Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa
File:                     323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa (raw, json)
Hash identifier:          gfcEmCax4/a1acUyOPoiizD5L07DWE4vBdJadiB5dnI=
Subject key identifier:   9D:EA:93:06:AE:73:5A:AD:D6:56:ED:B3:90:D9:7B:B6:B2:31:91:3F
Certificate issuer:       /CN=DEBABA97575B22EB79CB56298FD27EB827D57CE0
Certificate serial:       0C327B87E9159DEC59EAC11470A943653F61DE58
Authority key identifier: DE:BA:BA:97:57:5B:22:EB:79:CB:56:29:8F:D2:7E:B8:27:D5:7C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa
Signing time:             Thu 22 Feb 2024 03:24:43 +0000
ROA not before:           Thu 22 Feb 2024 03:19:43 +0000
ROA not after:            Thu 20 Feb 2025 03:24:43 +0000
asID:                     271708
IP address blocks:        2804:7fc4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:32:7b:87:e9:15:9d:ec:59:ea:c1:14:70:a9:43:65:3f:61:de:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEBABA97575B22EB79CB56298FD27EB827D57CE0
        Validity
            Not Before: Feb 22 03:19:43 2024 GMT
            Not After : Feb 20 03:24:43 2025 GMT
        Subject: CN=9DEA9306AE735AADD656EDB390D97BB6B231913F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:5a:2d:13:16:d5:8c:fb:1c:57:da:fb:b0:
                    45:13:a4:57:f6:cd:a0:03:f8:ee:05:97:53:a3:6e:
                    bb:e6:93:b2:b2:03:e7:a1:72:03:e2:f0:a4:7c:7d:
                    bd:83:9c:da:03:b5:cf:65:be:1d:04:92:0d:b7:cf:
                    e1:e0:78:e4:c9:35:9a:d4:59:f1:15:3e:de:40:89:
                    2f:f5:1b:f0:6d:a9:f6:cb:4b:94:aa:f6:6a:69:69:
                    62:80:34:df:6b:b4:ac:c5:32:9d:cd:98:c8:85:83:
                    1a:98:ee:02:a9:4c:76:71:27:f8:ac:21:3f:ef:1b:
                    12:c0:9a:4a:4b:88:09:a1:8e:a8:1a:4c:00:3d:e8:
                    c2:56:0b:e3:90:2a:ed:c5:ba:77:81:ff:77:a2:88:
                    fe:08:46:c6:c4:8f:d3:11:16:0e:0c:56:71:b0:96:
                    b9:7d:eb:b2:c9:2a:b9:e7:5e:4b:f8:13:96:80:50:
                    15:d6:83:3d:76:4c:c2:45:24:81:65:69:40:cd:53:
                    e5:9c:03:81:36:29:33:c3:30:11:b5:b0:d9:e1:99:
                    f0:96:61:c7:1c:19:aa:ab:05:6c:a3:58:b2:d2:c0:
                    8b:a0:77:dc:56:76:7f:da:8e:56:df:bb:3b:9b:e1:
                    e4:c4:b9:79:02:23:f4:d9:0b:41:cf:22:4c:eb:62:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EA:93:06:AE:73:5A:AD:D6:56:ED:B3:90:D9:7B:B6:B2:31:91:3F
            X509v3 Authority Key Identifier:
                keyid:DE:BA:BA:97:57:5B:22:EB:79:CB:56:29:8F:D2:7E:B8:27:D5:7C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:b0:a1:52:14:d7:b4:21:3e:f3:8e:61:50:a8:8d:a7:be:
         d0:e8:df:00:73:c3:af:7c:bd:42:53:3d:63:bd:eb:09:d4:d8:
         5e:71:7d:59:ec:e2:72:a1:77:9e:4d:7c:91:61:c7:dc:b4:fb:
         4c:d9:42:2c:55:61:a3:3a:2d:da:41:f7:07:28:99:28:31:5e:
         d5:50:b5:eb:e7:16:f1:99:ee:c4:db:ab:e7:d3:3a:ef:b0:13:
         61:ab:6a:3f:90:3e:5f:10:4e:1f:56:f5:80:71:d3:74:7f:18:
         51:d3:a2:b6:76:1b:e8:4b:c4:c6:7e:0e:ca:58:3d:44:2a:eb:
         b4:e7:1a:69:7e:b4:68:d8:e9:c8:4f:83:6e:0b:d8:73:b0:f1:
         ec:d3:7e:c8:3e:cb:30:c4:6c:96:3f:37:21:b4:ef:05:17:a5:
         1c:8b:a9:ec:24:73:9b:68:fc:0d:37:48:73:84:6a:6b:1b:d6:
         2e:59:d9:d0:e6:c3:30:1b:d8:4f:54:d5:2b:1b:7b:e6:e2:14:
         cf:fb:e7:a2:e5:6a:7e:5a:2b:05:9f:98:5e:a9:95:d4:29:76:
         c6:8e:96:e7:3d:23:19:de:35:2a:ce:48:d1:49:79:dc:9b:c0:
         89:c3:fb:4f:ba:5a:dc:2b:72:2c:6f:ba:12:db:90:7e:4d:cc:
         cf:f2:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:24 2025 by rpki-client