5d:02:1e:98:41:ae:9a:31:d4:
         42:35:84:aa:71:be:17:f0:9c:c0:14:51:98:54:1e:03:ad:9b:
         00:3c:9d:30:18:84:75:d1:a9:6a:71:be:98:3f:40:79:37:4c:
         c2:36:30:56:9b:ea:b6:47:56:eb:6e:62:29:f4:60:fb:85:6d:
         d2:3d:f4:da:72:79:2d:45:64:58:26:d9:72:12:da:c7:d2:06:
         b0:71:a5:ce:cd:a3:02:86:ed:9c:9d:cd:a7:6b:4f:a1:04:68:
         ce:70:b8:b6:16:72:78:96:5c:5f:e8:a1:85:c8:ea:14:a4:54:
         5a:0e:52:54:12:b5:ae:31:05:53:94:0d:24:c3:84:44:21:13:
         49:16:37:e0:8b:2a:53:96:c5:62:ea:01:9e:d8:e4:0b:e1:e8:
         11:36:4a:c8:57:8b:18:ab:aa:df:9f:11:67:36:d8:6d:92:9b:
         fd:58:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:22 2025 by rpki-client