Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          j+ZSwWeoUcCiRk4+Qr/N0ckiubb8xJeSfgeziECec/I=
Subject key identifier:   98:B2:BB:5A:8F:DF:A9:61:5D:FF:20:42:E4:51:06:D8:50:F8:D9:FA
Certificate issuer:       /CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
Certificate serial:       0DFACE852C12C3D45277B6D1CF0AED0B172356C3
Authority key identifier: 3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Wed 28 Feb 2024 16:58:28 +0000
ROA not before:           Wed 28 Feb 2024 16:53:28 +0000
ROA not after:            Wed 26 Feb 2025 16:58:28 +0000
asID:                     271548
IP address blocks:        2804:7d3c:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fa:ce:85:2c:12:c3:d4:52:77:b6:d1:cf:0a:ed:0b:17:23:56:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
        Validity
            Not Before: Feb 28 16:53:28 2024 GMT
            Not After : Feb 26 16:58:28 2025 GMT
        Subject: CN=98B2BB5A8FDFA9615DFF2042E45106D850F8D9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:fd:62:fe:83:c2:a0:c3:13:96:41:a7:30:
                    ac:5f:da:30:eb:19:90:11:cd:ba:5e:83:cd:41:16:
                    a8:4a:87:b7:34:94:98:f5:55:5a:3a:dc:bb:94:14:
                    7f:f4:ed:5a:66:49:79:ac:e1:08:e5:28:bd:9e:21:
                    ee:58:e7:fa:5a:00:bf:0a:d7:ac:e9:b9:e4:fb:22:
                    88:12:9c:80:43:a8:9a:83:ad:90:ef:ba:e5:9a:4d:
                    41:d2:8e:83:69:38:52:0f:86:d7:30:11:12:d9:51:
                    a6:fb:03:1d:0c:8e:5a:89:d3:32:a7:ae:07:52:4a:
                    59:56:57:e0:12:cb:22:a5:c2:d5:70:90:71:98:26:
                    a3:50:2b:f8:dd:e2:18:12:8b:8a:76:b9:fe:84:51:
                    fe:25:b2:61:47:ce:6f:c8:75:be:5b:b5:d6:d8:b3:
                    11:aa:b7:f3:82:fe:b7:c3:74:73:d7:86:00:18:cd:
                    f6:02:4e:ec:10:a6:d4:43:13:37:0d:84:76:58:90:
                    da:26:bb:30:6a:ab:15:a8:62:3e:9e:15:4d:52:e4:
                    fb:54:8a:4a:6c:0a:53:af:ef:20:b7:b1:c3:02:ba:
                    d0:31:57:44:dd:a5:5f:40:15:6e:7f:00:be:5c:4c:
                    6e:42:60:20:a3:a1:9f:18:da:50:b6:77:c8:9f:57:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B2:BB:5A:8F:DF:A9:61:5D:FF:20:42:E4:51:06:D8:50:F8:D9:FA
            X509v3 Authority Key Identifier:
                keyid:3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:ac:03:00:4e:56:c2:ad:da:c1:ad:4e:1b:b4:ee:5a:21:
         47:68:af:c6:9b:8d:b1:9c:62:a4:ac:1a:7e:9a:e1:8f:56:f5:
         bc:53:c2:35:90:77:db:66:cf:2f:f1:f7:fa:36:a3:62:d9:4b:
         b0:c8:22:7a:a4:61:94:56:df:19:57:2b:1a:ed:b1:d9:fb:ee:
         83:01:04:65:a0:f9:4e:3d:7c:3a:60:f8:bc:5c:41:d8:f8:c6:
         81:a4:e4:f0:4f:ab:f3:8b:fc:b6:c4:da:8f:a4:bd:ea:b8:25:
         89:20:f0:b2:20:0b:a1:1f:7f:9a:95:3a:ef:a0:aa:95:e3:61:
         cc:82:1f:fe:64:53:7e:37:39:ff:6a:3e:6f:24:3f:4c:fe:3e:
         29:5e:27:60:31:64:67:ab:00:8e:2b:0b:7d:2a:75:52:06:fd:
         58:63:b2:cb:1e:9f:90:e2:2d:6e:b8:7a:bd:cc:f9:4d:38:c0:
         23:b9:84:9a:8b:cf:cd:03:e9:e3:f7:6c:29:67:5c:3d:da:dc:
         9f:aa:93:98:05:8e:10:5a:26:d7:3f:f2:37:b6:4b:dd:4e:6a:
         c9:c0:18:4c:99:1a:91:59:8a:9f:1a:2a:bb:6e:e1:a1:12:f0:
         24:3e:2e:b8:fe:58:1c:5a:12:7e:7f:61:87:05:18:3b:5c:65:
         b7:4f:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:04 2025 by rpki-client