Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33342d3334203d3e20323639303032.roa
File:                     323830343a356466303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier:          6XpMFhpaQYkoBmIAMgVPATk+WKMgcz3U1vUexd7STHA=
Subject key identifier:   7B:12:B6:88:27:44:54:BA:3B:A9:F5:84:69:7A:5A:28:93:27:8C:DD
Certificate issuer:       /CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
Certificate serial:       31D19C449D5BFE4D7B9B9BD1DFF4E519D064A9E0
Authority key identifier: F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33342d3334203d3e20323639303032.roa
Signing time:             Thu 15 Feb 2024 21:51:37 +0000
ROA not before:           Thu 15 Feb 2024 21:46:37 +0000
ROA not after:            Thu 13 Feb 2025 21:51:37 +0000
asID:                     269002
IP address blocks:        2804:5df0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d1:9c:44:9d:5b:fe:4d:7b:9b:9b:d1:df:f4:e5:19:d0:64:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Validity
            Not Before: Feb 15 21:46:37 2024 GMT
            Not After : Feb 13 21:51:37 2025 GMT
        Subject: CN=7B12B688274454BA3BA9F584697A5A2893278CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4b:1e:91:b8:97:f1:0c:59:bd:27:cf:fc:39:
                    03:f4:80:fa:d5:ab:86:1b:69:12:c1:32:12:39:d0:
                    96:45:2f:0a:b7:c6:98:2d:e5:86:63:07:d2:24:c7:
                    cf:1c:f4:e6:1d:a3:d2:32:d6:71:39:13:28:49:49:
                    0c:36:a3:bf:9c:a5:89:12:c2:88:ac:de:fc:52:a7:
                    c0:26:c4:e8:97:ea:95:07:8b:f4:a3:af:2d:55:f4:
                    e4:cd:80:4a:17:9e:32:ac:dc:7d:01:1d:cf:9d:9b:
                    41:3e:73:9b:37:0e:5f:90:1e:9e:85:f7:11:6c:34:
                    c8:31:52:b0:12:aa:d8:ad:ef:65:c4:43:35:1d:6d:
                    85:e7:34:90:d7:7f:30:0d:7c:fc:ca:51:f2:9a:1a:
                    e9:94:b6:0b:d5:18:2e:09:53:39:88:04:43:8b:21:
                    d0:09:7a:be:20:a0:b1:22:42:26:f4:86:5d:2e:27:
                    a6:ba:29:64:b4:99:7b:57:04:7b:0f:d2:b2:af:2b:
                    d6:a8:3a:45:05:55:3b:bd:19:70:ad:53:17:c2:48:
                    80:ff:f1:c6:44:cb:ac:c5:89:52:b1:73:9f:4c:f2:
                    0b:c2:f1:79:dc:57:5c:2f:e5:8d:f4:4f:4a:95:63:
                    c6:f1:0b:cc:33:d4:85:1f:e4:4d:8c:0e:39:d8:2b:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:12:B6:88:27:44:54:BA:3B:A9:F5:84:69:7A:5A:28:93:27:8C:DD
            X509v3 Authority Key Identifier:
                keyid:F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33342d3334203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:62:65:59:33:cc:09:ab:4d:13:39:aa:da:67:ba:99:5b:fa:
         f0:d1:d8:fb:9c:20:ee:31:e6:4c:6f:d5:86:61:38:96:16:f9:
         a4:23:1f:2d:11:ed:96:f3:54:e2:7b:8a:f1:a4:fc:89:2e:e2:
         44:e4:fb:64:75:71:48:b9:32:1a:b7:3f:7d:0b:f6:2a:49:f1:
         ae:c1:4e:db:70:1c:dc:9b:1b:cf:6b:9b:24:b2:01:ab:8d:77:
         4c:51:e2:56:1e:42:b1:df:89:6b:a3:07:92:42:bc:f0:a7:d4:
         f2:d2:99:7d:eb:f9:1d:a9:ec:ec:c6:e4:17:1c:35:86:6d:98:
         bf:1f:cb:19:bb:87:c1:32:2d:82:73:22:09:bc:04:5a:b9:87:
         66:96:08:16:3b:b2:32:46:62:55:90:e1:11:f0:13:9b:44:b7:
         a7:64:ca:1f:b6:8d:9a:da:4f:31:ac:21:44:6f:74:ef:8c:f7:
         3b:3c:75:ac:85:23:70:39:23:c8:34:d0:3a:7b:52:2d:7e:3b:
         82:ec:44:dd:b8:ad:ae:35:23:98:f0:b1:a1:33:3a:12:dc:d2:
         9e:68:7a:b0:12:f6:80:e7:f4:a9:f5:e8:d8:dd:11:da:35:e7:
         9b:eb:b1:75:88:f9:d3:fa:fe:24:11:23:95:59:be:b4:95:46:
         74:b0:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:13 2025 by rpki-client