Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/323830343a383466383a3a2f33322d3332203d3e20323732353439.roa
File:                     323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (raw, json)
Hash identifier:          0EoUkrjyqWJM+zNWi9zOYYhR7gr16G6jlXqT/I7H9ds=
Subject key identifier:   87:17:75:A1:D3:AC:AE:57:6D:30:23:00:B9:A5:C0:36:6F:94:7D:86
Certificate issuer:       /CN=E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0
Certificate serial:       78978B17D3DCD57B4D08142AE958AC31CB1F40FC
Authority key identifier: E6:0E:5F:7F:E1:90:4A:CD:49:F7:8A:EF:F5:A4:41:C4:8B:D5:FB:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/323830343a383466383a3a2f33322d3332203d3e20323732353439.roa
Signing time:             Fri 13 Oct 2023 19:00:00 +0000
ROA not before:           Fri 13 Oct 2023 18:55:00 +0000
ROA not after:            Fri 11 Oct 2024 19:00:00 +0000
asID:                     272549
IP address blocks:        2804:84f8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:97:8b:17:d3:dc:d5:7b:4d:08:14:2a:e9:58:ac:31:cb:1f:40:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0
        Validity
            Not Before: Oct 13 18:55:00 2023 GMT
            Not After : Oct 11 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100ECAC2868EEA5759A55A71344A2CFCB4E7547A5CC89960CCCCB6FD1FE876BCFAAC5EFAE19D70B913EE55A2D087AF68D8CF6E313E0D0F89A85DA790CFB5CF7CC89C794CF36C124888AB8A0E2F5D736CF90A8BC2A7DED3A9C1505E60F3919D0CE0869CEA6AFA6A84ACCC1D4675A7620F037897994367113C67BE5B44B3CF331646E89984455BADF39002BF64141C041318D23E7D1700CCDE41561C7DF9BB075DB859927F76FFB1DD803582FB0874B36C30ADEED8CD3A00036FD548D843F746055B71D4CEA19A9326A82F6C393A9A4BCA9B0454C661020EF638174325D0AF42CD84DDC4CE110CFE3FC0DF98C3E8E54CC099F399439B8B399CF22FBB15F9D7A9C1E5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:28:68:ee:a5:75:9a:55:a7:13:44:a2:cf:
                    cb:4e:75:47:a5:cc:89:96:0c:cc:cb:6f:d1:fe:87:
                    6b:cf:aa:c5:ef:ae:19:d7:0b:91:3e:e5:5a:2d:08:
                    7a:f6:8d:8c:f6:e3:13:e0:d0:f8:9a:85:da:79:0c:
                    fb:5c:f7:cc:89:c7:94:cf:36:c1:24:88:8a:b8:a0:
                    e2:f5:d7:36:cf:90:a8:bc:2a:7d:ed:3a:9c:15:05:
                    e6:0f:39:19:d0:ce:08:69:ce:a6:af:a6:a8:4a:cc:
                    c1:d4:67:5a:76:20:f0:37:89:79:94:36:71:13:c6:
                    7b:e5:b4:4b:3c:f3:31:64:6e:89:98:44:55:ba:df:
                    39:00:2b:f6:41:41:c0:41:31:8d:23:e7:d1:70:0c:
                    cd:e4:15:61:c7:df:9b:b0:75:db:85:99:27:f7:6f:
                    fb:1d:d8:03:58:2f:b0:87:4b:36:c3:0a:de:ed:8c:
                    d3:a0:00:36:fd:54:8d:84:3f:74:60:55:b7:1d:4c:
                    ea:19:a9:32:6a:82:f6:c3:93:a9:a4:bc:a9:b0:45:
                    4c:66:10:20:ef:63:81:74:32:5d:0a:f4:2c:d8:4d:
                    dc:4c:e1:10:cf:e3:fc:0d:f9:8c:3e:8e:54:cc:09:
                    9f:39:94:39:b8:b3:99:cf:22:fb:b1:5f:9d:7a:9c:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:75:A1:D3:AC:AE:57:6D:30:23:00:B9:A5:C0:36:6F:94:7D:86
            X509v3 Authority Key Identifier:
                keyid:E6:0E:5F:7F:E1:90:4A:CD:49:F7:8A:EF:F5:A4:41:C4:8B:D5:FB:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/323830343a383466383a3a2f33322d3332203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:57:dc:f6:f3:fb:41:e6:32:09:25:a5:00:fb:7b:b8:45:88:
         e9:81:9d:a4:3f:df:98:cc:86:d7:24:2f:8e:cf:27:b3:07:e0:
         4b:f2:9e:71:53:8c:55:97:ec:2b:cd:23:73:e5:43:ca:24:7c:
         54:55:8e:d9:55:e6:fc:e9:a5:bb:03:90:d7:b9:25:3a:d5:8d:
         0f:29:7f:a6:78:ae:3e:5f:c6:3f:a1:eb:da:ad:a0:38:ec:bd:
         73:d5:e3:fc:f7:a5:43:99:17:3a:22:14:20:ca:07:9d:fb:db:
         1e:1d:21:6e:98:cf:02:ea:49:d2:91:fd:13:6d:4f:f9:c8:9e:
         36:04:fe:0c:c6:dc:a4:1f:de:75:b6:20:bb:8a:a7:59:56:b8:
         d2:b8:58:49:f3:c4:43:bd:a5:4e:11:bc:00:cc:18:6d:87:26:
         d3:45:f3:4a:46:ec:30:b5:77:96:cb:46:69:0c:c0:4f:eb:9e:
         cc:26:4b:13:cd:5c:82:5d:a1:8d:15:ec:24:9b:57:4f:8f:b5:
         4a:e5:4e:03:c8:79:7a:ce:be:80:b5:b1:0a:a7:f8:9a:09:29:
         2b:f6:33:ca:b4:3d:7b:c9:04:d1:10:64:2b:58:ea:99:cc:87:
         ea:2a:35:63:b5:9d:ec:98:52:ae:7b:53:47:8d:57:63:2d:99:
         c9:11:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:15 2025 by rpki-client