Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
File:                     323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa (raw, json)
Hash identifier:          yOEKDQye2C3kQ8pgX7TlGiFkuIIsFnN5EG0cTcGJ3G8=
Subject key identifier:   7A:BF:86:CB:EB:DD:6A:5A:F6:56:D9:AF:39:C2:CE:7C:22:4A:45:3B
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       1999112C624F75545280F64BA8333F82206A83FA
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:24 +0000
ROA not before:           Fri 23 Aug 2024 19:56:24 +0000
ROA not after:            Fri 22 Aug 2025 20:01:24 +0000
asID:                     262827
IP address blocks:        2804:ccc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:99:11:2c:62:4f:75:54:52:80:f6:4b:a8:33:3f:82:20:6a:83:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:24 2024 GMT
            Not After : Aug 22 20:01:24 2025 GMT
        Subject: CN=7ABF86CBEBDD6A5AF656D9AF39C2CE7C224A453B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:3b:37:f3:4d:81:ff:ba:e1:2b:5c:28:61:
                    79:fb:3a:80:57:e6:b5:08:b1:ae:88:09:06:f7:90:
                    51:27:65:96:18:72:91:5d:3f:1c:1e:35:6c:03:3c:
                    7c:f8:58:6b:0c:3c:0b:41:bc:0f:96:b5:ac:12:06:
                    19:a0:03:2c:9e:df:12:a1:91:94:42:0a:13:35:63:
                    bd:7f:0a:b2:dd:b3:b3:7d:08:88:ce:1c:7d:1c:e8:
                    39:58:f3:ce:f0:30:da:54:82:6b:0d:b9:12:d0:a4:
                    44:4c:bd:9a:4b:21:2d:81:33:02:fa:e1:61:89:12:
                    35:3d:a3:19:c2:39:9c:3c:da:60:0a:50:62:5f:72:
                    19:ea:bc:51:89:9c:7f:2d:68:fe:df:36:f4:b1:15:
                    a7:1a:7c:6a:08:86:59:c5:8a:19:b5:49:94:bb:0b:
                    a0:8b:e1:da:b8:fe:d0:3d:8b:69:87:fb:bb:64:73:
                    3a:19:96:3c:cf:37:cb:fe:ba:a7:60:78:5b:89:01:
                    01:88:f4:98:0b:68:63:a7:ad:68:c8:f7:43:21:87:
                    1f:28:92:f3:76:28:a2:70:92:fa:c8:9c:e5:c2:1a:
                    46:03:f5:61:43:70:74:ac:c3:6e:81:72:75:16:02:
                    f0:ad:e7:24:cd:00:9a:78:0b:b0:98:53:61:b8:05:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BF:86:CB:EB:DD:6A:5A:F6:56:D9:AF:39:C2:CE:7C:22:4A:45:3B
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:84:c3:ee:90:35:36:bb:a1:40:d4:3b:5e:31:73:b4:76:
         12:11:d3:a7:72:0f:92:2e:75:80:99:12:a7:75:7f:6a:05:20:
         26:91:6c:63:3a:6a:7e:c4:72:00:37:72:d4:7c:9c:ca:ca:09:
         47:6e:59:1c:04:64:63:a2:29:e7:d7:a8:5d:18:7b:51:b9:02:
         e5:5e:49:db:2f:d5:32:65:d1:19:e5:b2:fd:a7:e1:f1:88:c9:
         0a:ec:00:a0:22:f0:4c:d1:78:3e:6e:a1:a3:95:34:07:dc:6d:
         0f:50:d3:b9:68:1b:b1:83:c9:37:66:af:6c:e2:ee:34:d0:12:
         d3:2f:ef:f1:7d:ac:1e:64:dc:df:76:cb:d5:bf:d5:ac:54:5f:
         a6:fa:a8:90:69:e2:c0:32:01:d4:79:2c:a4:0d:b4:61:f7:3d:
         fd:90:fd:8c:2f:93:3a:d6:3a:db:1b:51:47:ee:fc:2a:29:a9:
         8e:7f:48:d6:73:d1:16:a8:54:f4:3a:62:d8:10:bd:fd:2c:5b:
         35:08:57:c2:b5:9e:22:3e:6b:bd:6f:49:c6:81:2e:23:79:91:
         91:21:6d:6a:9e:9c:51:9a:4d:72:65:68:24:68:e2:16:c7:38:
         9b:87:fe:99:c4:6f:46:d6:9a:4c:6c:a7:bc:3d:59:2f:6e:c9:
         d4:04:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:03 2025 by rpki-client