Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38303a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a38303a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          uwryTGw4FIfd7zvM1WD7Z/Myp15Zpx/Ugp2pOsiD3Kk=
Subject key identifier:   FB:DF:8D:C0:A9:50:8E:DE:AF:3C:A5:18:7A:35:F0:3B:E5:99:3A:6E
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       6970D2E41341CC6E52CDA6F9E610AA45455FFC0C
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38303a3a2f34382d3438203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 16:38:20 +0000
ROA not before:           Wed 07 Jun 2023 16:33:20 +0000
ROA not after:            Wed 05 Jun 2024 16:38:20 +0000
asID:                     61832
IP address blocks:        2804:1a04:80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:d2:e4:13:41:cc:6e:52:cd:a6:f9:e6:10:aa:45:45:5f:fc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 16:33:20 2023 GMT
            Not After : Jun  5 16:38:20 2024 GMT
        Subject: CN=FBDF8DC0A9508EDEAF3CA5187A35F03BE5993A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:70:a5:83:0e:e2:ab:9f:1f:6a:82:9a:ae:
                    b1:eb:6f:0f:32:a7:f2:53:fb:38:a7:b3:e6:d3:24:
                    9c:88:36:e6:ae:07:ee:71:a5:20:44:c1:db:dc:18:
                    f7:58:e1:c8:43:a5:04:7d:91:2b:47:f3:a1:85:64:
                    d9:00:bd:57:35:48:50:73:de:94:66:06:60:87:1a:
                    7d:00:6e:1f:94:14:0a:c7:d1:17:11:fa:6b:34:be:
                    5b:e5:aa:f6:76:75:23:4b:da:0c:53:44:08:30:03:
                    67:4d:95:8c:47:f2:12:08:20:14:f2:01:a6:d7:e3:
                    ea:4e:89:0e:f6:83:39:74:38:63:5c:c3:44:6d:c9:
                    8a:c8:9c:57:9c:58:81:ba:57:c3:5b:4a:af:6d:db:
                    07:01:d1:1f:e8:57:57:f6:88:fa:55:bb:b4:89:06:
                    8d:fa:30:98:ce:1f:2f:5f:4c:95:50:5b:08:a4:2e:
                    af:3c:b2:1f:92:82:8f:c4:8c:e8:9c:61:8c:b4:91:
                    fa:55:82:6e:fd:95:24:13:54:bb:32:cc:1d:0b:eb:
                    eb:64:50:5d:30:cc:c7:09:28:15:ed:9f:0e:4b:13:
                    8a:dc:d6:c1:02:fa:cc:ed:6d:83:c1:48:29:cc:6f:
                    97:0d:7c:89:97:17:1d:7b:04:cf:d2:4a:bc:5f:04:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DF:8D:C0:A9:50:8E:DE:AF:3C:A5:18:7A:35:F0:3B:E5:99:3A:6E
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38303a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:06:5f:ca:ad:bb:ba:69:27:cc:40:74:0f:78:22:2a:58:37:
         10:fb:64:08:e3:d7:16:ef:67:73:57:47:f2:d1:d6:be:75:f9:
         f5:97:44:ce:61:3d:3f:ac:7d:c1:c5:ea:2d:af:cc:68:8e:53:
         17:88:83:7d:ae:14:c0:dc:95:56:af:0f:ff:2f:e6:e1:6b:03:
         22:f2:49:d5:75:25:cf:74:98:77:3a:1c:8e:af:67:3d:fe:01:
         4d:6d:e2:57:f7:a4:6f:c2:95:f2:5f:c3:b5:eb:6c:d5:7c:04:
         4f:e7:a5:a9:bc:05:56:33:84:35:9f:bd:6f:2c:03:4f:83:5c:
         63:4e:69:96:c0:17:8b:77:f1:9e:37:f1:c7:11:59:54:88:3a:
         5a:a7:28:67:54:8f:92:a2:29:4c:00:8f:93:ca:c3:40:d7:9a:
         3a:88:86:35:df:3f:3d:f4:fb:98:c5:95:07:19:b1:cf:5c:16:
         5a:59:a2:7b:4d:c8:d3:53:ef:fe:31:94:66:4c:7d:66:54:90:
         24:86:ac:2a:df:55:9b:97:e5:01:2e:1a:5c:75:4a:90:75:84:
         8f:0f:b3:99:bc:a4:77:6e:de:1a:6d:e0:f4:0c:c9:7a:ec:df:
         3f:47:0b:90:1b:c8:a9:76:fd:35:b7:32:25:c7:b5:13:5d:ac:
         02:bc:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:12 2025 by rpki-client