Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a3a2f33342d3334203d3e20323638323134.roa
File:                     323830343a346462343a3a2f33342d3334203d3e20323638323134.roa (raw, json)
Hash identifier:          HJRKeKAqKWxKdNJ3E5TnSfnMZGe/9Lx00AU0xrptp8U=
Subject key identifier:   29:76:CF:96:2F:50:58:A2:B3:5A:40:C3:B1:00:88:E1:2C:4D:BB:40
Certificate issuer:       /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial:       11D1931AAD37BF3E7C775F338A9F01A44F248E06
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a3a2f33342d3334203d3e20323638323134.roa
Signing time:             Wed 22 May 2024 20:29:29 +0000
ROA not before:           Wed 22 May 2024 20:24:29 +0000
ROA not after:            Wed 21 May 2025 20:29:29 +0000
asID:                     268214
IP address blocks:        2804:4db4::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d1:93:1a:ad:37:bf:3e:7c:77:5f:33:8a:9f:01:a4:4f:24:8e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
        Validity
            Not Before: May 22 20:24:29 2024 GMT
            Not After : May 21 20:29:29 2025 GMT
        Subject: CN=2976CF962F5058A2B35A40C3B10088E12C4DBB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:a0:53:1f:63:b3:55:31:39:00:eb:c3:a9:
                    fc:9c:1e:fc:87:5b:c9:f0:3e:67:24:73:69:62:fd:
                    29:ce:8f:6f:4a:fa:87:b0:97:5f:e8:f5:bf:27:94:
                    d7:44:b0:36:75:c0:df:7f:ab:f4:fd:49:fd:15:52:
                    d6:6e:3c:7b:ce:6b:13:e3:1a:d0:1c:54:3b:51:6f:
                    49:fa:11:b7:9a:e2:47:47:62:1b:fc:df:dd:20:18:
                    1d:cc:eb:04:87:cb:42:50:26:ca:5f:fa:35:b7:62:
                    c7:b4:16:00:1e:b2:bf:fb:a7:31:cf:24:32:1a:9d:
                    eb:b3:20:18:c9:97:ca:43:17:c1:fd:66:7e:8d:a6:
                    72:3e:03:1b:14:eb:32:b2:ae:af:c9:d0:1c:0d:08:
                    57:3a:ff:11:3e:75:6b:02:c7:99:3b:91:04:ba:26:
                    2e:f5:24:37:80:4a:94:2f:b9:95:dc:4e:fb:2f:11:
                    4d:17:c9:22:67:ba:42:9e:e5:ae:72:ba:da:b4:19:
                    07:d4:ba:1d:00:35:b2:7d:03:47:0c:e0:a6:d7:12:
                    e3:b1:af:84:c1:20:4c:a3:7f:fd:5b:75:ae:82:0d:
                    c6:49:51:dc:5d:bb:10:12:c1:30:c1:e2:83:1e:51:
                    ae:48:b2:54:bf:15:d1:5a:bf:8e:3c:76:9c:6d:31:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:CF:96:2F:50:58:A2:B3:5A:40:C3:B1:00:88:E1:2C:4D:BB:40
            X509v3 Authority Key Identifier:
                keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a3a2f33342d3334203d3e20323638323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4db4::/34

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:57:73:1c:36:bd:4b:12:6a:b6:e6:ed:c6:1e:35:db:c4:
         78:20:2d:6f:96:01:f1:25:60:6a:19:5d:94:36:6e:ea:26:75:
         ce:f9:db:c9:6e:45:66:49:61:ac:aa:1a:e5:45:fb:c6:c2:32:
         fa:7e:b8:29:56:ee:c5:8c:c5:33:32:40:72:f0:c9:58:bf:c6:
         03:ec:01:26:4a:ff:72:1f:1a:94:55:cf:14:74:ff:f5:38:8f:
         17:f8:96:a4:fd:9a:7a:09:8f:79:e0:60:07:71:b6:7e:be:d2:
         a0:cd:0c:07:d0:2d:1a:11:c7:74:31:a1:ff:62:ce:16:b6:94:
         52:e2:35:15:db:02:aa:d2:ea:c3:16:cb:a9:13:b1:5f:e8:e7:
         d4:cc:8a:4f:6f:d1:33:2a:5a:05:56:03:5d:a9:03:fb:c7:97:
         fd:a8:40:47:15:38:d4:4c:6d:b6:e2:2a:4b:6a:df:b7:cd:c5:
         1f:42:83:40:03:70:c1:4e:ca:b9:fe:e2:ed:85:7c:d9:90:83:
         7e:83:cc:d0:6c:ed:79:cb:9f:0d:85:74:e7:e0:09:7d:47:66:
         fe:6b:a3:78:83:b3:d3:9d:c0:ec:43:27:09:d5:b2:10:f4:f4:
         4f:84:5a:0d:da:10:7d:c0:4f:c7:48:75:f2:26:80:d3:09:f8:
         f3:0c:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:46:09 2025 by rpki-client