Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33362d3336203d3e20323633343231.roa
File:                     323830343a313630303a3a2f33362d3336203d3e20323633343231.roa (raw, json)
Hash identifier:          SC+AiHiyRRVLJwIg+HVwje98HWeyTSWLDB07NYX20l8=
Subject key identifier:   17:F8:85:C3:21:7F:91:75:CC:F1:79:43:AD:BE:CE:F6:AD:18:DE:E1
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       7D61D72700FB20A9D6F6E9904BD91BE27DCDB4E9
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33362d3336203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:26 +0000
ROA not before:           Thu 25 Jul 2024 00:56:26 +0000
ROA not after:            Thu 24 Jul 2025 01:01:26 +0000
asID:                     263421
IP address blocks:        2804:1600::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:61:d7:27:00:fb:20:a9:d6:f6:e9:90:4b:d9:1b:e2:7d:cd:b4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:26 2024 GMT
            Not After : Jul 24 01:01:26 2025 GMT
        Subject: CN=17F885C3217F9175CCF17943ADBECEF6AD18DEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:7b:1f:cd:cb:11:5a:12:15:fe:a0:a6:ee:
                    a1:fa:d9:5b:c1:4f:06:eb:f7:d6:9d:4a:e2:b2:8d:
                    40:6d:0e:66:3f:e3:ff:ba:78:a8:07:dc:7f:76:5f:
                    24:e4:68:11:82:01:4f:fb:15:7b:b4:94:71:9c:26:
                    ca:1d:01:0e:0f:80:b1:74:08:e2:c9:a6:c5:54:6e:
                    56:68:e2:80:c5:b1:6f:48:77:56:7a:fc:1c:55:0a:
                    71:15:d0:09:a5:50:c5:10:4c:de:f7:4e:b7:22:f4:
                    55:5e:f2:bf:69:7d:61:00:ea:a1:a2:89:8d:25:eb:
                    ab:ba:e5:4d:0f:05:c3:34:93:f2:2e:53:72:d5:2b:
                    9a:32:5e:51:6b:9f:17:a0:3e:fa:22:be:a3:d9:d1:
                    05:03:c9:a2:04:9e:44:82:3f:58:f4:29:4f:d7:bc:
                    6a:2c:22:f2:71:3d:70:87:ae:cb:9e:0d:c4:fe:ea:
                    9c:bf:6f:e4:b6:d0:71:63:a6:aa:f2:3c:81:a2:a7:
                    f5:3a:9e:ba:e8:8b:1f:4c:c5:b2:24:27:73:92:ef:
                    d7:d8:4e:c9:b2:dd:31:75:2b:a3:ff:36:8a:c7:fb:
                    3d:88:f1:df:f1:6a:a0:d9:01:7d:55:06:88:80:ad:
                    55:1c:0c:a2:34:a5:60:73:aa:9c:d0:91:df:a5:f4:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:85:C3:21:7F:91:75:CC:F1:79:43:AD:BE:CE:F6:AD:18:DE:E1
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33362d3336203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:28:bc:81:1f:cc:5e:60:b7:63:db:9c:27:16:10:e1:47:
         76:ca:5a:6e:d3:c1:b6:16:31:08:b0:b6:24:54:86:02:65:67:
         cc:26:0f:be:d1:b3:31:31:1e:c0:4c:91:c6:3a:2b:cb:59:d3:
         6f:dd:d3:08:9a:7a:5e:2a:c4:a8:4b:a3:cd:ed:75:0f:51:56:
         26:34:43:c4:3f:42:16:22:da:e2:53:0e:3e:b8:38:59:d1:72:
         81:b5:49:74:8e:01:f9:94:d0:3f:b4:70:d9:4c:b8:f4:f3:82:
         c9:47:a0:70:fd:e9:55:b0:8f:d2:cb:9e:86:32:32:dd:13:62:
         59:0d:9e:94:28:e4:c6:f4:ed:54:9f:f7:e0:0a:e1:79:31:47:
         41:1c:5f:c4:f5:7c:f7:43:97:69:8e:2c:ea:d4:a6:df:06:c2:
         89:69:6a:74:5a:b4:50:f1:8e:8f:14:bf:4f:30:75:88:a1:d0:
         e9:ff:19:9b:bc:1c:11:73:29:6f:53:23:f1:ed:90:a5:07:31:
         58:9d:d0:07:b3:7b:56:c9:7c:87:44:bf:a2:27:12:5e:87:37:
         49:a6:aa:21:49:57:9b:04:0b:47:f1:72:a5:49:34:1e:07:2b:
         c8:c2:22:41:c7:75:61:de:5d:7a:e6:42:31:ac:58:60:85:51:
         ad:10:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:56 2025 by rpki-client