Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa
File:                     323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa (raw, json)
Hash identifier:          4gA8rAmCkxImJTLuAuFest/AY5MH/uJQJ/Kuyn2sBVU=
Subject key identifier:   E1:F2:74:2B:A3:2C:21:84:BB:26:99:54:48:A0:BA:36:48:04:74:13
Certificate issuer:       /CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Certificate serial:       017E51BACEC26D06F6850AC2C1B595BBC1C684CF
Authority key identifier: F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa
Signing time:             Sat 31 Aug 2024 14:14:50 +0000
ROA not before:           Sat 31 Aug 2024 14:09:50 +0000
ROA not after:            Sat 30 Aug 2025 14:14:50 +0000
asID:                     268091
IP address blocks:        2804:57dc:8200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7e:51:ba:ce:c2:6d:06:f6:85:0a:c2:c1:b5:95:bb:c1:c6:84:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
        Validity
            Not Before: Aug 31 14:09:50 2024 GMT
            Not After : Aug 30 14:14:50 2025 GMT
        Subject: CN=E1F2742BA32C2184BB26995448A0BA3648047413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:14:5e:19:4b:62:18:e5:43:9b:98:ba:ac:
                    e0:a5:f0:ea:96:f7:d8:ee:25:d2:b2:da:a7:e2:c6:
                    fb:f4:f2:1b:84:a7:9c:47:c4:6f:66:69:89:09:c1:
                    13:c0:b8:f4:a1:69:d3:4d:bf:e8:7b:4d:41:15:3a:
                    64:56:fe:44:d3:ef:9c:09:a0:96:95:14:f7:d9:36:
                    4d:e9:82:66:3b:a3:ce:66:3d:e3:f7:e7:3c:a6:3c:
                    d5:c0:a3:1b:31:37:8e:b0:81:df:50:e9:50:e2:d5:
                    ea:d8:7d:ca:44:c3:b7:e7:cb:52:c5:48:87:5c:ab:
                    21:ec:09:b3:15:81:02:64:f6:8e:9a:dd:bc:2f:84:
                    b7:bb:2a:63:b6:31:97:a5:71:c8:ec:f9:a3:9d:8f:
                    0c:e8:ec:dd:c0:40:4f:dc:20:ee:29:81:4c:7f:3b:
                    cd:5b:5d:00:a2:bd:1b:95:b2:02:73:ad:84:76:2c:
                    16:c8:d8:44:81:46:1c:1d:23:a9:43:23:1a:b8:c3:
                    7b:dc:38:f4:5a:aa:6d:c2:28:b6:da:34:0e:2f:ca:
                    a1:a8:b1:5b:49:32:45:3e:2b:84:3a:e1:a9:6a:56:
                    c7:06:be:ed:93:78:31:9c:fc:ce:8e:e8:19:b4:b9:
                    54:83:dc:18:2e:8f:20:13:52:e3:a1:1b:73:97:f5:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:74:2B:A3:2C:21:84:BB:26:99:54:48:A0:BA:36:48:04:74:13
            X509v3 Authority Key Identifier:
                keyid:F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57dc:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:57:ca:5b:7e:3b:1b:48:13:2b:3e:b2:27:b4:09:fd:c6:
         e3:06:85:b1:c2:cf:e9:17:fd:75:2a:41:6a:25:db:22:4d:e9:
         f4:cd:b2:0f:26:88:06:28:b8:af:5c:da:7f:6c:e3:e0:3a:d1:
         f4:1a:dc:21:e1:87:24:16:e7:06:d2:9d:25:f3:a7:e2:d5:01:
         bc:e4:01:e1:c2:59:5e:33:f1:ae:d3:0b:66:ef:21:ef:16:74:
         2f:84:21:83:b5:5e:be:c6:4b:41:ce:1f:2b:e0:20:82:f5:61:
         fb:6b:d2:6d:c0:bb:a3:fc:2e:e1:78:12:43:ea:c4:d6:48:61:
         ec:9a:7b:2d:d8:c9:5e:65:15:7c:05:2d:d8:94:64:97:5a:38:
         6a:45:ae:74:95:7b:32:5a:75:85:73:0b:b2:19:b0:70:08:b5:
         23:b4:c6:fc:62:7d:30:f6:d9:f9:47:e3:d0:db:f9:e9:f5:e3:
         45:7e:21:fc:6a:cc:17:ab:6e:1e:34:c6:43:09:a8:93:2f:52:
         6a:3d:76:9f:99:ce:29:12:40:c7:fc:10:33:a2:37:63:a6:95:
         f4:50:fe:ca:9a:31:ec:ba:49:8b:a2:70:33:6b:02:ce:0b:e8:
         5e:9f:71:1f:b5:fd:20:03:2c:2d:58:97:c7:95:25:47:4b:0b:
         64:95:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:37:05 2025 by rpki-client