Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/323830343a383030343a3a2f33322d3332203d3e20323731373234.roa
File:                     323830343a383030343a3a2f33322d3332203d3e20323731373234.roa (raw, json)
Hash identifier:          UOxZfSyOajU4iGmoogyO2iCEQDoqxYMRmNCOS2Q3ZXU=
Subject key identifier:   E8:D2:2D:C5:5E:8D:35:61:03:53:B2:04:99:A6:7A:1B:A7:4E:CC:0B
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       7DF0231B12EBD6B603E2DB25A654ECE6ADC7EF71
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/323830343a383030343a3a2f33322d3332203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:02 +0000
ROA not before:           Thu 06 Oct 2022 17:35:02 +0000
ROA not after:            Thu 05 Oct 2023 17:40:02 +0000
asID:                     271724
IP address blocks:        2804:8004::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f0:23:1b:12:eb:d6:b6:03:e2:db:25:a6:54:ec:e6:ad:c7:ef:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:02 2022 GMT
            Not After : Oct  5 17:40:02 2023 GMT
        Subject: CN=E8D22DC55E8D35610353B20499A67A1BA74ECC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:bf:cd:42:6b:4b:9d:d3:af:a1:55:2b:28:
                    6a:9d:66:6e:58:ef:c4:b7:cc:26:27:43:35:98:16:
                    a0:51:f2:4e:be:34:d5:60:c7:75:0f:14:d6:33:69:
                    85:3f:da:66:7a:de:2a:e0:10:b0:3c:bb:5a:01:5c:
                    eb:f4:39:59:7e:92:e0:93:4c:e3:1e:95:0a:68:3d:
                    59:1c:90:33:84:10:43:7f:4b:44:2b:d2:12:83:bc:
                    dd:f1:b6:a4:54:cb:9e:45:5f:47:9c:9a:77:6a:3f:
                    c7:8c:ea:1e:e9:a5:4a:c3:27:fb:a9:ed:0a:af:6d:
                    e8:e7:9f:02:02:9d:f5:8d:63:71:b7:5f:c8:99:23:
                    2d:9c:1c:a3:cc:2c:d0:20:d7:60:0a:d3:8e:ac:7a:
                    ca:38:5e:e7:c8:22:40:52:4e:91:06:57:2f:2d:f3:
                    1e:34:38:6b:8f:de:aa:f0:1b:35:a1:e3:3d:9f:a1:
                    a7:a0:82:94:2d:0d:a0:91:c4:00:3d:b9:79:6f:f0:
                    1c:8c:29:44:2f:a0:7c:84:41:bc:85:bb:95:fe:55:
                    a5:97:3a:a9:25:1d:4a:76:ce:f0:80:a6:1d:9a:00:
                    a0:e9:fc:4a:13:47:9b:e1:1a:26:ef:71:01:ae:bc:
                    5a:fa:7b:1f:fe:9d:d8:81:a5:76:14:65:5e:bf:9a:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D2:2D:C5:5E:8D:35:61:03:53:B2:04:99:A6:7A:1B:A7:4E:CC:0B
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/323830343a383030343a3a2f33322d3332203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8004::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:67:a8:07:05:7f:a4:2f:64:f4:fd:05:61:b3:9d:f4:45:
         7b:d8:e1:7d:8e:ed:26:c8:72:a5:40:fa:1a:26:37:fd:eb:63:
         97:0e:c3:02:08:8f:fa:26:6a:66:28:3d:b0:0e:9d:4c:2d:be:
         1f:9c:48:be:38:4d:2f:5d:fe:4a:a5:88:75:58:5e:04:28:36:
         2c:0c:ae:1d:66:3d:6c:97:04:5b:9c:7c:da:27:12:4c:c4:18:
         26:85:64:9d:86:5f:31:22:f8:97:41:23:f6:f3:0b:19:b8:7c:
         95:9f:17:1d:95:3d:87:54:a1:ed:aa:ee:d9:dc:c8:90:ef:b5:
         bb:a4:ee:85:4f:f5:9c:f3:3b:67:c8:bf:f3:d3:d7:d7:22:7b:
         f7:2f:e7:89:3d:b2:4f:8c:a5:49:97:19:03:03:db:65:fe:be:
         d2:94:47:32:7b:1b:42:fc:bb:c0:92:4b:50:11:50:dd:62:6c:
         67:4a:9a:97:77:5b:fa:b1:c6:a9:9e:c5:37:e0:64:d0:e2:0d:
         11:8f:ce:26:98:12:3d:d6:7e:10:17:84:24:cb:16:28:51:f4:
         d0:a2:c7:96:e5:2d:86:42:cd:27:f0:3c:fa:ef:6b:ea:f1:84:
         77:be:5f:88:0f:1b:c5:61:14:c9:3d:b6:92:3f:18:8d:7c:0b:
         6e:1a:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:49 2025 by rpki-client