Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (raw, json)
Hash identifier:          0u8CrMwQlysU18iTwTwRKWAwUgR4m9S7Wm3i3M92FDQ=
Subject key identifier:   2C:B4:C9:31:B8:6D:00:23:DB:2D:1B:7F:40:48:65:AE:A5:8A:5D:48
Certificate issuer:       /CN=2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8
Certificate serial:       74E454EE9BB9C3CE7FEA1D035354423CE32A2D54
Authority key identifier: 2B:EB:AD:8A:51:D3:C8:47:E4:A4:E1:E0:99:7C:B7:84:87:F0:4F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
Signing time:             Mon 21 Aug 2023 19:03:57 +0000
ROA not before:           Mon 21 Aug 2023 18:58:57 +0000
ROA not after:            Mon 19 Aug 2024 19:03:57 +0000
asID:                     263970
IP address blocks:        2804:289c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e4:54:ee:9b:b9:c3:ce:7f:ea:1d:03:53:54:42:3c:e3:2a:2d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8
        Validity
            Not Before: Aug 21 18:58:57 2023 GMT
            Not After : Aug 19 19:03:57 2024 GMT
        Subject: CN=2CB4C931B86D0023DB2D1B7F404865AEA58A5D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:eb:19:4e:f4:f1:d0:7e:08:5d:1a:1f:ee:
                    1a:8b:bd:78:6b:f2:71:f6:0e:c8:03:81:23:cb:1a:
                    ac:11:08:c5:97:ff:89:46:9e:78:b6:08:91:ed:68:
                    10:4c:ae:eb:af:6e:aa:78:28:37:4e:ba:39:fa:f5:
                    2f:ba:28:16:80:f3:2d:97:d9:fa:33:36:d0:6b:94:
                    c4:ca:e5:9f:53:60:d5:04:7c:e1:56:dc:46:c8:19:
                    0b:e3:09:21:cf:5c:69:87:3d:7a:b6:55:5f:fb:77:
                    eb:6a:25:0d:03:18:4e:c4:85:75:3f:a3:a9:ae:2f:
                    96:43:44:ec:ed:84:2b:e0:54:54:bd:f0:50:7b:27:
                    ae:cd:44:a7:4c:8b:3d:ce:fe:f7:67:54:ca:9c:1f:
                    f0:58:9c:06:3c:c9:b9:56:57:08:6d:57:d8:a0:af:
                    ff:61:55:2f:d2:a7:67:58:0a:9c:52:d2:0e:1c:a4:
                    1f:16:3b:42:9c:ac:1a:4b:b2:9d:ed:67:c0:29:04:
                    ae:7e:d5:6f:0b:e8:90:7e:e2:03:42:e7:b5:61:d5:
                    59:86:80:8b:eb:e6:4d:c0:64:31:a6:4b:bc:a5:ef:
                    30:d7:52:03:c3:f9:b0:28:6f:31:2a:b5:9a:42:95:
                    6e:ec:6b:d9:ed:d4:c9:70:f6:7e:1d:f1:d1:df:d9:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B4:C9:31:B8:6D:00:23:DB:2D:1B:7F:40:48:65:AE:A5:8A:5D:48
            X509v3 Authority Key Identifier:
                keyid:2B:EB:AD:8A:51:D3:C8:47:E4:A4:E1:E0:99:7C:B7:84:87:F0:4F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:af:cd:6e:1e:89:d5:ee:4c:a1:9d:38:a0:14:6e:a8:1e:
         d0:93:31:cb:73:8a:40:1f:c2:0a:f2:7d:87:99:a6:93:19:fa:
         b9:9d:77:cc:22:07:11:25:a7:a1:46:f3:73:74:00:12:1f:b7:
         68:21:02:bb:84:21:94:57:19:6c:fe:eb:32:cf:17:5d:90:6b:
         8e:bf:d3:50:88:c4:4c:cf:77:5d:45:c1:80:ee:27:3b:90:94:
         ef:a1:5c:7c:88:5a:8b:cf:9a:94:82:a2:75:83:2b:80:b6:0c:
         3f:ae:2f:bd:78:d7:c9:9f:0f:f8:a5:e2:83:c8:b4:56:b8:2f:
         bf:d8:84:7b:9d:21:a7:87:35:5d:c1:95:5b:4f:90:07:71:50:
         cf:75:ae:6c:0c:3b:e6:93:26:fb:1d:8e:ea:40:04:55:3b:4a:
         18:94:31:dd:18:61:df:35:1d:a0:19:a4:43:f9:18:35:94:d5:
         e1:4c:06:e5:f2:38:9c:04:c7:65:83:cc:24:7e:a5:b1:9c:24:
         ad:e4:5a:09:88:52:fb:44:5f:fd:27:d7:b8:15:49:cb:5a:82:
         c3:dd:7c:61:ee:63:2f:62:26:71:db:86:fc:e2:e2:e2:c9:1c:
         0d:d3:6a:f1:22:0a:c9:f7:91:e2:70:0b:db:c3:1e:70:a0:35:
         42:5e:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:12:34 2025 by rpki-client