Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031353a3a2f34382d3438203d3e203238333036.roa
File:                     323830343a33343a323031353a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier:          xyyDa5sJJ2157uNeYMb/jn5yo8OPdVGddTM+94m8y/I=
Subject key identifier:   53:08:97:2A:92:CC:F5:2D:83:A1:D2:01:6D:8B:73:97:34:07:9A:E8
Certificate issuer:       /CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Certificate serial:       0A11F3BD7F671C6AAEC003DF552A4ED0362ACF25
Authority key identifier: DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031353a3a2f34382d3438203d3e203238333036.roa
Signing time:             Thu 21 Sep 2023 19:37:55 +0000
ROA not before:           Thu 21 Sep 2023 19:32:55 +0000
ROA not after:            Thu 19 Sep 2024 19:37:55 +0000
asID:                     28306
IP address blocks:        2804:34:2015::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:11:f3:bd:7f:67:1c:6a:ae:c0:03:df:55:2a:4e:d0:36:2a:cf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
        Validity
            Not Before: Sep 21 19:32:55 2023 GMT
            Not After : Sep 19 19:37:55 2024 GMT
        Subject: CN=5308972A92CCF52D83A1D2016D8B739734079AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:ff:e4:9d:47:94:bb:57:5a:1c:5a:e1:51:
                    15:5d:7e:c7:a9:80:f7:2d:ab:a1:6c:a1:d6:87:98:
                    ac:77:1f:b3:8b:66:ce:3c:0c:ef:e5:c3:04:e5:c5:
                    19:9b:dc:f8:14:f3:c4:34:1a:bd:0d:0a:30:b2:65:
                    b9:b8:9b:19:b1:b0:92:c7:ba:ce:50:76:54:68:19:
                    09:36:74:97:4f:26:27:45:80:e2:a1:4f:6b:2c:a1:
                    47:51:9e:b7:0e:4d:af:4d:56:1a:fd:b1:b6:b3:83:
                    98:88:6e:9f:cd:66:99:70:4d:0e:02:ed:f7:a6:9b:
                    7a:76:22:38:63:11:df:e0:54:1c:cd:34:3b:e5:8f:
                    27:33:fa:bc:8a:55:c2:79:78:6a:43:e1:73:f7:97:
                    91:30:57:bc:c6:01:06:a9:a4:6f:27:30:fa:cd:03:
                    d9:5e:fc:b3:bd:69:fd:e7:59:cb:af:a8:de:57:1b:
                    b1:c2:4f:95:99:5f:19:a1:f9:e2:da:25:5a:20:35:
                    b2:88:50:fb:97:ae:ed:10:91:6b:7e:ca:ff:80:09:
                    27:2f:9f:37:0c:37:50:1e:81:d9:ff:ec:db:e8:8a:
                    a8:59:94:40:59:34:db:17:35:52:b1:78:d9:7d:76:
                    77:35:68:53:73:b9:c7:1d:92:e6:c9:d7:95:ea:de:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:97:2A:92:CC:F5:2D:83:A1:D2:01:6D:8B:73:97:34:07:9A:E8
            X509v3 Authority Key Identifier:
                keyid:DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031353a3a2f34382d3438203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34:2015::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:87:33:c7:18:94:fa:b7:1a:1e:5a:d5:ff:4b:dc:58:c6:02:
         86:08:4a:3a:86:9b:c8:f6:6a:ce:f1:a9:fe:f8:aa:88:1e:62:
         58:e5:1a:56:92:9f:37:79:2e:93:1b:b6:c5:e6:cf:be:b8:ff:
         f6:e2:56:81:a1:6c:3b:77:9d:70:b8:e7:6e:5b:67:a4:cf:77:
         c1:95:28:22:93:87:7e:74:d3:09:2c:31:db:78:0c:1f:49:65:
         a6:d7:28:16:2e:ed:ab:d1:c4:0c:6f:3f:0d:11:8d:0b:a6:3f:
         d0:4f:cf:33:00:3f:f3:e1:f7:e9:97:6c:ce:51:41:e2:af:fe:
         90:38:97:a2:44:b7:60:ad:55:3f:ac:ca:71:75:92:2e:c8:c4:
         27:2f:90:36:e9:28:f5:b1:f5:05:ea:dd:f7:11:1c:2f:ad:07:
         56:d8:ca:72:71:06:1f:1c:55:4b:0c:b9:c1:68:cf:1d:b6:02:
         9a:4d:98:ac:97:74:30:29:93:1a:bf:f3:2f:51:7a:02:ea:f2:
         de:d0:f3:9e:90:a8:6e:9d:42:0a:67:af:40:d8:d6:c2:ee:e0:
         71:fe:10:54:8e:d4:e9:ed:60:c7:cb:87:18:84:9c:cd:f7:c7:
         8b:d4:3b:0c:5e:25:a2:cb:9b:14:11:44:1f:20:e0:f1:9d:72:
         0e:63:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:07 2025 by rpki-client