Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a323031303a3a2f34342d3434203d3e20323730363834.roa
File:                     323830343a366663383a323031303a3a2f34342d3434203d3e20323730363834.roa (raw, json)
Hash identifier:          68CablGqWOe9SDymJ81jHfzT2SAnH7hBTB2W5BbJhmo=
Subject key identifier:   0F:AE:7D:2B:47:BE:60:C6:28:7B:CF:E7:1E:CB:4A:C9:58:E6:7A:01
Certificate issuer:       /CN=483787B7037C3DA540ACD3A5B893D65DA468956A
Certificate serial:       6E71B89B048F931C9AB1A7F34BC4240CCEEE9DE1
Authority key identifier: 48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a323031303a3a2f34342d3434203d3e20323730363834.roa
Signing time:             Fri 01 Sep 2023 11:29:56 +0000
ROA not before:           Fri 01 Sep 2023 11:24:56 +0000
ROA not after:            Fri 30 Aug 2024 11:29:56 +0000
asID:                     270684
IP address blocks:        2804:6fc8:2010::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:71:b8:9b:04:8f:93:1c:9a:b1:a7:f3:4b:c4:24:0c:ce:ee:9d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483787B7037C3DA540ACD3A5B893D65DA468956A
        Validity
            Not Before: Sep  1 11:24:56 2023 GMT
            Not After : Aug 30 11:29:56 2024 GMT
        Subject: CN=0FAE7D2B47BE60C6287BCFE71ECB4AC958E67A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:52:89:4c:3f:cf:ea:bd:0b:f7:bf:51:97:
                    08:bc:06:f1:39:ae:9f:ae:60:c5:94:bb:e2:51:2b:
                    67:2f:26:dd:2e:1a:5d:6f:88:73:9f:0d:f8:4a:e6:
                    b7:dc:4a:33:41:fd:8b:bf:12:c6:63:4d:af:b4:c6:
                    9f:82:b5:52:dc:fd:af:ed:76:73:85:f1:cb:3a:9a:
                    b7:7c:ce:91:ea:85:eb:a9:42:b0:25:a9:f3:97:02:
                    bd:67:34:68:49:00:fe:17:bd:67:3a:c1:ba:a1:e8:
                    c5:54:f5:a7:42:b9:5d:e8:8c:05:6c:48:5e:33:53:
                    29:15:bb:bf:fc:96:25:8e:93:e0:72:7b:c7:dc:46:
                    2f:21:4f:15:65:18:2e:d9:dc:42:97:d3:b6:d9:07:
                    9d:66:59:af:ed:5a:64:c0:f2:b9:61:39:45:3b:35:
                    80:31:25:58:a5:24:0e:18:89:d7:1b:04:01:23:73:
                    90:ca:de:e4:6c:9e:9b:0a:c1:7c:51:71:a1:31:ff:
                    df:47:0c:df:20:b8:2a:f1:a5:f5:4e:46:90:ff:d1:
                    a7:ca:e7:c5:3a:66:a6:14:88:cb:60:19:e4:81:98:
                    ba:0d:64:0f:50:b9:e2:bb:ac:21:86:02:36:bb:8c:
                    14:1b:29:49:a6:61:6a:2a:eb:dc:ed:87:92:ca:f7:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:7D:2B:47:BE:60:C6:28:7B:CF:E7:1E:CB:4A:C9:58:E6:7A:01
            X509v3 Authority Key Identifier:
                keyid:48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/483787B7037C3DA540ACD3A5B893D65DA468956A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a323031303a3a2f34342d3434203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:02:c1:ec:b3:76:37:bf:b0:3f:ac:1b:86:2e:fa:a0:a7:
         d4:ee:12:a9:6c:95:4e:75:de:7e:23:4a:0f:9e:25:b8:91:dc:
         47:9a:62:2b:d9:f1:28:ce:6b:a7:ee:67:ef:54:6d:bd:7e:25:
         2d:a7:fc:ec:b3:cd:be:b2:45:5b:62:80:b6:2e:04:e0:e9:2a:
         dc:4c:58:db:02:cf:21:5c:39:9b:0a:13:2e:00:e8:b5:e6:ad:
         ba:57:21:a5:bc:cc:a6:0d:d8:df:dc:6e:2d:19:45:dd:ac:02:
         a1:a2:ce:5e:8c:02:3c:22:54:ec:9b:f1:1b:ef:cc:f9:84:b6:
         a6:b2:21:1d:70:55:73:16:e4:3d:a4:b2:bc:f5:df:b2:13:c9:
         cf:26:5a:8f:2b:e6:7f:c0:19:0e:d0:09:03:25:72:12:0e:c5:
         9f:3d:25:b9:ce:01:e3:75:d7:57:08:6c:d5:8b:88:24:13:e7:
         63:7d:50:63:ff:a4:ee:46:b9:65:be:e6:44:c5:65:06:8e:73:
         23:72:cf:0b:ab:d6:c0:59:7f:e2:fe:df:c1:6a:6a:19:32:90:
         d8:64:d6:cb:63:b0:37:14:79:4f:a7:92:54:36:6d:2f:ed:04:
         29:05:4c:76:b1:c4:5f:0b:d0:36:ad:45:50:68:ea:49:6a:d4:
         f5:d1:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:20 2025 by rpki-client