Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33332d3333203d3e20323637393837.roa
File:                     323830343a353634343a3a2f33332d3333203d3e20323637393837.roa (raw, json)
Hash identifier:          zQnVcV8kCzgW8im1IQNR++fpU7w6l+VrwxNORqrY+IQ=
Subject key identifier:   DF:0A:B2:25:3B:3E:3C:F0:00:15:58:F3:F2:69:7D:67:4A:3E:D2:1E
Certificate issuer:       /CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
Certificate serial:       4231C84BAA04A3001FB8DBF438C44B45EA629D0B
Authority key identifier: 13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33332d3333203d3e20323637393837.roa
Signing time:             Thu 15 Feb 2024 20:47:11 +0000
ROA not before:           Thu 15 Feb 2024 20:42:11 +0000
ROA not after:            Thu 13 Feb 2025 20:47:11 +0000
asID:                     267987
IP address blocks:        2804:5644::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:31:c8:4b:aa:04:a3:00:1f:b8:db:f4:38:c4:4b:45:ea:62:9d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
        Validity
            Not Before: Feb 15 20:42:11 2024 GMT
            Not After : Feb 13 20:47:11 2025 GMT
        Subject: CN=DF0AB2253B3E3CF0001558F3F2697D674A3ED21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:0e:5a:60:cd:26:c8:63:17:55:e6:9b:8f:
                    b2:11:9f:81:19:14:2f:c0:1d:26:bb:08:27:8d:ed:
                    f2:ee:66:d5:67:6d:24:82:bf:eb:1a:dc:f3:fe:80:
                    a4:91:70:a4:6e:c0:85:e0:e5:ac:13:eb:d5:d7:7b:
                    59:2e:9c:4a:13:4f:f6:2f:f6:53:78:4d:b8:de:95:
                    e0:51:0b:fc:dd:1b:7e:a0:e9:4a:bd:c6:cd:32:c3:
                    5b:31:74:0e:58:93:0b:00:17:77:d3:00:f8:b5:ad:
                    1e:f8:67:6a:db:60:08:7c:14:3e:b8:00:4c:ea:5e:
                    ce:1b:06:1f:2a:19:f3:24:16:dc:a8:1e:48:f7:f3:
                    b3:61:6b:f4:f0:2a:a5:da:00:72:e9:e1:91:85:86:
                    02:14:21:49:2c:39:e4:69:8c:7e:64:76:4f:40:64:
                    bb:b3:18:d3:0f:0a:07:46:b8:cd:28:d1:35:c3:46:
                    3e:2d:f8:b3:31:8b:e5:69:b7:12:45:9a:0a:87:47:
                    74:a0:a0:f4:67:02:4c:18:fd:64:de:94:a5:70:e5:
                    78:ae:1f:42:54:47:65:22:76:ed:2d:bd:c0:9a:ea:
                    49:b5:6c:43:f4:e3:3f:eb:e8:2e:1a:74:a8:7c:c0:
                    4b:09:c6:bf:61:75:6e:bd:d9:65:20:71:87:1c:dd:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0A:B2:25:3B:3E:3C:F0:00:15:58:F3:F2:69:7D:67:4A:3E:D2:1E
            X509v3 Authority Key Identifier:
                keyid:13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33332d3333203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5644::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:b8:61:8c:08:23:a1:3e:60:0f:c5:c4:e9:e2:38:8c:23:05:
         d5:a6:e7:6c:1c:7f:ce:f4:03:42:79:01:2a:9f:1b:e3:3f:98:
         f6:f5:df:29:d1:89:a9:e4:73:c1:1b:99:48:ae:c7:8b:95:4b:
         75:50:c7:65:08:7b:a0:84:b0:13:b2:6b:f3:89:14:0a:23:36:
         60:ee:ee:8a:d2:26:e4:f4:eb:b4:8e:cd:7d:c5:d7:06:5b:8a:
         20:d4:bb:8f:e6:48:9b:47:1e:ea:ef:6f:08:95:cd:c4:92:57:
         8c:95:86:96:04:20:77:5e:0e:89:c5:be:fe:65:f4:3b:8e:82:
         bf:35:b0:bc:ba:26:1b:e0:f1:60:ef:c3:74:4f:8e:2c:37:b7:
         5e:73:46:8e:69:19:d7:18:cf:32:c8:c7:14:ef:a5:85:b0:c5:
         77:90:ce:45:2f:84:f1:2d:ee:9b:f3:d4:7a:55:77:db:10:77:
         f9:af:45:79:b6:50:0b:39:e5:76:79:87:4d:50:f0:05:19:2f:
         8b:1c:ca:fa:aa:ae:6d:ea:dc:c7:4d:18:8a:68:96:02:d1:73:
         5c:0b:48:c9:f5:84:3d:f1:1b:00:c1:6b:77:ae:c2:56:5e:76:
         c8:e0:8f:dc:19:35:8f:0a:13:c2:b1:6e:d0:5b:f5:c4:5b:74:
         d5:b8:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:27 2025 by rpki-client