Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/323830343a323661303a3a2f33322d313238203d3e20323633383435.roa
File:                     323830343a323661303a3a2f33322d313238203d3e20323633383435.roa (raw, json)
Hash identifier:          VlNgCSfDAiQWTzgQ0RAYM9VYIfVYQLz6RBJqfyKna2Y=
Subject key identifier:   33:A8:94:5E:D0:91:0D:4D:7B:66:77:90:99:01:D5:69:8D:74:22:D8
Certificate issuer:       /CN=768804CE7849439F80A6B8BA27FDF31913FB5B00
Certificate serial:       08E37CC208A02FDC0B7B4CC2A448BFF15D320E3A
Authority key identifier: 76:88:04:CE:78:49:43:9F:80:A6:B8:BA:27:FD:F3:19:13:FB:5B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/323830343a323661303a3a2f33322d313238203d3e20323633383435.roa
Signing time:             Fri 08 Sep 2023 14:09:03 +0000
ROA not before:           Fri 08 Sep 2023 14:04:03 +0000
ROA not after:            Fri 06 Sep 2024 14:09:03 +0000
asID:                     263845
IP address blocks:        2804:26a0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e3:7c:c2:08:a0:2f:dc:0b:7b:4c:c2:a4:48:bf:f1:5d:32:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768804CE7849439F80A6B8BA27FDF31913FB5B00
        Validity
            Not Before: Sep  8 14:04:03 2023 GMT
            Not After : Sep  6 14:09:03 2024 GMT
        Subject: CN=33A8945ED0910D4D7B6677909901D5698D7422D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:d3:50:03:bd:3d:ec:42:89:db:fe:2a:24:
                    65:53:d9:3e:35:13:c9:d7:0c:04:4d:72:65:f0:0a:
                    80:26:e0:ec:36:6b:11:e0:6b:31:30:89:5f:a9:c9:
                    ca:07:83:d8:67:33:b0:d9:1d:0c:80:a5:01:85:43:
                    39:00:4d:5d:67:1e:29:7d:e1:93:fc:fb:e2:5b:2a:
                    f3:5a:1a:25:8e:ff:12:99:e2:27:0a:cb:79:5f:12:
                    c4:d2:9e:6c:13:86:3e:5d:e2:d0:93:cd:d8:1f:6b:
                    6e:3b:59:98:da:b9:50:51:13:26:2c:da:61:72:cd:
                    97:46:8e:a1:67:9d:c9:af:65:4f:d2:cd:e8:10:b0:
                    24:35:da:c7:79:0d:29:6f:e4:1a:37:9b:9e:e2:9b:
                    13:fe:06:51:a5:8c:9a:a5:17:35:bc:c5:c0:18:ee:
                    6c:0f:1d:6d:00:1d:ee:ba:09:69:f7:6e:99:1a:db:
                    cc:8d:ee:5c:0c:85:b9:a2:d1:98:fa:ae:20:d7:cd:
                    83:de:cc:88:0f:f6:81:d1:8f:fd:a5:1c:ab:3e:46:
                    fe:e4:65:98:e9:ed:21:48:b2:1d:15:76:b2:c4:2b:
                    19:5a:cd:88:ef:6a:ba:83:0d:23:65:00:5a:e0:6a:
                    79:ee:fe:7a:2c:7e:e9:74:61:30:01:29:ea:63:44:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A8:94:5E:D0:91:0D:4D:7B:66:77:90:99:01:D5:69:8D:74:22:D8
            X509v3 Authority Key Identifier:
                keyid:76:88:04:CE:78:49:43:9F:80:A6:B8:BA:27:FD:F3:19:13:FB:5B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/323830343a323661303a3a2f33322d313238203d3e20323633383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:3c:7f:7e:9f:57:ce:57:07:f5:7f:0f:29:ac:46:ac:4e:
         ba:be:3a:63:6b:06:c6:78:57:a3:da:66:45:a2:50:21:fc:84:
         aa:b4:1d:a1:f5:59:39:ca:56:7d:1d:00:d8:51:ca:49:e0:25:
         e4:9e:9f:d9:2e:ed:0a:0e:57:cb:a3:ee:de:d7:89:1c:b1:35:
         9a:c3:47:4d:75:80:6f:48:e6:16:83:8e:26:c9:24:30:96:db:
         f9:3f:66:c6:bb:53:64:dc:44:12:a0:ad:d6:2f:ef:04:92:bd:
         e1:d9:1c:fa:49:80:f7:5e:0f:8b:50:f6:ef:61:df:65:e6:35:
         89:50:44:b5:eb:f2:d0:ac:ed:86:33:a6:97:23:91:ae:0b:38:
         a4:76:46:91:cd:a2:5d:e0:5c:ec:40:64:ee:71:45:c6:b9:1e:
         9c:7c:d9:e7:e4:28:c4:a7:d6:84:ae:bd:10:ca:66:51:6d:19:
         03:bc:32:48:d7:81:47:54:5f:a6:10:c9:35:a3:cd:b8:85:d3:
         95:f8:b1:b9:e1:b0:84:65:f1:8e:3c:a1:46:aa:8c:2f:86:89:
         23:91:c2:25:5f:19:39:3b:13:c1:9f:f0:23:97:47:7f:89:4c:
         1d:33:42:b7:17:df:1b:8a:56:96:1f:28:b8:70:cb:03:6b:22:
         10:ee:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:15 2025 by rpki-client