Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a3a2f33322d3332203d3e203532363137.roa
File:                     323830343a6436343a3a2f33322d3332203d3e203532363137.roa (raw, json)
Hash identifier:          EVulOTbDWmsZyBdPvDk8GYJweKHX7vTpIR9a1Z/eTWc=
Subject key identifier:   48:4A:FE:0A:E1:40:62:73:B3:54:C4:58:BA:67:27:6C:7B:B0:53:11
Certificate issuer:       /CN=713B957336855F584C130E6F0AF402476B26B912
Certificate serial:       6BCEA59725FA6628AC6025670B12CC07CF1C680F
Authority key identifier: 71:3B:95:73:36:85:5F:58:4C:13:0E:6F:0A:F4:02:47:6B:26:B9:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/713B957336855F584C130E6F0AF402476B26B912.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a3a2f33322d3332203d3e203532363137.roa
Signing time:             Tue 06 Dec 2022 15:19:14 +0000
ROA not before:           Tue 06 Dec 2022 15:14:13 +0000
ROA not after:            Tue 05 Dec 2023 15:19:13 +0000
asID:                     52617
IP address blocks:        2804:d64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ce:a5:97:25:fa:66:28:ac:60:25:67:0b:12:cc:07:cf:1c:68:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713B957336855F584C130E6F0AF402476B26B912
        Validity
            Not Before: Dec  6 15:14:13 2022 GMT
            Not After : Dec  5 15:19:13 2023 GMT
        Subject: CN=484AFE0AE1406273B354C458BA67276C7BB05311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:cc:cf:5d:6b:74:98:d9:0a:d4:04:88:22:
                    80:16:fc:ec:4e:ad:14:9c:80:60:a8:35:86:8a:9b:
                    ce:be:40:42:ec:96:de:55:8e:e5:1e:6f:3e:57:f9:
                    bb:1f:32:5c:52:b1:5b:97:55:50:81:4c:b8:b6:a9:
                    81:e4:1c:24:24:5d:b9:01:2f:09:0f:1b:d9:0d:b4:
                    c2:28:85:97:23:44:1e:8c:4a:f9:25:a8:7a:23:6a:
                    a0:24:a9:88:cb:b3:c2:19:77:0e:8a:d5:11:79:79:
                    55:d0:95:fc:c5:3b:b9:0d:e9:19:f1:01:a1:9e:a9:
                    47:42:e1:d3:9e:da:6d:e5:76:82:d3:be:8f:60:12:
                    e7:f4:98:ce:12:c8:c5:64:66:49:91:a3:b8:8c:f9:
                    23:ce:ec:06:ff:49:1d:dc:43:db:f2:14:7a:27:0d:
                    7d:9a:ba:ea:01:d9:dd:ef:a8:fb:0d:ea:21:65:73:
                    5f:23:af:02:7d:9b:57:7e:eb:8a:4e:ac:3a:c7:b3:
                    12:a5:f6:6e:02:8f:ed:6c:e4:20:21:1c:62:eb:24:
                    59:f5:d4:94:e5:ff:39:57:97:7c:e3:55:a2:41:f6:
                    0c:24:24:55:57:1f:93:f1:6e:05:5f:c4:eb:71:4d:
                    02:64:bf:65:58:aa:95:4b:27:bb:9d:39:86:de:25:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:FE:0A:E1:40:62:73:B3:54:C4:58:BA:67:27:6C:7B:B0:53:11
            X509v3 Authority Key Identifier:
                keyid:71:3B:95:73:36:85:5F:58:4C:13:0E:6F:0A:F4:02:47:6B:26:B9:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/713B957336855F584C130E6F0AF402476B26B912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/713B957336855F584C130E6F0AF402476B26B912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a3a2f33322d3332203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:dc:22:da:e4:0d:88:8a:a0:8b:84:d3:47:9d:8c:7e:a3:
         b3:4a:ae:d2:ef:24:cb:39:c1:35:b0:71:91:57:7d:6b:f1:13:
         a2:60:61:c5:1a:8a:e1:36:4b:3d:9f:cc:ba:ff:f0:81:54:3c:
         c5:56:3b:52:5a:69:e0:e5:32:a7:8b:f3:3a:10:85:e0:9a:4b:
         db:f8:97:69:06:48:8b:69:7f:23:33:6c:49:2a:0e:fe:ca:a0:
         7c:6d:02:7e:39:15:d2:50:ce:11:98:dd:12:ee:70:9c:6d:50:
         50:18:39:a9:9b:ba:79:cc:49:37:3e:3e:ef:94:2e:f1:b6:5d:
         54:4e:93:3f:64:c1:45:9e:a1:96:31:17:a9:2d:c9:55:18:05:
         51:3f:aa:33:3a:28:9f:c7:44:ee:d6:d8:d4:af:90:bc:8b:48:
         f2:e4:94:3c:51:70:04:2d:59:e6:ba:f1:8d:86:96:ae:54:47:
         c4:2d:52:31:db:61:2f:6d:21:b0:b7:13:48:b8:72:10:d7:e7:
         8b:45:2c:8c:68:61:7b:3f:67:41:73:30:a1:2a:07:90:f4:a7:
         6e:bc:ee:bc:ab:2d:ae:ae:de:04:58:ec:76:a6:c5:c8:92:63:
         8b:72:69:93:76:79:35:e6:21:ec:bc:da:0a:b4:78:4a:15:76:
         89:87:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:33 2025 by rpki-client