Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d3438203d3e20323638363932.roa
File:                     323830343a353532343a3a2f33322d3438203d3e20323638363932.roa (raw, json)
Hash identifier:          I+X4tjuF0MJe4EQM8YpFnkXMl6ifZS088CYu2f7zIFs=
Subject key identifier:   7D:C7:AE:DE:22:CD:F1:55:6F:5F:7F:FA:79:6D:A9:17:37:35:F8:CF
Certificate issuer:       /CN=1107631FAB155A98AABEDD080C412F5515D96DEF
Certificate serial:       41771A931F54941AE43CDFBF7CC166128C04E989
Authority key identifier: 11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d3438203d3e20323638363932.roa
Signing time:             Mon 04 Nov 2024 19:58:08 +0000
ROA not before:           Mon 04 Nov 2024 19:53:08 +0000
ROA not after:            Mon 03 Nov 2025 19:58:08 +0000
asID:                     268692
IP address blocks:        2804:5524::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:77:1a:93:1f:54:94:1a:e4:3c:df:bf:7c:c1:66:12:8c:04:e9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1107631FAB155A98AABEDD080C412F5515D96DEF
        Validity
            Not Before: Nov  4 19:53:08 2024 GMT
            Not After : Nov  3 19:58:08 2025 GMT
        Subject: CN=7DC7AEDE22CDF1556F5F7FFA796DA9173735F8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:18:72:ec:32:d6:1b:7e:3d:07:49:9c:fe:
                    36:b6:a8:86:72:a4:19:93:e8:52:78:88:a3:aa:49:
                    90:ac:60:5e:b3:fa:a7:e9:e8:05:24:04:43:1a:34:
                    78:7b:19:d2:74:73:fd:6d:e5:b1:8c:4c:37:24:5a:
                    76:04:d4:77:49:00:4a:1c:8e:73:e4:a0:fb:d2:f7:
                    65:b6:0d:59:78:13:2e:a8:ff:e1:0a:f8:22:ca:7b:
                    7c:c8:ae:f0:84:e1:96:80:06:ca:76:3f:e2:1a:b6:
                    c4:55:9b:fd:e8:b3:be:ae:77:dd:2c:91:d8:8e:6a:
                    37:4e:39:16:5f:f5:d7:20:0d:65:8d:f0:24:34:6e:
                    b2:56:6b:78:39:70:2f:c7:a6:d0:37:28:d1:9e:50:
                    21:3b:58:de:31:74:a6:57:bd:54:a2:59:40:6b:51:
                    e6:4d:b4:ef:63:ec:82:26:94:03:92:83:08:13:28:
                    a5:88:76:47:eb:42:a7:33:63:f0:a8:3e:95:31:1a:
                    1e:9f:22:65:2b:6c:61:75:ea:a5:34:f9:f1:fa:6a:
                    10:e0:8b:7d:fc:3a:8e:8c:b6:9d:fc:bc:05:a0:4d:
                    02:b5:6a:ed:97:a7:19:92:34:9b:6e:6d:ff:e7:01:
                    1e:7a:e2:bc:a9:4d:af:14:6a:3f:59:c3:1e:82:6f:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C7:AE:DE:22:CD:F1:55:6F:5F:7F:FA:79:6D:A9:17:37:35:F8:CF
            X509v3 Authority Key Identifier:
                keyid:11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d3438203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5524::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:05:03:82:29:3a:a4:34:0b:49:84:dd:4a:4b:d1:ea:ba:
         d3:97:9b:8b:12:6b:0f:e0:12:85:0a:19:7f:47:10:bd:ea:ee:
         88:74:87:0c:cd:17:22:77:af:48:1a:8f:11:e5:d1:4b:e6:a0:
         e6:d1:25:e0:d3:46:a9:b5:f7:80:29:09:1f:40:be:fa:e8:33:
         be:0e:49:9d:ec:cc:cd:21:a9:85:71:5f:a5:8b:86:0e:2e:2d:
         a8:df:36:a6:bc:84:41:6d:9e:b1:53:53:20:91:7c:e8:0f:51:
         a4:fa:a1:48:54:30:2d:59:c7:1a:8b:7d:34:a3:e4:b6:e1:c8:
         fa:fc:40:ef:51:a4:32:54:e2:c9:69:a2:d3:48:0e:e5:e1:a4:
         cd:37:e5:92:6f:f5:99:29:01:30:62:c8:6f:66:88:5c:92:38:
         71:6e:79:38:61:c4:d4:86:52:0a:d0:bb:f1:75:89:c5:a5:2e:
         95:75:41:8c:01:ff:54:4c:4d:d2:0b:90:a4:c4:68:54:3f:82:
         64:c3:ce:e4:e5:52:93:a0:66:24:3b:10:2d:4e:f9:1a:f0:1c:
         ca:b8:d8:a0:50:ca:e3:18:bd:eb:1a:2a:c7:f5:2d:90:01:b5:
         5d:3c:92:20:de:e9:d6:b6:3a:47:32:8a:20:74:b7:ff:45:eb:
         96:57:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:54 2025 by rpki-client