Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a3a2f33322d313238203d3e20323635333330.roa
File:                     323830343a326533303a3a2f33322d313238203d3e20323635333330.roa (raw, json)
Hash identifier:          fqI3+yjKoJVV8iqwV/6YJbeQ9oXNEOHzyGcYW/57Dzs=
Subject key identifier:   4B:49:B7:B5:F1:B8:32:ED:6A:5E:1F:7B:72:15:83:B9:48:6F:B0:C3
Certificate issuer:       /CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
Certificate serial:       27495329303532AE8419E8052F75CF2C1AA62E92
Authority key identifier: 2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a3a2f33322d313238203d3e20323635333330.roa
Signing time:             Mon 07 Oct 2024 02:44:31 +0000
ROA not before:           Mon 07 Oct 2024 02:39:31 +0000
ROA not after:            Mon 06 Oct 2025 02:44:31 +0000
asID:                     265330
IP address blocks:        2804:2e30::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:49:53:29:30:35:32:ae:84:19:e8:05:2f:75:cf:2c:1a:a6:2e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
        Validity
            Not Before: Oct  7 02:39:31 2024 GMT
            Not After : Oct  6 02:44:31 2025 GMT
        Subject: CN=4B49B7B5F1B832ED6A5E1F7B721583B9486FB0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fb:ff:b8:30:86:41:15:0b:4b:c7:f7:97:6b:
                    2c:3b:aa:da:6b:71:79:df:f9:9c:93:95:a2:bb:53:
                    7d:64:94:91:fc:bc:9e:b2:91:60:80:90:fa:61:aa:
                    7d:64:97:a1:2b:a1:2e:49:93:dd:3e:32:32:e1:79:
                    5c:0a:09:b7:a5:46:67:9d:01:ad:f8:1d:0c:c7:ab:
                    91:45:07:74:e9:ad:b9:b6:ab:2b:6c:84:0c:e4:c5:
                    1e:77:7a:99:e2:13:b3:a9:c7:46:28:49:62:ed:65:
                    15:7e:6b:b7:13:93:4b:87:5a:e4:c7:31:75:4e:ae:
                    97:e3:89:c3:f9:ad:48:84:19:24:1e:b3:d9:74:d2:
                    3d:bf:f3:31:29:c4:d2:2e:f5:fd:91:96:41:6c:77:
                    e8:98:64:2b:02:07:85:64:57:66:fc:1f:66:b0:88:
                    f1:eb:b0:74:31:c2:e5:30:19:92:a4:c0:04:80:cd:
                    4b:26:d4:53:e3:04:8e:00:c3:bb:f0:2c:0c:03:ed:
                    39:c3:96:b4:c3:ab:b6:c3:16:02:cf:67:de:61:a3:
                    81:ab:0d:f4:1c:9c:02:00:f9:3b:82:1d:db:87:fd:
                    70:2d:1e:cd:20:14:c8:24:6c:c1:b7:56:15:c0:8b:
                    ce:f4:16:5b:dd:be:88:29:98:54:75:95:ae:d1:90:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:B7:B5:F1:B8:32:ED:6A:5E:1F:7B:72:15:83:B9:48:6F:B0:C3
            X509v3 Authority Key Identifier:
                keyid:2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a3a2f33322d313238203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:fa:c7:46:0b:ab:c3:72:49:10:6d:5b:b1:b0:22:8e:99:bb:
         6e:55:8f:b5:56:6c:8a:40:36:25:be:9b:3c:1f:ad:c6:68:30:
         12:eb:31:bf:9c:ae:15:6b:8c:6f:59:11:59:74:c7:b5:1a:b1:
         7c:52:51:0e:fb:4c:10:66:5d:2b:48:c7:fc:ab:28:3c:e6:c2:
         69:67:36:e6:b2:35:2e:ad:67:b1:18:46:4d:77:96:89:3b:cf:
         98:bb:06:d4:b4:0a:3c:ae:34:00:ea:f5:39:d4:0d:5b:90:27:
         a3:79:eb:60:12:49:e5:d3:5d:3a:62:7a:ff:7b:7b:ab:24:f3:
         76:c2:58:5d:1e:51:60:81:6b:45:32:42:c0:78:05:a7:ae:69:
         ee:ec:e8:50:40:d5:ca:f6:b6:6a:9a:a7:11:3c:f5:43:dc:b3:
         f5:a0:aa:8d:1a:b8:31:45:9a:68:b8:4d:13:02:57:55:36:b4:
         6c:07:7f:c4:6c:51:5a:3f:ac:8d:d3:6d:93:b2:92:86:cc:7f:
         1d:2d:e9:f1:27:8c:72:49:2a:f0:8b:54:47:53:d3:f0:09:c4:
         ac:57:5f:82:29:8b:95:ee:95:2c:77:83:a4:00:cb:ff:a2:82:
         c1:fb:97:59:3d:da:8b:f2:d7:a5:05:c9:6d:f4:bd:01:0b:9e:
         17:da:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:43:37 2025 by rpki-client