Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d313238203d3e20323638363932.roa
File:                     323830343a353532343a3a2f33322d313238203d3e20323638363932.roa (raw, json)
Hash identifier:          ZlItEYGNjP7K7bQp9xjZQUJkFaltzsK2snOus/c1tSA=
Subject key identifier:   F8:15:D4:79:84:35:41:CB:66:97:09:44:70:ED:09:7C:0E:AC:AC:7D
Certificate issuer:       /CN=1107631FAB155A98AABEDD080C412F5515D96DEF
Certificate serial:       264E49DB4F1BE1BD0AA93A2C8A83EC569B146722
Authority key identifier: 11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d313238203d3e20323638363932.roa
Signing time:             Tue 05 Nov 2024 02:18:49 +0000
ROA not before:           Tue 05 Nov 2024 02:13:49 +0000
ROA not after:            Tue 04 Nov 2025 02:18:49 +0000
asID:                     268692
IP address blocks:        2804:5524::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4e:49:db:4f:1b:e1:bd:0a:a9:3a:2c:8a:83:ec:56:9b:14:67:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1107631FAB155A98AABEDD080C412F5515D96DEF
        Validity
            Not Before: Nov  5 02:13:49 2024 GMT
            Not After : Nov  4 02:18:49 2025 GMT
        Subject: CN=F815D479843541CB6697094470ED097C0EACAC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:c4:91:c7:2f:23:d9:52:5a:b4:ff:2c:2e:
                    29:14:7d:fd:f3:08:ca:94:5b:d2:b2:65:fb:33:b4:
                    39:b2:7f:52:9b:eb:2d:04:85:cd:d4:d1:98:92:83:
                    08:02:c9:18:28:d2:1a:9e:6b:fa:37:bc:9b:f3:85:
                    3d:53:88:d8:4e:b6:65:08:6e:1a:f0:35:82:72:1f:
                    72:d7:90:0e:2c:47:1e:ef:72:0b:29:46:9d:04:6a:
                    3d:d9:c9:c7:84:33:b9:30:a0:ba:85:d7:f0:c7:5f:
                    26:00:62:4a:af:66:c1:67:11:e1:71:95:33:29:91:
                    69:34:37:e9:d3:14:97:12:9a:7d:3f:a0:47:7d:89:
                    01:f8:7f:0f:ba:0a:d6:53:0f:88:52:f6:79:df:a1:
                    f6:c9:67:89:08:91:2c:18:0d:c6:23:1f:a8:a8:f8:
                    42:f3:18:34:96:71:fd:93:34:85:de:6e:6c:0e:8b:
                    1e:3b:25:30:50:c1:66:20:2a:29:62:08:3e:89:50:
                    40:ce:6b:9a:3c:ee:ea:d1:b4:06:61:89:76:51:28:
                    c7:09:df:5a:1f:9b:7b:0c:6d:c2:38:53:3a:3e:bd:
                    c9:ca:9c:a8:69:79:f5:19:74:b0:38:c3:91:ce:2c:
                    83:37:f6:63:d3:ce:bd:63:32:80:4e:cf:d5:c9:8d:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:D4:79:84:35:41:CB:66:97:09:44:70:ED:09:7C:0E:AC:AC:7D
            X509v3 Authority Key Identifier:
                keyid:11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d313238203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5524::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:0f:23:39:1e:d5:9a:a8:de:4c:da:b4:e3:98:2c:24:2c:
         e3:05:de:9c:9c:dc:e4:76:b7:78:4e:0b:3b:4d:fa:41:78:69:
         fe:92:87:1d:c9:6c:4e:ef:5d:7f:1e:6b:2a:0a:15:91:58:2b:
         80:04:49:c2:c4:d6:f1:0b:78:40:7e:26:bd:41:aa:9c:62:06:
         a4:db:4e:8a:d6:8e:dd:1e:76:15:62:a0:d6:71:f2:31:ec:8a:
         ab:47:6f:a0:cf:40:d4:0b:70:6e:8d:42:20:f2:60:2e:26:3d:
         13:fe:22:fb:b8:14:6f:0a:71:21:b0:f6:7c:ea:11:71:e3:ac:
         ce:3c:e4:f9:8f:5b:cc:1f:e3:8d:ed:d0:34:a0:36:d2:87:ac:
         a9:96:c4:cc:80:6a:46:8b:c3:a4:26:5f:d0:85:b4:ef:58:2a:
         0d:a6:fd:db:98:87:a8:8e:df:37:d3:7a:ad:78:87:bc:d4:58:
         dc:7e:f2:d3:86:91:8a:88:6c:8f:62:30:92:3d:09:2b:6d:d1:
         00:28:6b:23:02:33:67:e8:14:e2:f5:70:2b:75:5d:56:2f:4c:
         7b:5c:44:59:96:50:75:30:dd:86:da:fd:7d:02:d1:14:dd:e9:
         67:6e:5f:62:40:cd:fa:44:6c:f0:9a:5c:43:a4:b4:1d:5b:a9:
         bb:a5:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:54 2025 by rpki-client