Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d3438203d3e20323633313432.roa
File:                     323830343a313736303a3a2f33322d3438203d3e20323633313432.roa (raw, json)
Hash identifier:          r3nwdQOy5DnS1scKQpgL/qUPBTcIFpYOYEi/kAZbq4Y=
Subject key identifier:   3D:DB:93:7E:50:B9:F9:A1:3A:62:06:B0:46:06:8E:89:1A:01:A7:63
Certificate issuer:       /CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
Certificate serial:       2B9C0C96AAD60D1A42BCA3572D88862EAB0FE54C
Authority key identifier: 6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d3438203d3e20323633313432.roa
Signing time:             Wed 26 Apr 2023 18:19:33 +0000
ROA not before:           Wed 26 Apr 2023 18:14:33 +0000
ROA not after:            Wed 24 Apr 2024 18:19:33 +0000
asID:                     263142
IP address blocks:        2804:1760::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9c:0c:96:aa:d6:0d:1a:42:bc:a3:57:2d:88:86:2e:ab:0f:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
        Validity
            Not Before: Apr 26 18:14:33 2023 GMT
            Not After : Apr 24 18:19:33 2024 GMT
        Subject: CN=3DDB937E50B9F9A13A6206B046068E891A01A763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:9c:7a:f7:5f:e2:7d:f9:ed:34:9f:de:d3:
                    40:0c:c8:20:67:90:0f:08:55:9c:69:72:14:87:d6:
                    c5:f6:14:28:41:a2:46:07:3f:ce:40:f8:82:13:d3:
                    f0:ba:a2:41:c0:80:9a:49:74:ec:be:95:7f:7d:bb:
                    9c:b7:39:95:4a:e2:2c:6a:3f:87:81:1c:7d:8a:f3:
                    32:77:72:ad:c1:cb:3f:11:76:6a:17:06:10:97:e5:
                    6e:70:95:5c:b6:80:1c:61:5a:4f:e7:22:06:73:5c:
                    b5:62:93:68:27:57:86:40:a3:ee:77:61:78:4c:10:
                    bc:86:e8:51:79:b7:3f:4c:48:bc:0d:df:8c:58:98:
                    7a:67:88:0a:44:01:05:ae:bc:1b:4b:53:56:21:cd:
                    b2:9f:bf:51:36:70:3d:1f:92:d5:06:22:e4:10:c1:
                    26:69:e2:de:26:c3:20:ff:0e:3d:ba:d7:7b:e1:50:
                    e2:ca:d2:98:42:d5:67:f1:28:f3:8e:24:c3:52:46:
                    91:23:8e:f6:2e:95:1a:32:6e:8b:d8:96:21:58:4e:
                    4f:b3:4a:13:13:d1:a0:bd:a5:81:48:15:78:f0:27:
                    9a:22:4b:8b:4f:f4:2c:02:dc:f3:a3:9f:00:cc:ba:
                    d1:0c:96:22:80:81:01:7d:1f:60:fd:81:6f:54:aa:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DB:93:7E:50:B9:F9:A1:3A:62:06:B0:46:06:8E:89:1A:01:A7:63
            X509v3 Authority Key Identifier:
                keyid:6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d3438203d3e20323633313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1760::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:a2:d1:c5:61:7d:eb:94:af:84:7b:bd:f5:d1:7c:49:de:
         21:b3:2a:a6:be:e5:4a:ed:31:58:75:0d:00:95:df:9e:d0:b9:
         81:56:f0:28:db:95:9f:05:d3:31:ae:ce:e5:c5:43:82:21:b4:
         ad:1b:04:ab:70:cb:dc:98:d8:c9:78:b4:3c:f5:0b:24:f5:16:
         c2:d9:cd:ab:b1:80:50:e4:c8:42:a5:59:c7:2f:ef:92:cd:97:
         78:ab:ca:50:eb:25:01:17:bf:3a:7c:51:09:e1:64:1f:52:a4:
         d7:35:d3:1f:e7:0b:be:dd:6a:67:c8:94:ae:7a:b9:b4:69:75:
         7d:b4:f4:27:21:c7:b1:6d:13:b5:4b:dc:65:3d:45:b6:b4:64:
         a8:98:8a:fd:41:92:d8:92:b8:1a:95:8c:d5:64:51:64:fb:b0:
         d9:54:c7:05:7d:4e:04:af:e1:3c:5a:f3:44:80:33:1e:21:9d:
         e1:a1:38:ab:3b:89:f2:ab:aa:3c:8a:15:4b:fb:d3:ba:00:17:
         1b:59:39:2e:09:bb:8f:50:aa:ed:c6:51:9c:93:c0:5d:6d:25:
         e3:90:14:75:b1:3d:06:80:05:78:04:d2:ff:7c:19:ad:2f:68:
         f7:1b:dd:80:83:c0:21:fd:58:67:7f:e6:95:99:20:05:e9:e2:
         a0:a9:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:58 2025 by rpki-client