Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
File:                     323830343a343062633a3a2f33322d3438203d3e20323635393738.roa (raw, json)
Hash identifier:          Vvz9DoY364wVQMpFIMwCt78ep/xm3d6orkBiAMVODB4=
Subject key identifier:   B4:E1:CD:9B:E7:BD:37:65:DC:61:87:C4:13:BF:F4:BF:5D:FE:8B:0E
Certificate issuer:       /CN=CAFC2131DEEA7214580D3F889B0C551E993D4B39
Certificate serial:       4528C3AB79A30D231CA00DF5AAFBBDE5C8F6110B
Authority key identifier: CA:FC:21:31:DE:EA:72:14:58:0D:3F:88:9B:0C:55:1E:99:3D:4B:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAFC2131DEEA7214580D3F889B0C551E993D4B39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
Signing time:             Wed 07 Jun 2023 14:39:10 +0000
ROA not before:           Wed 07 Jun 2023 14:34:10 +0000
ROA not after:            Wed 05 Jun 2024 14:39:10 +0000
asID:                     265978
IP address blocks:        2804:40bc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:28:c3:ab:79:a3:0d:23:1c:a0:0d:f5:aa:fb:bd:e5:c8:f6:11:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFC2131DEEA7214580D3F889B0C551E993D4B39
        Validity
            Not Before: Jun  7 14:34:10 2023 GMT
            Not After : Jun  5 14:39:10 2024 GMT
        Subject: CN=B4E1CD9BE7BD3765DC6187C413BFF4BF5DFE8B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:1d:22:16:e8:ae:91:97:79:d8:16:5a:42:
                    6e:65:33:46:2c:68:9b:70:27:b1:84:f6:3f:6a:fc:
                    e4:52:a8:d3:75:e3:e4:c8:53:f3:34:5a:d0:70:7c:
                    28:63:47:ee:47:ea:a2:c7:ee:d4:da:26:c0:cd:a9:
                    6c:30:9f:6b:3c:d6:19:d2:b8:14:9c:4f:35:34:bc:
                    62:fd:66:32:65:78:68:1c:4f:e0:76:cb:4a:dc:6c:
                    38:4c:e3:fa:56:86:4b:df:b6:1f:c7:43:d8:ee:29:
                    73:d9:4a:eb:83:fc:fb:bc:0d:3a:c7:74:9c:15:21:
                    39:94:b7:fb:6d:3f:6e:7e:32:33:c2:b1:04:cd:9c:
                    76:df:28:de:01:55:d6:90:62:cb:ff:a4:18:ba:cd:
                    e8:f4:51:1e:43:4e:25:f9:6e:b9:7c:2a:b4:1d:3c:
                    12:14:41:91:cd:7b:3a:b3:db:c6:d9:4d:86:98:59:
                    bd:b0:6d:8a:02:25:35:6b:7a:70:19:d8:f4:bc:72:
                    b7:21:d3:9c:1f:2d:75:dc:02:75:b1:2e:ca:6f:61:
                    fb:ec:07:bd:93:31:c3:a4:9e:5c:c9:4a:66:88:be:
                    0d:8d:76:ac:80:e7:71:2a:15:1c:b5:67:ce:12:85:
                    7c:25:3c:39:bf:65:25:b6:e3:08:71:ec:58:06:26:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:CD:9B:E7:BD:37:65:DC:61:87:C4:13:BF:F4:BF:5D:FE:8B:0E
            X509v3 Authority Key Identifier:
                keyid:CA:FC:21:31:DE:EA:72:14:58:0D:3F:88:9B:0C:55:1E:99:3D:4B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0/CAFC2131DEEA7214580D3F889B0C551E993D4B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAFC2131DEEA7214580D3F889B0C551E993D4B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:2f:79:20:0f:bb:86:da:e1:89:b2:dd:31:98:70:aa:d8:
         f2:c8:81:26:6a:d4:73:8d:44:72:6e:86:a8:ff:f3:0b:f3:ff:
         d9:9d:87:7b:d6:c2:87:38:9c:df:a3:ef:48:a1:0b:06:c9:ac:
         d2:8f:69:25:18:b0:e6:eb:20:be:f8:1d:0c:1d:89:d9:61:5c:
         99:93:44:15:a2:52:30:9a:fe:33:0c:a2:36:95:2f:62:61:05:
         40:20:0c:a5:2e:58:9c:52:d9:6b:18:8d:b2:2c:b4:0b:5f:49:
         59:7a:f3:8b:3c:f2:e5:d8:a3:29:e4:b1:18:f6:40:50:b5:f0:
         bd:08:57:1b:02:82:93:aa:47:7d:95:b7:74:64:4f:c2:6a:b1:
         82:56:7c:60:c3:f3:0e:0e:5a:68:5d:2b:3a:a2:21:c7:9a:36:
         16:a6:3a:b0:ef:d8:b0:7a:44:64:b6:94:6f:c9:f0:26:38:b9:
         08:27:26:e8:4a:8e:c6:d6:c9:fe:44:0c:80:b8:83:fb:db:4b:
         66:43:1c:7b:3d:06:9b:f2:78:b1:2f:df:a8:7e:cf:85:6e:8d:
         8a:11:40:71:84:ff:a8:bc:45:05:38:c6:ae:01:97:5d:3f:5d:
         fc:5b:09:cb:86:3b:d5:ca:36:e3:02:93:e1:61:c8:f3:d0:15:
         87:da:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:09 2025 by rpki-client