Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a623a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a623a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          zIRxGLjPeKYWqfTDkhCrQpcOmXjopwbP79EkRs7QdkM=
Subject key identifier:   AE:84:E7:4C:00:66:60:2C:2E:06:E9:93:30:82:91:E6:3B:B0:92:7C
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       529484CE5833AE6272E965D9A26E126908238299
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a623a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     61832
IP address blocks:        2804:1a04:b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:94:84:ce:58:33:ae:62:72:e9:65:d9:a2:6e:12:69:08:23:82:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=AE84E74C0066602C2E06E993308291E63BB0927C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:03:3a:38:7b:c8:51:bf:c4:62:3e:52:93:
                    69:32:81:7a:fd:a2:6f:8d:7a:ec:e2:c5:c7:90:5f:
                    00:d1:e1:3a:4c:91:a3:ef:41:22:72:f5:f3:0a:69:
                    c5:1a:b2:8d:86:35:d7:55:d9:76:a8:c7:d7:df:27:
                    79:31:fa:ca:36:95:e5:81:a6:51:f4:d3:59:62:2a:
                    17:d7:aa:96:1d:3d:56:3b:57:50:0a:f8:6c:d9:e5:
                    e1:18:c3:fe:27:ff:cb:90:a9:71:37:76:9e:98:dd:
                    55:1a:7e:2b:f5:72:c1:bd:79:7a:d9:ce:23:8c:5c:
                    8c:47:7d:2b:3e:05:5d:e8:c2:fa:02:71:35:ac:89:
                    a2:20:81:e7:1c:59:c3:9a:36:eb:81:75:7c:ad:33:
                    b2:6e:3e:e9:08:65:52:dd:d8:d5:e2:c3:da:2e:db:
                    31:52:96:19:df:10:53:aa:e8:97:d1:58:ba:a6:93:
                    7e:6c:01:af:20:95:45:96:4d:01:83:92:2b:6f:a6:
                    d0:ae:f9:69:f1:24:5e:c1:c7:bd:64:53:c5:f7:fd:
                    da:a4:51:b5:8a:08:47:a6:3e:42:43:af:31:0d:ca:
                    8e:03:36:da:b6:b7:fe:28:19:7a:a4:f4:01:09:3f:
                    43:42:62:b2:5f:80:a8:97:61:70:e9:a6:0a:12:3e:
                    b4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:E7:4C:00:66:60:2C:2E:06:E9:93:30:82:91:E6:3B:B0:92:7C
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a623a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:67:35:23:18:3c:1e:90:0c:a8:17:79:5a:3a:6d:aa:ea:4a:
         08:d8:a3:c9:bf:be:49:c5:c2:c3:f7:fd:37:c4:36:44:e4:57:
         d5:36:9c:55:b1:10:03:3c:5d:b1:e1:8f:07:4a:9a:b1:2e:5e:
         d2:96:5e:9f:1a:0e:70:4f:0b:85:00:36:12:88:4e:fc:fe:4b:
         bf:39:12:1e:07:7d:44:2b:fa:19:4b:7b:9d:33:f6:cd:e4:f4:
         53:a3:82:5e:18:f1:6d:02:bb:13:f5:f9:e7:73:72:8b:d3:88:
         8d:4a:7f:ef:98:09:37:4f:36:22:05:91:e4:18:07:9d:20:95:
         f6:43:dd:31:55:64:55:74:cc:40:c4:3c:14:b0:f5:b8:86:29:
         64:da:59:33:62:0a:4b:20:ac:c7:a3:d6:4c:27:3a:02:b7:e3:
         3b:9a:5d:1f:ed:c5:d6:43:ce:d4:61:e5:77:80:52:46:8d:9b:
         eb:99:4f:d9:5e:c4:04:a6:58:cf:3e:00:1d:d0:c7:de:12:ac:
         fb:ae:94:a7:e0:06:ad:0e:05:11:8a:29:8d:58:06:4d:ca:96:
         62:da:2c:f2:92:2d:95:ae:d3:a7:33:67:10:7d:ab:a7:2a:f8:
         d5:7e:ea:c7:7d:63:5b:c1:07:b8:27:76:d1:2c:de:f6:f6:88:
         82:a4:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:59 2025 by rpki-client