Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a3a2f33322d3332203d3e20323639363634.roa
File:                     323830343a363830303a3a2f33322d3332203d3e20323639363634.roa (raw, json)
Hash identifier:          0R9X1Ro8rcV++BfUdRo+6OGxvUvPVLGatBZV88TRpB0=
Subject key identifier:   8A:71:7A:CC:BA:84:1B:A0:24:15:28:82:CF:B1:9F:16:3C:A6:4C:8E
Certificate issuer:       /CN=2EF61DC6A6FE4B766557477BAD2B3070BB9183A2
Certificate serial:       5F3A474E0BFD5931B87A4985D3AD7A3E804E0105
Authority key identifier: 2E:F6:1D:C6:A6:FE:4B:76:65:57:47:7B:AD:2B:30:70:BB:91:83:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a3a2f33322d3332203d3e20323639363634.roa
Signing time:             Tue 11 Jul 2023 13:57:54 +0000
ROA not before:           Tue 11 Jul 2023 13:52:54 +0000
ROA not after:            Tue 09 Jul 2024 13:57:54 +0000
asID:                     269664
IP address blocks:        2804:6800::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3a:47:4e:0b:fd:59:31:b8:7a:49:85:d3:ad:7a:3e:80:4e:01:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF61DC6A6FE4B766557477BAD2B3070BB9183A2
        Validity
            Not Before: Jul 11 13:52:54 2023 GMT
            Not After : Jul  9 13:57:54 2024 GMT
        Subject: CN=8A717ACCBA841BA024152882CFB19F163CA64C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:39:f4:0b:a9:f2:47:6e:52:d6:5c:02:ef:
                    95:24:86:96:29:e0:02:77:a8:aa:38:52:e5:c6:84:
                    4e:29:8a:ec:2e:85:32:14:58:fd:af:73:ff:e2:d8:
                    ba:5a:9d:25:98:16:eb:9d:c0:1f:4d:a6:06:d7:ed:
                    72:48:0c:b7:c5:cc:86:42:9f:1e:8a:d6:c7:e6:08:
                    48:f0:12:ee:59:14:3c:00:13:96:30:4d:53:d4:ea:
                    fb:8c:8e:39:1b:4b:1b:3a:64:e8:ef:24:a3:d5:14:
                    42:fb:af:a6:d1:83:6a:86:26:44:d9:42:cd:87:ac:
                    c1:87:36:96:31:38:78:73:1a:f6:3f:43:72:75:0b:
                    33:e7:84:12:c5:7e:92:9c:91:6d:fa:4b:2d:9c:5b:
                    bf:76:8c:78:8f:a9:8a:72:61:f0:31:cc:b0:c8:71:
                    5a:72:a5:7c:a9:56:fd:b3:61:60:05:bb:48:2c:17:
                    ba:27:78:58:ca:25:94:77:54:83:2e:f1:09:f4:78:
                    17:71:28:ae:bc:ff:cc:1c:17:f1:ad:61:be:17:16:
                    b7:54:b3:43:e7:f6:c7:e2:89:b3:2f:2a:b8:e0:dc:
                    72:c5:2c:75:17:b6:79:89:b4:cb:f5:22:86:cf:0e:
                    a0:8f:08:78:69:3f:c6:a5:80:0d:17:3f:a2:68:19:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:7A:CC:BA:84:1B:A0:24:15:28:82:CF:B1:9F:16:3C:A6:4C:8E
            X509v3 Authority Key Identifier:
                keyid:2E:F6:1D:C6:A6:FE:4B:76:65:57:47:7B:AD:2B:30:70:BB:91:83:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a3a2f33322d3332203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:68:b1:cf:c6:4c:f6:77:81:af:23:4c:95:c6:b8:04:8d:e0:
         31:94:af:6b:f0:75:df:1d:b7:97:90:ae:82:e6:2e:27:81:c3:
         c0:95:c9:0f:87:33:a2:1b:17:5a:01:6b:92:f7:3e:69:49:b1:
         84:df:44:d6:71:f2:10:78:93:5c:ec:c8:ad:fa:de:6d:c3:cd:
         08:02:81:07:2d:c8:69:2c:bd:9e:4f:c8:5e:96:e2:42:65:60:
         29:7a:43:b0:00:29:94:13:64:31:69:73:d4:02:33:37:9d:d1:
         85:b3:a9:cb:46:d7:84:1d:b0:5f:f9:66:47:9d:4b:5e:7f:ab:
         cc:b7:13:71:55:4d:11:ad:9e:d6:ca:24:b7:d5:f6:a3:c7:e2:
         79:a7:1e:ec:75:39:14:d1:ce:25:00:9d:f9:fa:29:98:ed:87:
         98:22:3d:3d:a4:b3:1f:c6:75:4c:46:e3:50:e0:11:13:1d:bb:
         10:84:a5:fd:03:9f:d6:7a:76:8a:ce:02:3c:81:be:61:48:a4:
         f7:46:4f:2e:64:92:fe:7b:26:56:74:14:cc:2f:b2:15:5e:6f:
         1e:23:a4:ad:91:36:cd:0d:68:e6:26:ea:e1:f3:ed:a5:2c:60:
         cb:70:e5:21:c1:e8:bc:a6:4c:bf:92:0a:b0:22:6f:21:20:3c:
         6b:1a:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:07 2025 by rpki-client