Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a3a2f33322d3334203d3e20323633363633.roa
File:                     323830343a313132633a3a2f33322d3334203d3e20323633363633.roa (raw, json)
Hash identifier:          C9/MMmgWIBD6MjxL8AQ/wqA2DKhbORBknV5pjikzphw=
Subject key identifier:   5B:02:CE:A1:A2:28:63:A0:49:8C:90:B7:E8:5D:61:2E:2E:F8:82:47
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       6041C1C2029672D3E55594939865BF27633AA501
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a3a2f33322d3334203d3e20323633363633.roa
Signing time:             Fri 08 Mar 2024 14:52:25 +0000
ROA not before:           Fri 08 Mar 2024 14:47:25 +0000
ROA not after:            Fri 07 Mar 2025 14:52:25 +0000
asID:                     263663
IP address blocks:        2804:112c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:41:c1:c2:02:96:72:d3:e5:55:94:93:98:65:bf:27:63:3a:a5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  8 14:47:25 2024 GMT
            Not After : Mar  7 14:52:25 2025 GMT
        Subject: CN=5B02CEA1A22863A0498C90B7E85D612E2EF88247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:f7:ad:e1:2f:28:89:be:98:56:18:40:70:
                    3d:67:f9:fc:f0:b3:bc:21:ba:9e:1e:1c:0b:01:41:
                    59:fd:61:98:b4:3a:0d:40:ff:8e:85:44:7c:d1:a5:
                    5c:e8:75:97:f9:d0:30:ab:9d:8f:fc:7b:c7:de:56:
                    26:02:cb:8b:31:35:65:7e:ff:33:56:cc:f0:05:46:
                    55:64:9f:36:df:55:09:bf:06:9c:f0:87:fd:b2:54:
                    86:7a:d9:24:5a:9e:9e:57:fb:16:c3:f0:92:7f:5c:
                    c1:e0:f9:29:91:3f:ca:4e:65:bf:17:9f:8f:47:8d:
                    44:76:91:d1:73:e7:79:34:c1:ad:b0:52:99:fd:a4:
                    4c:eb:23:36:0f:d7:1d:53:46:9f:05:e2:c6:84:4c:
                    65:0e:3e:27:c2:a3:89:5f:41:96:2c:f8:6c:f3:39:
                    cb:ea:c6:09:0a:24:b3:b9:2d:d6:11:cb:8a:f9:b9:
                    1b:09:1c:cd:6c:d9:7e:ff:b2:b7:50:f8:79:bb:a1:
                    48:c9:91:cc:b4:cc:b7:09:5d:cf:f6:1a:ea:5c:74:
                    39:d6:fd:c8:e5:dc:b3:ef:e1:a6:89:20:2f:62:a2:
                    66:df:eb:ca:67:0f:db:9b:22:df:a3:f3:9e:40:25:
                    17:54:5c:e9:9a:a3:02:a2:3b:75:a8:83:ac:05:c4:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:02:CE:A1:A2:28:63:A0:49:8C:90:B7:E8:5D:61:2E:2E:F8:82:47
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a3a2f33322d3334203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:112c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:48:04:a0:fe:aa:51:36:c2:c3:9e:ba:ca:6b:e2:2b:5d:e9:
         0f:4c:37:da:95:12:8f:b1:51:ac:93:ce:7f:d5:db:89:f5:8b:
         2b:85:b7:d3:d9:26:f9:d6:9f:b1:79:ec:3d:58:0f:aa:53:80:
         4f:8c:00:ae:a1:ef:0a:f3:f6:10:41:95:5c:e0:c6:29:62:76:
         f0:e5:3e:bf:2f:e7:32:2e:1e:34:41:51:be:66:7f:a3:40:5b:
         3f:21:9d:d6:4e:43:6a:5f:0a:ce:9f:80:ef:04:35:a6:27:a6:
         28:7a:54:c5:d3:1e:01:1f:d6:d0:23:f6:4a:c1:d1:b4:a6:a3:
         b6:b0:7b:51:34:1f:9c:70:99:ba:96:a5:73:ed:a1:1a:af:8c:
         63:37:9d:30:15:30:28:28:ef:97:f9:20:13:ab:45:55:62:13:
         71:25:8c:1c:ec:2c:40:3f:01:ac:d3:15:73:d1:46:25:ed:0a:
         e9:ab:4a:a0:e2:d4:b3:93:c6:c9:67:c8:20:23:85:d9:2a:b1:
         b1:16:e1:45:dd:d5:f8:aa:b6:ab:ad:ca:b4:f1:c0:81:44:0e:
         a7:8f:0e:31:38:41:9d:45:a7:6a:2e:b0:d7:25:0c:ac:29:d0:
         c2:97:f3:45:fe:3e:ed:73:12:c0:77:d2:ed:c7:7d:2d:b3:3d:
         80:83:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:19:12 2025 by rpki-client