Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/323830343a3731383a3a2f33322d3332203d3e20323632363230.roa
File:                     323830343a3731383a3a2f33322d3332203d3e20323632363230.roa (raw, json)
Hash identifier:          5wPVgqaINBrODJkXxBLBUsyjTO/m+r6subGwCp7SLxg=
Subject key identifier:   C3:7A:BF:EC:F0:C8:61:79:12:CF:BE:85:45:A6:FB:1C:6E:26:68:9F
Certificate issuer:       /CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
Certificate serial:       0B320A4F8161FFFDC9EE4FF2E0DD7C6FAE679E50
Authority key identifier: D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/323830343a3731383a3a2f33322d3332203d3e20323632363230.roa
Signing time:             Thu 05 Sep 2024 11:38:31 +0000
ROA not before:           Thu 05 Sep 2024 11:33:31 +0000
ROA not after:            Thu 04 Sep 2025 11:38:31 +0000
asID:                     262620
IP address blocks:        2804:718::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:32:0a:4f:81:61:ff:fd:c9:ee:4f:f2:e0:dd:7c:6f:ae:67:9e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
        Validity
            Not Before: Sep  5 11:33:31 2024 GMT
            Not After : Sep  4 11:38:31 2025 GMT
        Subject: CN=C37ABFECF0C8617912CFBE8545A6FB1C6E26689F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:6d:6a:b9:3f:83:e7:85:08:6a:ce:41:e2:
                    46:0d:99:7c:a8:23:15:cf:93:d3:64:3e:0f:bd:36:
                    14:66:46:4f:a3:e9:d6:8d:20:62:32:84:f3:69:2c:
                    b4:4f:65:c9:24:c7:bb:68:d0:71:ad:5a:b9:2d:1b:
                    1b:40:92:e4:90:d0:0d:bc:ff:98:a2:bc:5b:d8:71:
                    84:6e:58:a5:b9:7e:0a:c7:8c:a7:0f:f4:9c:38:27:
                    e1:a2:ae:56:1c:44:93:0a:21:fc:0a:59:c5:92:ad:
                    ca:92:b8:63:77:83:4e:d1:62:8c:8a:3d:53:b5:84:
                    f6:cb:da:ca:f7:95:e4:5e:21:4a:36:ef:00:e3:3c:
                    8d:09:af:76:4b:e4:02:34:11:f4:98:48:2a:66:b5:
                    34:65:82:da:1b:5f:c7:fc:05:d0:3a:de:ad:08:f5:
                    a9:11:7d:b5:3b:98:74:25:f6:c5:47:c2:9b:91:92:
                    7c:d5:8d:e2:ee:21:0d:a5:83:99:ea:ba:e4:4d:95:
                    9b:27:29:69:bc:93:80:79:b3:b4:a2:a2:61:0c:0b:
                    5e:7b:8b:4a:78:7e:3a:a6:75:01:fd:d3:31:66:4f:
                    07:e3:a3:6b:34:b6:a5:ab:b6:45:4c:f2:8b:be:fa:
                    ba:25:e0:13:85:64:d9:63:b1:88:6c:cf:23:19:ee:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:BF:EC:F0:C8:61:79:12:CF:BE:85:45:A6:FB:1C:6E:26:68:9F
            X509v3 Authority Key Identifier:
                keyid:D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/323830343a3731383a3a2f33322d3332203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:718::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:18:15:4b:91:cb:de:7e:6c:30:11:89:51:d4:0f:05:8d:52:
         2e:54:2a:b0:49:59:04:92:9a:0a:ee:48:9b:fa:02:86:f2:dd:
         b6:ab:2c:69:bc:64:48:48:4a:b0:78:43:18:ff:be:81:91:49:
         1f:21:15:8c:db:88:42:ac:ac:ee:17:b0:98:27:7e:c7:ea:da:
         61:55:5d:e2:3d:e5:57:e7:72:b2:10:8b:89:6e:f9:e9:f4:71:
         c5:63:92:b4:4c:8a:0c:0e:51:c3:d7:ad:b3:26:1b:67:7d:82:
         18:e6:d2:13:6a:a2:e7:36:40:83:6d:d2:83:2a:f6:0f:5c:2d:
         07:a1:b5:08:ea:08:a4:dc:f3:6e:02:87:bc:7f:a5:cf:47:42:
         cd:8b:95:20:1d:b4:c3:dd:b8:5a:8d:4b:8a:89:44:9b:a6:07:
         fa:d8:51:0d:32:9e:e5:b2:0e:e2:df:02:63:4d:a9:8f:63:05:
         bf:3e:c7:40:9d:2e:af:b7:44:64:20:71:b0:fd:d6:6c:f7:4d:
         4d:e5:3a:d9:25:2e:04:03:31:48:98:08:9d:a4:43:12:91:52:
         1c:30:ab:f7:14:df:17:5a:e1:c6:ce:21:e9:c3:6c:c4:b1:3a:
         a4:79:0e:a4:89:d1:9b:f5:54:6c:d7:7d:e7:e8:c7:25:ef:0f:
         07:b3:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:39 2025 by rpki-client