Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/323830343a336463383a3a2f33322d3438203d3e20323636353533.roa
File:                     323830343a336463383a3a2f33322d3438203d3e20323636353533.roa (raw, json)
Hash identifier:          KmW0eKIRt914cJqIp738JBCbbOmZx7n6NxlOMkukgFo=
Subject key identifier:   EE:6F:54:40:5F:15:89:CC:FF:07:5D:38:66:0B:0A:90:1B:43:2F:08
Certificate issuer:       /CN=672698D7118D3ECE15E8852DCA0F5F04245E94C7
Certificate serial:       19EA7050280876703A4FEE800B7630F844BB72E8
Authority key identifier: 67:26:98:D7:11:8D:3E:CE:15:E8:85:2D:CA:0F:5F:04:24:5E:94:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/323830343a336463383a3a2f33322d3438203d3e20323636353533.roa
Signing time:             Sun 23 Apr 2023 01:09:40 +0000
ROA not before:           Sun 23 Apr 2023 01:04:40 +0000
ROA not after:            Sun 21 Apr 2024 01:09:40 +0000
asID:                     266553
IP address blocks:        2804:3dc8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:70:50:28:08:76:70:3a:4f:ee:80:0b:76:30:f8:44:bb:72:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672698D7118D3ECE15E8852DCA0F5F04245E94C7
        Validity
            Not Before: Apr 23 01:04:40 2023 GMT
            Not After : Apr 21 01:09:40 2024 GMT
        Subject: CN=EE6F54405F1589CCFF075D38660B0A901B432F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:52:fc:c7:d8:fe:2f:1c:c8:87:98:10:ad:
                    a5:24:6f:fa:c0:b6:02:fd:a6:b0:08:35:36:e7:c5:
                    6c:0d:ab:38:b1:28:e1:7d:e6:39:40:03:6f:9e:a9:
                    42:ac:82:c8:c7:3e:bc:ea:45:f3:c3:17:45:6a:31:
                    92:64:75:25:89:6d:01:7a:25:29:d6:75:d3:b5:96:
                    88:e8:2d:68:d3:9e:1e:a4:1c:c5:2d:2d:b4:25:6d:
                    f6:a7:ff:11:2b:1f:f8:f9:c4:cf:ae:f2:2d:d0:fd:
                    52:a4:fb:c5:1a:36:3e:d6:f7:1e:fd:7c:16:1e:3c:
                    76:fb:86:87:79:38:c2:c6:8b:fd:2d:e2:57:79:4c:
                    80:3d:26:bd:df:e5:fd:8b:da:62:1d:88:f7:52:b4:
                    f9:13:16:5d:80:23:58:a8:a1:f6:32:2c:ba:b7:89:
                    fb:96:9a:e0:58:57:a5:43:c8:02:cd:84:25:26:7a:
                    15:81:30:7e:8c:d5:12:f4:6b:52:98:39:13:5c:19:
                    02:16:65:b1:70:9c:44:3c:70:9c:28:55:58:37:84:
                    bb:73:28:9f:1b:bc:c3:87:eb:ef:e3:f8:83:09:3a:
                    4d:a4:81:2a:60:53:95:af:14:a9:7f:bd:92:bb:25:
                    7a:86:70:4e:ce:93:a0:e9:d2:d8:e8:a5:45:6a:8e:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:54:40:5F:15:89:CC:FF:07:5D:38:66:0B:0A:90:1B:43:2F:08
            X509v3 Authority Key Identifier:
                keyid:67:26:98:D7:11:8D:3E:CE:15:E8:85:2D:CA:0F:5F:04:24:5E:94:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/323830343a336463383a3a2f33322d3438203d3e20323636353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:23:5f:1d:c2:ae:5e:29:95:d7:38:38:67:14:fb:3e:0d:af:
         4e:54:6e:7d:62:3b:2d:30:66:fe:18:13:4f:d4:cc:d8:cc:b6:
         0b:f7:65:2e:44:ff:8e:b9:dd:30:4d:b0:84:9b:42:8f:eb:13:
         cc:f6:17:ce:5d:1b:8b:d1:89:70:79:b5:ca:ce:91:b8:92:0b:
         e9:b8:f2:91:ac:89:d5:3b:76:56:91:98:eb:0f:95:2a:08:61:
         47:f0:a3:6d:66:79:21:ad:ed:00:7e:bc:3d:12:6e:47:3e:f9:
         72:27:5e:7c:49:78:3f:e9:69:85:21:79:53:fe:b8:bc:83:38:
         8a:86:39:eb:70:95:b7:f9:c7:8b:7f:7b:f6:f2:5d:e0:05:59:
         7b:fa:56:13:33:a2:ef:14:7a:3f:22:29:f7:90:51:3e:5f:73:
         25:54:f0:66:77:f0:1c:41:8a:66:7f:ae:60:0e:57:58:58:41:
         23:e6:45:68:de:49:4e:5a:2d:62:66:a8:e2:6c:27:df:36:ac:
         4b:a9:ba:70:11:52:7e:31:66:97:36:6a:db:af:7c:1e:10:38:
         7f:7d:87:51:9a:f2:71:6e:65:e3:32:b5:a6:19:04:98:a2:1d:
         7f:f6:df:4e:56:ba:46:ca:00:46:e2:51:0a:95:2f:27:f8:2a:
         5c:22:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:26 2025 by rpki-client