Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d3332203d3e20323731343337.roa
File:                     323830343a376238383a3a2f33322d3332203d3e20323731343337.roa (raw, json)
Hash identifier:          RUjwUhsIJMIthq2k0hSwUFB1ngD9Ol+Wsb4Ns6KDqP4=
Subject key identifier:   25:7F:11:38:A0:CE:A2:AA:FA:98:40:5A:55:C9:87:DB:26:55:12:AA
Certificate issuer:       /CN=254D3F5CC2B8E5B651F6F590A793628658044C55
Certificate serial:       43C7081EACBA216041D8842827AB32DA0AE6EE91
Authority key identifier: 25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d3332203d3e20323731343337.roa
Signing time:             Tue 03 Oct 2023 00:24:13 +0000
ROA not before:           Tue 03 Oct 2023 00:19:13 +0000
ROA not after:            Tue 01 Oct 2024 00:24:13 +0000
asID:                     271437
IP address blocks:        2804:7b88::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c7:08:1e:ac:ba:21:60:41:d8:84:28:27:ab:32:da:0a:e6:ee:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254D3F5CC2B8E5B651F6F590A793628658044C55
        Validity
            Not Before: Oct  3 00:19:13 2023 GMT
            Not After : Oct  1 00:24:13 2024 GMT
        Subject: CN=257F1138A0CEA2AAFA98405A55C987DB265512AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:a7:8b:08:46:56:e9:7f:74:78:c6:e4:56:
                    84:59:f3:20:b0:f6:6f:00:57:a3:66:93:4e:9f:45:
                    19:6f:aa:74:24:01:17:b2:d0:3d:f7:a3:9d:56:b3:
                    83:b3:b9:47:94:2c:35:94:93:e2:fd:e2:9c:07:45:
                    a3:da:c5:46:a0:87:5d:5b:2f:8c:44:d0:e7:94:be:
                    51:ea:c9:52:90:11:54:f1:8a:9c:af:0b:b6:7a:8b:
                    61:bd:04:d4:cb:35:31:9b:32:8e:10:7b:2c:ea:e4:
                    a3:34:d8:9e:ad:0c:7d:81:9e:6e:c9:f5:c4:09:77:
                    a2:ac:1b:5e:8c:33:0a:79:f7:09:dc:bc:d0:a1:db:
                    0f:a0:fb:30:26:ee:43:e4:92:57:74:b0:95:92:7a:
                    9e:d4:e6:85:f8:15:75:47:50:f8:85:21:d1:0e:09:
                    85:c7:a3:09:52:87:8b:62:0e:09:53:12:52:f6:15:
                    b5:e3:7f:3c:8e:19:ae:c2:c2:13:9e:4e:a9:07:1b:
                    ed:26:e4:59:8c:11:cb:7d:87:28:e6:9c:f0:2b:21:
                    c7:98:a5:ed:5a:80:dc:66:28:ca:19:dc:56:22:d4:
                    7b:64:7a:5f:94:a3:2a:f6:93:19:c6:ed:16:55:69:
                    63:67:b7:a1:96:95:b0:3d:d7:45:dc:57:1a:a3:e0:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7F:11:38:A0:CE:A2:AA:FA:98:40:5A:55:C9:87:DB:26:55:12:AA
            X509v3 Authority Key Identifier:
                keyid:25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/254D3F5CC2B8E5B651F6F590A793628658044C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d3332203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:bd:1c:72:9e:dd:3d:4b:14:eb:f9:ef:1c:a4:ca:0b:93:
         96:41:5d:ea:57:d4:89:b4:a2:d1:4a:9a:ae:8e:7c:9b:46:e7:
         99:45:ed:73:42:60:34:00:c1:f2:28:61:25:12:07:2b:09:f6:
         e6:6f:03:f8:8c:5f:22:b1:9b:c7:3b:8d:d5:49:ab:e5:06:97:
         e7:f0:c4:d0:96:42:8c:c8:8c:20:a7:f5:8e:e0:30:e8:3f:22:
         20:12:cb:d6:96:66:e9:38:a3:fc:26:72:db:58:f2:91:8d:4d:
         98:8c:79:fa:98:38:94:76:07:34:55:95:cc:63:e0:1f:7b:15:
         88:ad:fa:46:49:0a:37:af:13:fa:4b:15:10:9f:80:00:f0:c0:
         4d:f0:6e:90:54:77:8e:20:5c:16:88:e3:52:40:17:4e:4b:d4:
         38:b3:06:15:7d:dc:7e:cc:a2:ff:dc:33:3d:72:a0:34:07:2d:
         fd:05:ca:64:de:2b:8c:b5:22:b0:c1:9a:d7:22:4a:6e:fc:50:
         11:03:1c:1b:70:97:86:51:99:e9:1b:ad:ad:11:76:ce:d0:c4:
         6d:ce:ad:2f:0b:9e:a6:3c:64:56:b1:79:c5:3d:1a:95:38:1e:
         aa:0a:95:8c:56:cd:56:53:0d:47:0f:91:ec:64:a0:e4:9e:9a:
         ef:89:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:25 2025 by rpki-client