Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/323830343a326565303a3a2f33322d3332203d3e20323635333732.roa
File:                     323830343a326565303a3a2f33322d3332203d3e20323635333732.roa (raw, json)
Hash identifier:          U6q6rK72s1BMfdJl5xLYzalWLK8Lc6NOVLntuGeFwHY=
Subject key identifier:   39:7C:A7:54:83:F8:38:DC:94:2B:AF:8F:2A:DC:30:A5:0F:56:0C:75
Certificate issuer:       /CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
Certificate serial:       476AAFDE15757BDED8C58CBC481F8BDB14C9E5DD
Authority key identifier: 0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/323830343a326565303a3a2f33322d3332203d3e20323635333732.roa
Signing time:             Tue 23 Jul 2024 18:21:47 +0000
ROA not before:           Tue 23 Jul 2024 18:16:47 +0000
ROA not after:            Tue 22 Jul 2025 18:21:47 +0000
asID:                     265372
IP address blocks:        2804:2ee0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:af:de:15:75:7b:de:d8:c5:8c:bc:48:1f:8b:db:14:c9:e5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
        Validity
            Not Before: Jul 23 18:16:47 2024 GMT
            Not After : Jul 22 18:21:47 2025 GMT
        Subject: CN=397CA75483F838DC942BAF8F2ADC30A50F560C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:b2:46:7a:03:e3:07:c7:0b:37:fc:bd:ef:
                    24:a6:dc:00:2b:3d:98:5d:75:73:82:8f:d8:9e:6c:
                    00:cc:a9:31:c8:3a:4d:6c:2f:2d:8f:6f:66:66:b3:
                    42:19:c7:35:6c:7a:1b:ec:9c:44:53:5b:0f:77:74:
                    10:58:9a:57:1f:2d:8a:c2:00:bb:0d:a2:cf:11:8d:
                    44:7d:00:ef:47:ea:c4:9a:77:e3:57:e9:29:bd:18:
                    83:69:7d:3a:5b:60:98:3c:a7:8d:15:99:84:0a:8c:
                    5a:77:ee:4d:13:dd:4b:fd:60:fb:d6:fd:36:2c:c4:
                    ef:da:1d:28:d1:f6:15:95:e8:2d:36:e0:a8:a5:ee:
                    de:ef:6c:e6:c0:d7:83:7a:2f:49:02:d6:b8:77:84:
                    08:91:66:db:4d:fc:3c:8d:88:06:8c:64:c0:b6:ef:
                    05:3b:3a:32:63:98:11:17:f9:8c:a9:6f:af:0a:87:
                    52:d6:dc:cb:0a:e0:d3:d5:8c:cd:22:4a:03:cc:10:
                    47:b4:b3:bb:04:03:cc:22:13:4f:9d:15:fd:ba:0a:
                    da:89:d9:be:2d:df:8f:d6:1f:31:59:0e:a8:74:33:
                    ff:e4:3e:f9:92:4b:5f:e1:9c:89:9e:2e:52:d8:13:
                    73:f4:0a:da:f2:c3:36:16:3b:49:ef:23:ec:a7:a6:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:A7:54:83:F8:38:DC:94:2B:AF:8F:2A:DC:30:A5:0F:56:0C:75
            X509v3 Authority Key Identifier:
                keyid:0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/323830343a326565303a3a2f33322d3332203d3e20323635333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:f3:cc:34:5e:d0:5c:66:02:11:24:0c:6c:cf:1b:1b:55:
         cc:6a:e3:31:5c:f2:2b:bc:21:54:f6:6c:03:48:ae:dc:52:b3:
         a8:81:0c:34:19:6b:9f:4a:bf:96:85:41:26:50:4c:53:5f:f2:
         89:e4:7c:a5:dd:ad:7a:a3:a9:cd:72:e8:60:a8:11:25:14:b6:
         6f:e7:ad:f2:22:95:fb:e7:3f:91:f2:d6:91:55:8c:b7:c1:fa:
         89:9d:9f:29:87:6d:d8:d2:3c:32:5a:32:91:4f:87:2a:7b:20:
         c8:6d:5e:63:81:ab:00:f4:d0:6e:c0:c7:8f:82:7c:c5:5c:cd:
         63:87:99:83:f3:4d:51:e5:82:c7:2b:b6:40:04:7b:23:74:79:
         8f:52:0b:d7:5e:51:1c:34:67:7e:90:60:8b:4d:7b:07:72:a0:
         d9:8a:3a:3b:ea:cd:2e:9e:8f:3b:76:06:c4:4a:28:d7:65:3b:
         f8:24:7f:7f:bf:ec:78:0f:fb:e2:54:65:2f:7c:71:b4:1a:72:
         e1:89:54:c1:30:f8:39:ce:25:b8:3a:ed:b4:96:32:2a:ca:18:
         bc:a5:ab:23:66:90:f2:d2:e7:eb:09:b5:a0:f3:95:c9:2b:c3:
         b8:d3:5a:08:25:df:a5:c4:86:70:60:b1:d0:b7:8b:ed:c6:7a:
         15:54:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:20 2025 by rpki-client