Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/323830343a343565343a3a2f33322d3434203d3e20323632353637.roa
File:                     323830343a343565343a3a2f33322d3434203d3e20323632353637.roa (raw, json)
Hash identifier:          4d/7FKkeq54bkUx/jZsUCahnl7wS/O/tLBsjBRYaFkg=
Subject key identifier:   A3:B5:AE:FC:5F:17:CE:85:9F:1E:6A:9F:A0:29:48:FB:DE:E2:5A:83
Certificate issuer:       /CN=CC19F102714C8236D0C081FAED80472B833EC540
Certificate serial:       191D43671E3F0ED4E3E9CC34867BE42EE549D2DC
Authority key identifier: CC:19:F1:02:71:4C:82:36:D0:C0:81:FA:ED:80:47:2B:83:3E:C5:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC19F102714C8236D0C081FAED80472B833EC540.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/323830343a343565343a3a2f33322d3434203d3e20323632353637.roa
Signing time:             Wed 25 Oct 2023 20:16:59 +0000
ROA not before:           Wed 25 Oct 2023 20:11:59 +0000
ROA not after:            Wed 23 Oct 2024 20:16:59 +0000
asID:                     262567
IP address blocks:        2804:45e4::/32 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1d:43:67:1e:3f:0e:d4:e3:e9:cc:34:86:7b:e4:2e:e5:49:d2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC19F102714C8236D0C081FAED80472B833EC540
        Validity
            Not Before: Oct 25 20:11:59 2023 GMT
            Not After : Oct 23 20:16:59 2024 GMT
        Subject: CN=A3B5AEFC5F17CE859F1E6A9FA02948FBDEE25A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:ba:80:8e:86:13:00:de:d3:4f:52:b4:45:
                    6e:6a:29:2f:6c:d8:e9:b6:47:04:60:4d:cf:8e:65:
                    e5:d2:a1:a1:2f:5d:81:ce:ec:d2:e8:7a:c2:40:69:
                    b4:65:7d:37:65:18:12:62:df:28:31:96:df:65:18:
                    ac:4c:80:db:db:67:8e:20:ad:2f:48:5f:3c:fb:e3:
                    ad:ce:e0:2f:0d:7b:df:83:1d:b0:0e:6a:bc:86:9b:
                    94:c4:b0:75:d5:ad:69:34:d0:29:22:dd:d4:49:82:
                    a9:a5:c5:e6:85:60:e2:32:51:2a:f4:1a:86:40:6b:
                    d9:67:06:4b:e6:17:40:db:9a:32:92:f4:bc:3d:d8:
                    70:1d:48:b6:34:89:85:fa:18:df:74:0f:2b:4c:57:
                    b6:06:c4:f1:16:af:14:b3:59:ed:9d:9c:be:fa:bd:
                    9f:d2:53:cd:1c:59:68:d6:bc:1d:3f:e5:e8:a9:a7:
                    47:34:ff:c3:61:9b:1d:e1:22:c9:54:a6:54:34:18:
                    ae:c1:69:90:be:95:58:a8:40:34:e1:c3:94:79:30:
                    2e:b2:fd:11:a0:1c:de:81:03:c9:a1:7a:44:4b:05:
                    13:5c:43:89:cd:bf:ef:d5:7d:81:fd:bc:7b:5d:7b:
                    1f:57:d8:1b:12:60:4d:49:dd:16:2b:3e:c4:de:0a:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:AE:FC:5F:17:CE:85:9F:1E:6A:9F:A0:29:48:FB:DE:E2:5A:83
            X509v3 Authority Key Identifier:
                keyid:CC:19:F1:02:71:4C:82:36:D0:C0:81:FA:ED:80:47:2B:83:3E:C5:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/CC19F102714C8236D0C081FAED80472B833EC540.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC19F102714C8236D0C081FAED80472B833EC540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/323830343a343565343a3a2f33322d3434203d3e20323632353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:d4:6c:12:d9:9a:4e:95:0b:f7:f1:78:d0:29:56:af:47:
         e0:14:cc:d1:dc:a7:7f:98:01:1b:03:22:ab:c1:0f:a7:29:10:
         ca:e6:4a:8e:5f:e1:e2:d5:63:6c:ab:5e:3d:cd:31:f9:0d:2e:
         00:b0:04:69:48:50:9e:3e:3c:6d:b6:71:f2:17:60:ca:b0:81:
         14:a1:6e:c7:b3:46:56:61:37:d8:54:32:85:1e:21:4c:f0:15:
         31:0e:93:92:27:47:fb:f7:70:87:35:ff:b9:ad:4b:f8:fe:86:
         57:16:97:60:6b:68:17:47:35:7b:c0:3b:87:79:5d:a2:72:21:
         58:52:0c:92:5e:8a:f2:e6:3f:16:a7:35:ee:b9:9b:05:d0:26:
         7e:b1:9e:60:2d:8f:e5:1b:99:0c:5d:c1:70:81:e8:0d:24:bf:
         8a:49:ea:b4:e6:c3:68:ad:25:a8:05:c1:a2:71:cd:87:5e:dc:
         cb:d4:99:12:8b:be:b7:c9:15:5d:2e:e2:e0:c9:98:71:51:e5:
         d7:02:1c:15:d8:bb:ba:ee:be:32:2d:ad:3c:cb:64:17:0c:4f:
         f9:b3:83:b4:05:6f:77:2b:ed:c8:e7:bc:f1:a9:9d:74:9a:7f:
         89:da:ab:05:fd:bf:03:c8:17:dd:6c:cd:58:2a:3e:72:60:d3:
         53:99:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:20 2025 by rpki-client