Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a353662303a3a2f33322d3332203d3e20323638303138.roa
File:                     323830343a353662303a3a2f33322d3332203d3e20323638303138.roa (raw, json)
Hash identifier:          URDNWeibVS6oDOsylAPUHUF+uzx8SdQdyXgcEltHSpo=
Subject key identifier:   C7:4B:0E:12:34:88:56:35:DD:11:C7:A1:E7:E8:2E:34:EF:FC:76:4E
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       54EFF462E8048D3D70E2D693A460C604BE8376C4
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a353662303a3a2f33322d3332203d3e20323638303138.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     268018
IP address blocks:        2804:56b0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ef:f4:62:e8:04:8d:3d:70:e2:d6:93:a4:60:c6:04:be:83:76:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=C74B0E1234885635DD11C7A1E7E82E34EFFC764E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:a0:f7:03:81:ee:d5:1c:14:1d:6e:45:44:
                    fd:b0:fc:74:8f:d9:cd:37:26:9d:51:85:4b:5c:ab:
                    71:61:99:ae:82:eb:76:9f:6e:2a:97:c6:de:50:3a:
                    c9:17:ab:9a:e5:59:8d:68:3b:7e:db:a2:f0:e8:24:
                    33:83:b3:d7:48:d6:56:ab:f2:9d:00:c8:fd:8f:ea:
                    68:55:02:aa:58:f7:a8:ee:29:93:9a:96:97:25:f2:
                    f6:7d:2f:30:74:15:d2:f4:75:7e:15:52:b0:16:59:
                    80:f4:82:9e:38:c2:d9:cb:69:9a:6d:8e:26:d3:2f:
                    f0:0a:31:24:73:0b:ec:b1:e6:a6:6e:68:e5:43:97:
                    1a:02:16:f9:d7:cd:05:88:85:86:a3:f2:e3:bd:aa:
                    b7:a7:10:c6:a9:d4:55:29:94:f5:0e:99:04:8f:f8:
                    83:81:67:6f:02:94:64:31:34:ce:03:17:32:09:8d:
                    55:10:83:b9:91:86:7c:30:56:4a:3f:5f:13:16:a6:
                    ca:6c:31:71:72:b3:5e:71:4a:67:04:1e:3e:d0:ed:
                    1e:31:80:e2:04:e4:21:45:f6:a5:fd:29:51:97:de:
                    25:c9:b8:53:6b:22:0d:77:4a:c6:ed:40:ca:0a:d1:
                    50:54:f0:c3:2e:3e:0a:5b:f5:38:88:21:de:bc:82:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:0E:12:34:88:56:35:DD:11:C7:A1:E7:E8:2E:34:EF:FC:76:4E
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a353662303a3a2f33322d3332203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:3a:8e:40:f2:b9:dc:60:74:a5:30:5d:46:c0:fc:7d:7c:f0:
         31:1b:ef:02:c0:f7:88:c1:61:ce:9b:45:bd:b1:a5:0b:b7:40:
         02:5d:fa:89:5f:37:2b:1b:89:18:d2:e3:7f:33:81:2f:0a:24:
         5b:cb:54:b3:08:79:02:01:cc:08:51:17:04:d1:01:50:af:39:
         3a:d2:ac:e2:c8:ea:71:71:d0:a5:af:1c:b1:43:84:28:f7:6b:
         3a:42:ce:63:83:96:4d:1e:60:a6:6d:06:0d:97:b1:82:dc:14:
         ef:84:81:1e:48:93:d9:ba:09:9c:3b:8c:5c:b2:c5:e2:6a:01:
         1c:4c:55:3f:09:2a:f4:c6:c8:ab:a0:0c:aa:33:49:f2:e7:ee:
         2d:99:17:42:e0:f7:03:e9:4b:02:a1:8e:67:3e:74:f3:09:91:
         f6:aa:d0:3e:3c:3b:52:5c:38:6b:73:fb:d0:88:6f:2e:c4:4c:
         68:6c:ea:cf:20:be:59:e8:14:ac:c0:96:d2:fa:49:04:0c:96:
         ab:8e:57:1b:2c:37:0f:c0:3d:a4:f1:a7:33:9a:4d:92:30:ac:
         72:a5:82:04:43:53:a5:ca:4d:b3:c3:db:94:14:00:20:6b:33:
         72:77:46:f2:9b:74:3c:4d:93:1f:b1:1d:de:43:01:07:15:7f:
         88:a6:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:16 2025 by rpki-client