Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a383030303a3a2f33332d3333203d3e20323636313938.roa
File:                     323830343a336333633a383030303a3a2f33332d3333203d3e20323636313938.roa (raw, json)
Hash identifier:          sKZpxD5BmZ2dpwRcfoqcmDGB29mTWaVOuEHqMEDP/z0=
Subject key identifier:   25:C4:67:9C:07:12:8C:B5:76:CB:E6:29:ED:03:BB:5D:AA:96:9A:7B
Certificate issuer:       /CN=08569896B950AF614AD919489CA9496B4E462F59
Certificate serial:       23A55E59B276488C52B9152847A30B64FCE93EC5
Authority key identifier: 08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a383030303a3a2f33332d3333203d3e20323636313938.roa
Signing time:             Tue 31 Oct 2023 20:43:59 +0000
ROA not before:           Tue 31 Oct 2023 20:38:59 +0000
ROA not after:            Tue 29 Oct 2024 20:43:59 +0000
asID:                     266198
IP address blocks:        2804:3c3c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a5:5e:59:b2:76:48:8c:52:b9:15:28:47:a3:0b:64:fc:e9:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08569896B950AF614AD919489CA9496B4E462F59
        Validity
            Not Before: Oct 31 20:38:59 2023 GMT
            Not After : Oct 29 20:43:59 2024 GMT
        Subject: CN=25C4679C07128CB576CBE629ED03BB5DAA969A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:eb:65:da:c5:e4:b0:cf:ca:3a:e1:cf:0f:
                    8e:d9:39:dd:89:39:05:6c:35:70:4e:03:cb:1f:62:
                    81:92:e0:23:54:9a:41:e4:09:3b:37:89:1f:6c:9e:
                    a0:47:bc:ff:b5:1c:f3:07:9a:1f:23:92:4d:24:0b:
                    7f:28:ad:a7:2d:55:fb:87:9a:da:3b:48:42:ab:ef:
                    44:32:c4:02:4c:fd:23:c9:5f:e3:54:ea:c3:ad:d3:
                    d1:7b:8d:d6:fd:93:da:90:2f:0f:0c:0a:01:96:99:
                    01:1f:7f:5e:6e:13:86:6e:95:8e:74:21:76:d0:e9:
                    20:bb:8a:e1:cc:b4:e7:3b:44:70:f7:cc:66:21:74:
                    64:fe:9a:4e:41:c3:e4:c9:97:91:bd:fa:97:6c:60:
                    0e:54:7d:9e:40:f8:ea:d6:68:76:f6:46:97:a3:92:
                    1f:74:59:e2:95:05:d5:34:a0:38:7c:8d:70:88:4c:
                    a7:65:86:1b:4d:b1:da:0d:20:09:26:b9:76:c1:1c:
                    d7:86:5b:11:19:cb:1f:41:4d:d5:ec:74:f2:48:89:
                    e6:59:6c:39:27:92:1b:d0:e7:0a:92:a7:7f:6a:4b:
                    2b:15:1e:d9:5b:41:c3:e1:e8:e0:84:8d:26:21:c4:
                    86:4e:d6:7e:30:c7:ea:ce:e3:06:06:cc:42:02:3d:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C4:67:9C:07:12:8C:B5:76:CB:E6:29:ED:03:BB:5D:AA:96:9A:7B
            X509v3 Authority Key Identifier:
                keyid:08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/08569896B950AF614AD919489CA9496B4E462F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a383030303a3a2f33332d3333203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:98:ba:5e:3a:05:7b:c7:1e:58:fd:f3:b2:ed:58:86:c9:9f:
         77:38:62:d8:4e:47:b4:e7:08:5d:7a:ac:63:ea:10:ae:2c:cc:
         48:b2:ca:0c:85:1f:4e:31:93:5d:86:4e:92:5e:e6:ce:fb:0c:
         60:39:14:05:33:11:21:b6:58:bc:c5:3d:dd:2e:91:64:ad:d9:
         c8:58:b6:1a:c8:6f:91:1e:a3:ee:65:ab:78:ed:da:49:2a:e1:
         b8:06:aa:33:a9:6c:ae:10:97:06:32:1f:c2:33:43:13:0b:60:
         ca:2c:85:29:2b:b2:4b:70:91:05:8d:85:30:09:90:fa:e6:bd:
         35:e4:4b:e4:d9:f8:76:20:0d:6c:2e:fa:81:8f:cd:f7:3c:79:
         db:86:90:44:91:81:a7:80:5d:ea:94:3e:37:29:3c:dd:b8:3a:
         46:15:be:9c:02:d6:d6:de:c2:25:e2:e8:79:01:fe:99:3b:22:
         00:f8:73:54:98:75:94:bb:90:df:bc:06:ac:30:0c:39:62:7d:
         f1:68:1f:07:a1:69:11:dd:3f:94:cc:da:dc:01:d6:c2:ed:58:
         dc:82:41:e8:cd:b9:a8:d3:4c:b5:15:b2:a7:a1:11:95:f7:0f:
         c5:83:ed:24:0e:e6:10:de:6f:82:d2:58:2e:91:3d:2a:e2:ea:
         f6:c7:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:19 2025 by rpki-client