Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a3a2f33332d3333203d3e20323731373038.roa
File:                     323830343a376663343a3a2f33332d3333203d3e20323731373038.roa (raw, json)
Hash identifier:          RKiXYMLMrgDTqjIpJhdkF5FYz8ikYmuw3jfTaBDgqo8=
Subject key identifier:   56:2B:4A:85:85:0E:EF:BD:9D:12:E6:10:B8:0A:16:0F:F6:D1:A7:8F
Certificate issuer:       /CN=DEBABA97575B22EB79CB56298FD27EB827D57CE0
Certificate serial:       59903309E4827F1A2DCEC223863559BC4E82323E
Authority key identifier: DE:BA:BA:97:57:5B:22:EB:79:CB:56:29:8F:D2:7E:B8:27:D5:7C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a3a2f33332d3333203d3e20323731373038.roa
Signing time:             Thu 22 Feb 2024 03:24:43 +0000
ROA not before:           Thu 22 Feb 2024 03:19:43 +0000
ROA not after:            Thu 20 Feb 2025 03:24:43 +0000
asID:                     271708
IP address blocks:        2804:7fc4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:90:33:09:e4:82:7f:1a:2d:ce:c2:23:86:35:59:bc:4e:82:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEBABA97575B22EB79CB56298FD27EB827D57CE0
        Validity
            Not Before: Feb 22 03:19:43 2024 GMT
            Not After : Feb 20 03:24:43 2025 GMT
        Subject: CN=562B4A85850EEFBD9D12E610B80A160FF6D1A78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:d5:d6:f5:48:db:6f:f8:7f:d4:23:66:10:
                    fe:d8:31:0c:eb:29:c1:ba:3c:da:79:09:a4:2f:6d:
                    58:60:d7:e7:bc:55:65:83:fe:81:f6:07:29:e1:5c:
                    db:75:5b:65:b3:98:ad:bc:d6:e1:27:89:a2:5b:41:
                    be:6e:c7:5f:e5:1d:d8:a8:ed:6e:1a:31:10:c0:9e:
                    07:73:c6:63:27:bd:f5:79:27:e1:03:73:43:c7:77:
                    dc:fe:24:42:be:b7:5f:93:06:e9:73:33:39:c8:70:
                    e0:ad:f8:05:11:61:3d:45:b5:82:ca:81:9a:13:76:
                    16:2d:c2:e1:57:2c:bd:62:dc:fd:9d:d2:8f:51:ce:
                    f2:ad:0d:a4:f5:4b:8e:22:cd:0e:b9:74:7d:b3:22:
                    98:52:fa:e7:19:a7:48:09:7a:b0:51:50:d4:59:80:
                    f3:dc:a3:54:c8:4a:cf:1b:49:3f:42:81:38:c7:67:
                    3e:36:51:c9:fe:9c:76:f7:f9:62:79:bd:b6:01:0e:
                    81:24:da:38:dd:23:78:cb:c6:9d:5b:fa:de:78:8d:
                    f3:aa:1d:1c:51:b6:dc:63:fd:b1:f2:3b:ad:05:d5:
                    e9:57:b9:87:b2:9b:b2:12:e7:8c:9b:1b:15:5d:d6:
                    eb:66:3c:07:bd:0a:49:22:ef:45:5d:d4:16:70:93:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:4A:85:85:0E:EF:BD:9D:12:E6:10:B8:0A:16:0F:F6:D1:A7:8F
            X509v3 Authority Key Identifier:
                keyid:DE:BA:BA:97:57:5B:22:EB:79:CB:56:29:8F:D2:7E:B8:27:D5:7C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a3a2f33332d3333203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:39:4f:59:aa:a4:54:f3:47:d8:c3:20:6b:d8:35:98:d8:64:
         ae:67:02:89:98:93:47:2e:6e:4f:52:a5:f8:a6:2a:01:fa:25:
         af:a8:2e:10:8d:8a:5b:6b:7d:d3:1f:05:1a:2f:aa:c2:6f:b4:
         df:c7:05:c7:c6:cd:92:b1:c9:b4:f0:97:77:32:e5:75:8c:56:
         46:48:fa:b1:44:c2:84:66:0a:ea:b5:4c:51:9f:eb:d3:ec:eb:
         31:fd:3a:2e:fd:8b:5a:d1:75:d6:0c:cd:70:47:64:b7:46:d2:
         3e:6a:9b:b5:10:a2:bc:c5:94:20:43:a5:7b:88:74:57:d4:f4:
         01:88:99:c9:25:ef:47:a9:d2:77:cb:a8:31:59:12:9e:d1:b6:
         61:94:d2:91:37:d3:9a:a4:2f:c7:06:e5:9a:f8:0e:aa:d9:de:
         79:2c:99:70:47:27:81:c1:e0:ab:e2:71:43:fb:7d:3e:d9:bf:
         81:12:b4:97:73:c7:12:8a:8f:14:03:7b:c6:2f:77:32:ee:75:
         2d:fd:75:ee:ea:11:0c:ba:0b:5f:c0:b5:64:c2:04:01:15:7e:
         1c:89:81:31:9c:00:39:5a:9d:7a:d9:73:a5:6a:ac:e3:8d:e1:
         ea:14:ae:4d:5e:56:f9:74:2e:2f:72:d1:e5:a7:bd:97:13:42:
         0c:0b:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:46:18 2025 by rpki-client