Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a313030303a3a2f33362d3336203d3e20323634313639.roa
File:                     323830343a323338633a313030303a3a2f33362d3336203d3e20323634313639.roa (raw, json)
Hash identifier:          B5HRLHp1bsocjYrEE9BZSVCxI+aQrpbraX9xHkX6OyY=
Subject key identifier:   27:8B:93:5C:0E:0F:92:E3:88:69:B2:4B:A9:9C:80:F3:38:15:F2:27
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       2A5C020637524A0A220208F1423E75A18BF08847
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a313030303a3a2f33362d3336203d3e20323634313639.roa
Signing time:             Tue 06 Aug 2024 13:30:27 +0000
ROA not before:           Tue 06 Aug 2024 13:25:27 +0000
ROA not after:            Tue 05 Aug 2025 13:30:27 +0000
asID:                     264169
IP address blocks:        2804:238c:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5c:02:06:37:52:4a:0a:22:02:08:f1:42:3e:75:a1:8b:f0:88:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Aug  6 13:25:27 2024 GMT
            Not After : Aug  5 13:30:27 2025 GMT
        Subject: CN=278B935C0E0F92E38869B24BA99C80F33815F227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:f2:34:10:95:07:62:68:3b:a4:eb:a7:2b:
                    89:30:de:44:0d:f9:32:86:6e:99:d8:bb:1d:5d:b1:
                    f3:f9:e2:9b:d9:e1:db:c3:bf:fd:d9:28:de:af:15:
                    ff:7c:e3:ca:c8:10:b1:80:d4:ba:b5:66:bd:5c:bf:
                    f3:6e:5e:a6:3b:c8:98:e3:a1:3e:39:6a:c5:c7:aa:
                    e0:c4:13:2e:dd:99:86:91:b9:4f:78:be:0e:0a:f4:
                    20:e2:6f:0e:c9:83:28:72:13:72:d2:b0:21:63:c9:
                    fb:f6:17:f2:14:22:e0:43:c2:e6:e6:e6:67:84:e8:
                    4e:61:75:44:9f:9f:07:11:09:7a:71:ec:28:e2:71:
                    4c:e8:59:be:bc:35:db:28:8d:da:f2:8b:00:f0:0d:
                    85:e1:4b:d5:92:53:bb:f1:99:06:a7:93:4b:7f:37:
                    a8:99:61:10:0b:8a:e9:67:57:43:5a:b6:ae:69:f6:
                    e5:1d:22:df:01:2d:55:66:43:f0:bf:d1:d4:8e:8d:
                    e8:09:bc:74:bd:fe:9d:e0:0f:3b:a3:a3:f9:9c:c2:
                    b4:93:3e:30:33:24:5d:e4:41:16:41:e3:78:b3:da:
                    cd:05:64:5f:8e:37:eb:b7:cc:3e:6d:22:41:74:b3:
                    43:93:53:53:e3:07:32:c9:26:3f:87:34:7c:6e:ba:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:93:5C:0E:0F:92:E3:88:69:B2:4B:A9:9C:80:F3:38:15:F2:27
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a313030303a3a2f33362d3336203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:7d:7b:5f:fc:8f:eb:06:eb:e7:85:92:d3:ad:8c:22:3d:
         44:8b:cd:8b:6b:cb:02:96:0c:e0:1e:ba:ef:25:12:39:34:86:
         a8:f5:53:98:d5:14:88:14:d3:17:2d:ee:ce:a1:24:8a:b0:bf:
         97:9d:37:57:0f:6e:a3:5f:e5:0d:51:60:b6:33:89:ab:7a:33:
         4b:fc:15:4f:1e:2b:ed:8a:90:d1:11:56:5c:73:3e:59:b3:e8:
         32:a5:12:b8:97:1e:31:e6:27:9d:42:b1:82:5a:71:1e:c6:30:
         a4:08:f9:f6:e9:ce:9c:80:48:1a:dc:a8:2b:77:52:bf:f0:89:
         fa:ea:92:d1:59:19:f0:5f:9f:00:f3:1f:36:3e:2d:f1:f9:16:
         fc:0f:1a:e5:eb:ae:19:c3:bd:25:57:12:5f:39:ab:14:e5:a9:
         79:5d:22:a7:45:80:32:e2:5d:cf:53:78:78:17:f0:be:2e:5c:
         59:cf:cc:74:e6:c7:ce:99:cc:44:36:07:37:60:46:9f:b0:a0:
         0c:18:70:45:a3:56:35:bd:1e:77:99:a5:40:5a:36:d9:d5:44:
         56:b7:1e:58:d2:64:ec:59:46:de:af:0b:6a:72:86:a5:23:bd:
         d2:5e:2d:bc:98:b0:30:3f:c0:8f:cd:7f:e4:c1:bc:61:3d:87:
         89:83:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:08:16 2025 by rpki-client