Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33322d313238203d3e20323636313937.roa
File:                     323830343a336333383a3a2f33322d313238203d3e20323636313937.roa (raw, json)
Hash identifier:          o7Jvd9oxpKyH+OnNrk1YDxCT2dMvPs6+oAUNt1PW3mA=
Subject key identifier:   5A:3B:A7:91:98:97:8C:7F:A5:E2:7E:32:33:06:AB:C8:74:0A:DB:F7
Certificate issuer:       /CN=DD6B559C36EA68FC1C6505F2424BA4086A7AD662
Certificate serial:       0C7E5CF7BDEA8407F53FC4F4950B32556B465093
Authority key identifier: DD:6B:55:9C:36:EA:68:FC:1C:65:05:F2:42:4B:A4:08:6A:7A:D6:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33322d313238203d3e20323636313937.roa
Signing time:             Fri 20 Sep 2024 18:20:36 +0000
ROA not before:           Fri 20 Sep 2024 18:15:36 +0000
ROA not after:            Fri 19 Sep 2025 18:20:36 +0000
asID:                     266197
IP address blocks:        2804:3c38::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7e:5c:f7:bd:ea:84:07:f5:3f:c4:f4:95:0b:32:55:6b:46:50:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD6B559C36EA68FC1C6505F2424BA4086A7AD662
        Validity
            Not Before: Sep 20 18:15:36 2024 GMT
            Not After : Sep 19 18:20:36 2025 GMT
        Subject: CN=5A3BA79198978C7FA5E27E323306ABC8740ADBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:3b:48:5a:5c:8f:44:e3:1e:22:20:73:a5:
                    e1:a4:c2:0c:bf:ec:f8:f1:ca:46:10:4b:16:88:45:
                    c7:2c:9c:56:6a:90:52:2a:d6:42:db:86:c3:6d:eb:
                    13:bf:c0:f4:aa:57:be:c0:8a:61:9a:08:36:95:43:
                    26:74:fa:25:56:11:07:e7:67:50:7c:11:25:45:0e:
                    64:64:9a:a5:2b:ff:2c:e4:64:ba:19:11:e4:21:6a:
                    63:46:6f:28:dd:2f:66:9b:15:88:80:ca:3f:16:d6:
                    c1:ba:bf:51:4d:24:97:1d:8a:33:0b:83:0d:b1:73:
                    bc:df:2f:38:ef:61:94:c1:55:b4:4b:82:c3:85:a3:
                    54:5a:e6:32:a5:55:06:77:a5:7d:31:07:86:1b:13:
                    55:91:7e:a7:87:dc:af:7d:5c:b7:d3:c9:11:a7:c7:
                    61:21:44:63:c7:03:44:61:c9:d0:34:c3:44:e3:4e:
                    1b:5c:2a:c7:e2:86:eb:ca:e4:5a:d0:f6:c2:0f:a7:
                    f9:d6:91:d3:ca:e3:ad:a8:b9:ac:52:6d:7a:13:03:
                    6d:a7:ed:7d:1c:8d:9c:19:ca:27:d6:18:54:06:50:
                    75:40:b6:0b:eb:9d:87:51:35:e9:99:14:49:34:c8:
                    ff:ec:f8:d9:55:f9:26:67:6a:fb:e3:88:ef:bc:fe:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:A7:91:98:97:8C:7F:A5:E2:7E:32:33:06:AB:C8:74:0A:DB:F7
            X509v3 Authority Key Identifier:
                keyid:DD:6B:55:9C:36:EA:68:FC:1C:65:05:F2:42:4B:A4:08:6A:7A:D6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33322d313238203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:06:ca:aa:05:85:0e:75:5d:a5:8a:59:23:e6:3d:71:70:6c:
         fa:ee:5a:65:5e:22:24:22:f6:11:84:1e:03:74:28:7d:e8:c2:
         5e:0b:04:fd:4f:7f:00:0b:ab:43:25:8a:79:57:19:0b:ee:92:
         e1:cd:16:78:ff:70:e3:6e:82:ff:a2:59:7f:65:8a:0e:65:62:
         27:25:eb:44:4e:89:89:2a:ea:0a:5c:db:77:00:4e:a0:08:1c:
         49:53:32:8b:68:e6:1c:c7:a2:af:44:35:17:5a:cd:6e:06:05:
         98:78:9e:01:f7:ff:7c:9b:7e:ac:c8:3e:b7:b4:30:d3:0e:d9:
         b5:d6:9d:b6:a1:ca:70:69:0c:24:d8:68:77:60:a2:82:48:3f:
         44:0c:27:eb:be:b9:f0:ee:df:15:7c:a2:37:48:96:74:b1:ae:
         6e:58:36:24:74:6f:bd:4e:08:42:78:67:4b:0a:ce:46:04:c9:
         1c:3d:6e:0b:fa:d9:0b:e2:ac:9f:b5:a8:18:5f:8e:00:07:73:
         d7:51:a6:2c:97:36:a7:02:9b:2a:4d:37:c4:72:07:d6:15:16:
         f5:02:72:a3:dd:1d:16:58:81:c4:dc:20:48:2b:e1:21:ed:e7:
         55:b5:a7:45:89:88:e2:1a:f2:5d:60:30:da:c4:a5:a1:ff:00:
         f9:73:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:06 2025 by rpki-client