Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa
File:                     323830343a6138303a3a2f33322d313238203d3e20323632323933.roa (raw, json)
Hash identifier:          EmjRxcIqGgp3qG76lGuGZgKjfkbdieDGDz3Tydi23N8=
Subject key identifier:   1A:FB:BF:94:6C:09:0C:47:2D:CF:57:81:05:FB:A7:BB:8F:8B:58:73
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       2264EE04DC4576256DC62BA60BA7A56C600AC1E9
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa
Signing time:             Mon 16 Sep 2024 08:31:42 +0000
ROA not before:           Mon 16 Sep 2024 08:26:42 +0000
ROA not after:            Mon 15 Sep 2025 08:31:42 +0000
asID:                     262293
IP address blocks:        2804:a80::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:ee:04:dc:45:76:25:6d:c6:2b:a6:0b:a7:a5:6c:60:0a:c1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Sep 16 08:26:42 2024 GMT
            Not After : Sep 15 08:31:42 2025 GMT
        Subject: CN=1AFBBF946C090C472DCF578105FBA7BB8F8B5873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:30:8f:8c:a9:8a:84:e6:ca:20:88:4a:f2:
                    00:44:dc:9b:4b:81:50:38:d3:99:f4:47:dc:c2:97:
                    63:94:e5:db:c2:d1:57:af:53:6a:c1:84:c8:9b:1b:
                    2c:89:f2:eb:d4:db:f2:cb:fe:8d:92:6e:f1:6d:68:
                    da:60:13:fa:90:d5:3a:80:3f:6b:82:44:82:25:dc:
                    20:bd:fa:d7:e2:e1:c8:2b:df:01:e6:3d:5d:7e:06:
                    e8:f7:00:7c:fd:dd:32:69:fe:70:b0:2b:f7:8f:03:
                    9c:4d:3d:83:d3:a2:22:05:6f:cf:7b:43:e3:52:d6:
                    ad:20:e9:b8:9b:9b:02:9c:83:6a:db:64:97:2e:3e:
                    9d:5f:3a:a8:bc:02:36:e1:2e:96:e3:60:03:7c:0d:
                    6c:b2:34:7d:78:14:4c:72:df:7c:08:af:6b:2b:d6:
                    5d:9b:67:c2:6b:ae:d6:c6:a0:61:6f:cf:04:c0:7c:
                    c0:48:6d:47:12:4e:e7:0e:0a:17:f5:66:45:de:19:
                    06:6f:83:1c:ec:a6:ec:1b:6f:aa:26:a6:ab:e0:46:
                    7d:33:d1:68:90:eb:a5:c8:d0:0b:3d:5c:ee:2f:4a:
                    d9:da:89:9d:d8:7e:35:4e:b8:48:3a:4a:aa:fa:fe:
                    20:63:42:9c:9f:6c:22:e0:9d:53:97:d2:26:cc:da:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:BF:94:6C:09:0C:47:2D:CF:57:81:05:FB:A7:BB:8F:8B:58:73
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:97:7a:60:db:95:3c:7b:49:04:18:cd:12:e8:41:49:ff:6b:
         2d:53:61:72:2c:7d:49:f6:1f:84:57:56:55:fe:f6:47:ae:7b:
         f6:92:ab:4e:62:d5:0d:b7:8d:91:1b:5a:ca:f8:11:84:36:e2:
         5b:68:10:29:7d:3c:61:6b:f3:3a:b0:40:ed:31:0b:45:e8:21:
         90:76:a1:3f:93:3f:15:39:49:80:ca:96:71:ef:2b:a7:81:ee:
         a9:aa:32:5d:aa:69:62:98:77:77:ef:d4:9d:00:4b:c8:30:c2:
         0a:04:f0:20:ac:a5:81:86:36:78:ba:5f:69:7a:10:b0:8b:69:
         4c:0d:62:e7:8a:fc:c2:4a:96:af:f1:a2:77:9b:88:ac:05:cc:
         2b:c2:19:30:0a:8a:a8:2c:7c:73:30:cc:22:44:8f:92:f9:ef:
         aa:7f:79:81:8c:82:3b:67:77:d7:35:97:c9:76:c0:e3:a3:c0:
         14:01:22:dd:8f:6e:8e:f8:1e:9e:ea:5c:65:c6:37:80:0e:23:
         8f:0f:4c:d0:1c:9e:b3:3e:da:ea:cb:6e:ab:bb:0f:98:8d:2f:
         14:5e:a7:92:6a:73:c8:20:08:38:6e:d2:02:c2:ac:86:8b:b0:
         f9:24:52:ed:a5:ab:51:a4:bc:47:62:30:f8:f0:55:29:90:8b:
         22:de:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:29 2025 by rpki-client