Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
File:                     323830343a6436343a3a2f33322d313238203d3e203532363137.roa (raw, json)
Hash identifier:          I/eCp2GP+9WvLZMVF2XidqMtoUxYJDUGpF4XHqBYR4A=
Subject key identifier:   4D:88:05:14:FF:A3:55:47:12:A4:A0:21:62:EC:5F:50:7B:A0:4F:AE
Certificate issuer:       /CN=CAE906BD747BC046D2684EAA26E0208AF0274CE2
Certificate serial:       4B14E633255C5E70E07EF437DA0D273CAC99F78B
Authority key identifier: CA:E9:06:BD:74:7B:C0:46:D2:68:4E:AA:26:E0:20:8A:F0:27:4C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
Signing time:             Mon 20 Nov 2023 18:28:51 +0000
ROA not before:           Mon 20 Nov 2023 18:23:51 +0000
ROA not after:            Mon 18 Nov 2024 18:28:51 +0000
asID:                     52617
IP address blocks:        2804:d64::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:14:e6:33:25:5c:5e:70:e0:7e:f4:37:da:0d:27:3c:ac:99:f7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE906BD747BC046D2684EAA26E0208AF0274CE2
        Validity
            Not Before: Nov 20 18:23:51 2023 GMT
            Not After : Nov 18 18:28:51 2024 GMT
        Subject: CN=4D880514FFA3554712A4A02162EC5F507BA04FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:5f:de:71:5b:35:21:6a:70:3a:d7:b6:7b:
                    29:7a:56:49:65:db:ec:05:35:82:1a:9a:25:62:76:
                    a5:7f:fe:e6:ab:49:59:a6:db:c1:96:14:50:72:9d:
                    d5:f0:6d:a6:a6:14:20:fe:a9:f6:da:9f:39:a8:2a:
                    b9:68:e3:44:bb:5e:cf:df:50:e8:b1:59:9e:d6:35:
                    70:bc:a2:cb:65:48:f4:d2:f6:52:81:fb:6f:db:da:
                    06:6b:48:66:81:2b:be:16:94:e6:71:e2:19:44:d2:
                    1c:b0:9b:1b:8a:5d:f1:6a:78:46:2f:af:ec:9f:5c:
                    d9:a6:02:eb:d6:db:2b:42:7e:41:f4:ce:22:a0:67:
                    be:36:79:42:cc:e2:47:d3:81:08:58:20:24:ad:44:
                    ca:15:2f:39:6a:db:41:09:3b:d3:8a:be:00:3e:42:
                    06:af:29:5b:4b:fb:73:f4:f8:0a:3c:d5:9c:73:39:
                    73:84:01:fe:87:25:07:ad:69:a2:49:75:63:35:f1:
                    f5:80:f7:78:01:24:ff:6f:32:8a:22:68:f1:bb:f4:
                    c2:35:fe:cb:85:43:d1:3e:85:28:b8:54:23:ad:9f:
                    0c:7a:02:6b:9c:b0:9e:46:e9:a2:37:49:d2:1a:c9:
                    6c:3f:07:c6:d3:aa:c2:98:40:b6:69:8f:ac:a9:b4:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:88:05:14:FF:A3:55:47:12:A4:A0:21:62:EC:5F:50:7B:A0:4F:AE
            X509v3 Authority Key Identifier:
                keyid:CA:E9:06:BD:74:7B:C0:46:D2:68:4E:AA:26:E0:20:8A:F0:27:4C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a3a2f33322d313238203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:ab:db:dd:7c:1b:b5:f1:5f:1d:f6:ed:a0:8c:b3:33:98:
         78:33:3a:1b:eb:fd:04:f3:19:cb:e9:90:07:ce:d1:4e:7e:10:
         8b:88:5a:08:47:46:e4:05:52:c6:2f:57:69:be:70:c2:b3:0b:
         b4:cd:b0:03:d7:40:d6:a5:8d:f5:a8:3d:82:4a:30:25:99:e5:
         ad:1b:55:b8:64:18:bd:ef:4c:2a:35:e4:a1:e5:22:d2:2b:7f:
         a8:b2:f6:88:ee:fb:39:0d:3b:d4:2d:2b:a4:6d:a7:3f:4f:aa:
         cf:fb:1d:ad:13:d0:73:e6:7e:60:2b:da:57:9d:81:82:8b:f7:
         2e:c1:46:c7:7a:d4:b2:a6:25:83:c0:0e:58:34:63:37:67:50:
         db:3c:55:61:ab:2f:12:f9:d0:ce:d3:db:4e:76:59:06:9a:32:
         82:25:82:ca:a7:7e:27:bd:f3:31:75:47:01:51:78:8f:ee:0c:
         71:36:f5:2a:cc:ec:c4:75:69:c9:b8:ea:9f:c3:6a:0d:16:fb:
         d4:68:bf:13:b5:50:db:22:fa:f1:d9:ed:d2:63:3c:50:f5:00:
         00:6b:bd:40:e6:e9:96:5c:37:65:7a:89:61:68:b1:49:86:ba:
         72:91:9c:e4:c1:b4:b7:85:9a:32:c2:82:97:3b:28:8a:4a:35:
         85:01:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:15 2025 by rpki-client