Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a383030303a3a2f33342d3334203d3e20323635323338.roa
File:                     323830343a326362343a383030303a3a2f33342d3334203d3e20323635323338.roa (raw, json)
Hash identifier:          GcXvQ5ncoGUJhyvBOlqOmyUBd8u4pICEEjY8lrrFxXM=
Subject key identifier:   D5:14:67:70:E3:65:50:67:20:FF:EC:7C:87:69:6D:39:B0:C6:07:78
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       24258D0E10334672F19A0AB7BB89587796FF6D62
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a383030303a3a2f33342d3334203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 23:01:26 +0000
ROA not before:           Fri 20 Oct 2023 22:56:26 +0000
ROA not after:            Fri 18 Oct 2024 23:01:26 +0000
asID:                     265238
IP address blocks:        2804:2cb4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:8d:0e:10:33:46:72:f1:9a:0a:b7:bb:89:58:77:96:ff:6d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 22:56:26 2023 GMT
            Not After : Oct 18 23:01:26 2024 GMT
        Subject: CN=D5146770E365506720FFEC7C87696D39B0C60778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d4:0a:14:da:29:84:0e:69:b2:36:f5:44:a3:
                    28:9b:7e:df:a7:48:33:8e:5c:98:e4:2c:1d:91:88:
                    b2:c9:c2:b0:bb:3d:2c:d8:76:ab:10:a4:8b:94:73:
                    b2:30:cd:8f:d1:a9:3a:c6:35:62:db:4c:8c:10:fb:
                    f7:84:0c:24:84:50:6e:4a:51:ca:45:4d:36:0a:75:
                    b0:39:5a:4e:40:3c:ca:d1:2d:fc:08:34:10:99:b4:
                    f4:4e:8d:45:82:f0:74:f7:95:35:37:25:6c:5a:ab:
                    8c:87:76:06:71:84:1f:dd:71:40:61:18:27:20:d1:
                    5a:fe:b5:f9:a4:36:82:83:57:82:4b:08:af:28:5b:
                    df:3e:4d:02:24:d5:1d:61:c7:c1:7f:89:a6:6c:e2:
                    f1:85:ac:0c:c0:53:66:01:06:7b:af:19:54:44:84:
                    c7:57:0e:b4:23:7d:1d:28:27:2b:b5:8c:ec:38:b0:
                    9a:19:b4:a9:77:1c:d6:0a:ad:f7:e5:f6:e4:c0:a5:
                    fa:70:af:6b:c2:23:27:6a:86:16:0a:a8:55:dd:1e:
                    fa:a4:e1:7e:ae:84:e1:68:21:48:ba:58:b0:19:a7:
                    6d:15:0e:2b:82:a1:6f:76:8d:a9:91:b1:8f:b9:e0:
                    ba:ea:eb:3d:c9:fa:00:e3:39:52:62:4a:7a:84:14:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:67:70:E3:65:50:67:20:FF:EC:7C:87:69:6D:39:B0:C6:07:78
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a383030303a3a2f33342d3334203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:be:22:e5:55:c1:83:37:d7:72:04:9f:11:cf:d2:46:5e:74:
         92:23:87:e2:23:a2:d3:1d:22:85:f6:fb:93:8f:24:38:72:1f:
         c0:fd:18:20:41:38:86:dc:05:00:4c:f1:66:1e:54:a9:f1:0c:
         64:81:c9:33:c4:ca:2b:72:8c:c3:48:48:19:1b:62:aa:d4:b7:
         e0:46:3e:3e:4f:52:f0:7e:e6:95:63:de:c7:86:31:18:4a:6a:
         c7:96:d7:25:5b:f5:de:c0:8a:26:62:a5:77:5b:cd:49:e5:a5:
         49:b4:84:ac:5b:38:b3:c1:fd:cb:98:6e:ed:5b:5a:e5:5d:59:
         94:0c:86:ff:11:18:74:56:3c:f8:89:cf:62:e4:17:73:5e:94:
         a3:c0:22:06:9d:a5:54:24:bc:95:52:e8:b2:f2:15:2a:88:7a:
         62:b2:da:2a:1f:7a:63:f4:01:16:9c:a2:46:f8:02:f3:b9:8d:
         f5:94:6c:fe:56:00:3c:b5:1c:49:b8:e8:d2:0f:89:a9:9d:e6:
         4f:1c:c4:6d:41:e1:41:50:70:e1:66:cd:49:76:73:df:0b:8e:
         d2:a4:ac:2c:55:fe:4e:d8:1d:27:2d:50:53:ab:0d:ce:ad:dc:
         e3:31:04:8a:b4:26:42:1f:cc:8e:35:e7:21:f1:39:cb:69:38:
         19:8f:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:27 2025 by rpki-client