Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3230303a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a3230303a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          bUOpalWDEtVfHX89rWRXxQJbU2rcL4cK5UP/FruFNQk=
Subject key identifier:   72:2E:94:7A:6F:CC:48:07:76:7E:A0:B9:07:03:AC:75:29:C6:F2:C4
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       0A8486FBCA91F529C40FB30FCAE1D1A379F629FF
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3230303a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:44 +0000
ROA not before:           Tue 12 Sep 2023 20:38:44 +0000
ROA not after:            Tue 10 Sep 2024 20:43:44 +0000
asID:                     262588
IP address blocks:        2804:2904:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:84:86:fb:ca:91:f5:29:c4:0f:b3:0f:ca:e1:d1:a3:79:f6:29:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:44 2023 GMT
            Not After : Sep 10 20:43:44 2024 GMT
        Subject: CN=722E947A6FCC4807767EA0B90703AC7529C6F2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:76:09:e5:d1:b8:fa:10:d1:7f:1d:ee:2a:
                    39:c1:87:05:f9:8e:cf:c3:4a:5d:ff:e1:79:de:2c:
                    82:5a:87:bf:4a:5f:de:4b:45:33:44:d0:88:cd:19:
                    16:6b:d1:6b:1c:a6:bf:f5:2c:18:7b:6d:f3:e6:2d:
                    d5:f2:3d:25:90:d4:52:42:14:f6:2e:c0:3f:ac:98:
                    f9:b2:d3:9f:f5:20:88:d4:b7:5c:01:a4:b1:b5:8a:
                    2d:51:f4:f5:a0:ef:25:8e:ab:59:54:11:75:15:7d:
                    15:50:57:0f:9e:22:2c:0b:4c:57:1e:32:2f:d0:ac:
                    55:a2:d3:84:de:05:ac:d7:8e:7b:e7:41:c6:44:d4:
                    1f:a6:7e:b7:2e:20:49:37:2a:b1:ce:a1:c8:6f:15:
                    52:62:6a:33:89:67:b1:45:17:4c:7b:ed:a8:bc:08:
                    47:98:43:84:09:32:29:05:c5:07:eb:04:bb:ad:5a:
                    77:0b:ff:af:d0:f8:11:87:b5:c7:b5:96:9d:06:92:
                    60:a7:ab:ab:25:17:07:07:b6:a0:5a:90:7c:3a:a4:
                    11:21:b1:c1:28:af:5c:fd:5b:88:4a:bf:90:56:f3:
                    d1:d8:4a:e8:1c:1f:46:02:15:c7:7a:11:24:0c:92:
                    7e:ab:c2:89:bf:02:5d:d7:a7:4f:99:f7:d5:a8:be:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2E:94:7A:6F:CC:48:07:76:7E:A0:B9:07:03:AC:75:29:C6:F2:C4
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3230303a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:79:60:66:4f:69:c3:bb:70:e9:2b:f4:ed:5d:4a:e4:81:07:
         b5:4f:c8:b1:fb:c3:5c:3d:5d:cf:c9:1f:e2:e0:01:45:89:b0:
         ff:f8:cd:f3:5d:38:85:d8:0e:a7:ef:64:ca:6d:98:c8:12:34:
         ee:63:65:50:03:12:61:9f:90:ef:66:6b:64:26:76:3f:81:ed:
         b1:70:97:60:91:5e:4a:3f:73:10:8f:1c:d0:c9:2d:a5:38:6b:
         9d:a8:10:0c:b3:3d:c2:ec:26:d4:5a:5f:9c:f1:69:b0:f7:5c:
         3d:59:8f:94:25:b6:6d:07:d9:f0:11:4f:c1:2e:e1:1c:ff:f2:
         90:da:22:83:c3:c4:73:20:18:65:14:b7:a1:24:9d:bf:70:e5:
         6d:36:52:a2:e6:f0:13:07:74:a8:82:a1:c4:24:36:6c:8a:ed:
         f8:53:2b:62:71:30:57:34:27:73:15:ee:81:bb:08:b2:29:7c:
         de:4c:10:11:55:e7:74:e4:3b:f1:2a:f4:37:17:b7:d5:0d:bf:
         4b:92:c2:a1:c9:58:a5:9e:20:41:20:f4:fb:52:df:4c:e8:ca:
         81:50:ff:97:16:26:54:cd:7a:51:19:b1:3e:a0:8d:ee:35:74:
         dd:d5:40:05:6f:0a:29:ce:95:f8:7e:08:c9:2c:04:ad:e4:dc:
         56:ea:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:57 2025 by rpki-client