Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32623a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32623a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          Nf5HeBL3gHmqbjUuZaoTXX7gStf1FuIjOxjsizS7nQ8=
Subject key identifier:   42:81:A3:CA:44:10:20:19:82:A8:91:E0:71:33:04:47:51:3B:23:97
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       36BF92DEA342B09D28B135D79BA78ACF20017637
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32623a3a2f34382d3438203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 16:38:04 +0000
ROA not before:           Wed 07 Jun 2023 16:33:04 +0000
ROA not after:            Wed 05 Jun 2024 16:38:04 +0000
asID:                     61832
IP address blocks:        2804:1a04:2b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bf:92:de:a3:42:b0:9d:28:b1:35:d7:9b:a7:8a:cf:20:01:76:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 16:33:04 2023 GMT
            Not After : Jun  5 16:38:04 2024 GMT
        Subject: CN=4281A3CA4410201982A891E071330447513B2397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:7a:a7:54:ee:a2:06:14:2b:02:33:5c:0e:
                    5a:3a:d0:0e:11:7c:7c:7a:1a:e9:76:6b:59:4a:9c:
                    e8:1a:5b:29:b3:da:d3:2e:69:8d:77:d1:1b:8f:a8:
                    89:c8:78:23:13:e6:60:77:32:6d:ff:85:8f:9f:23:
                    a4:e7:e1:2b:83:87:9c:f4:46:e1:45:99:03:ed:fd:
                    7d:3e:75:36:cd:dd:54:16:23:36:2e:f7:46:3f:8f:
                    63:b4:da:1a:04:6a:c2:61:4f:bb:49:7e:23:80:d1:
                    6d:6e:47:d9:72:c9:cf:b6:61:ef:47:f2:7b:a2:36:
                    9b:70:1b:fd:a8:fc:16:91:2c:7a:31:a9:df:a4:0a:
                    18:f0:5f:ad:ec:31:d9:61:80:c0:2a:3a:0e:25:fd:
                    0a:76:ae:ff:c6:b4:72:3a:3b:ba:bf:91:f2:45:76:
                    4c:f6:59:77:89:83:6e:86:23:5e:d4:fb:7d:0b:0a:
                    68:d3:99:1a:e0:fa:a2:83:b5:25:6b:cf:93:0f:bd:
                    2c:c2:00:1b:08:f2:9f:18:24:2c:8c:f8:99:22:b4:
                    7f:22:c9:83:34:04:ad:73:ef:a4:69:83:b6:41:e9:
                    53:11:90:ff:b1:11:1a:88:06:db:73:b3:3a:e4:74:
                    5e:70:a3:95:9d:9f:0b:7e:3b:7f:48:92:00:71:f3:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:81:A3:CA:44:10:20:19:82:A8:91:E0:71:33:04:47:51:3B:23:97
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32623a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:2b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:28:f4:4a:ef:66:36:38:bc:60:e2:ee:43:ae:65:38:a9:
         46:e2:ca:a8:f5:4b:0d:ed:b4:b4:89:e2:6e:9d:25:7d:49:93:
         4e:23:b4:11:3c:73:62:1c:2f:27:49:de:94:e6:48:6e:41:e2:
         41:0a:14:45:b9:41:8f:15:bf:42:4d:91:1e:f7:91:bc:99:f8:
         af:bb:03:0c:c4:5c:a8:00:2d:c3:33:c3:ae:44:0b:47:6c:60:
         9b:53:6b:d2:44:64:7d:23:69:90:88:51:0a:23:71:99:2f:85:
         ea:d9:37:79:12:80:bd:83:13:9c:f2:c7:7f:0a:0c:be:a9:4e:
         3f:98:0a:71:f0:40:44:ac:a0:79:02:35:d6:9f:0a:32:a3:b6:
         47:25:6d:74:f7:49:95:8b:9a:cf:9e:2d:30:43:89:8f:c6:09:
         5b:57:a5:d7:89:ae:a5:ef:75:97:43:bc:d9:0e:aa:3c:19:5f:
         bd:3e:3a:2d:0a:6b:dc:32:33:0e:48:9c:20:f0:52:f6:17:42:
         46:88:01:6b:43:93:41:4b:a8:9b:9c:99:44:0a:fb:9d:2e:13:
         6b:4f:ed:33:db:af:1e:5c:a0:36:8a:55:bc:7b:a9:ea:c8:4b:
         60:bc:99:1a:f3:a3:dc:60:4c:2d:62:38:42:72:4b:43:96:2d:
         d1:02:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:38 2025 by rpki-client