Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33332d3333203d3e20323637363134.roa
File:                     323830343a343366633a3a2f33332d3333203d3e20323637363134.roa (raw, json)
Hash identifier:          IDAo9xccgs+XDpqMQqB2SihxdqWqDL5J8VmqILQ2ses=
Subject key identifier:   44:78:81:CE:1A:49:60:E6:98:3E:0C:CE:78:3F:15:13:A2:18:53:78
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       5820FD41EA5E96DE5EC0CD0DB029A0974423D54D
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33332d3333203d3e20323637363134.roa
Signing time:             Wed 06 Dec 2023 18:21:36 +0000
ROA not before:           Wed 06 Dec 2023 18:16:36 +0000
ROA not after:            Wed 04 Dec 2024 18:21:36 +0000
asID:                     267614
IP address blocks:        2804:43fc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:20:fd:41:ea:5e:96:de:5e:c0:cd:0d:b0:29:a0:97:44:23:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Dec  6 18:16:36 2023 GMT
            Not After : Dec  4 18:21:36 2024 GMT
        Subject: CN=447881CE1A4960E6983E0CCE783F1513A2185378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:9e:8e:a8:e6:4a:c4:be:ae:37:67:bf:b2:
                    fb:74:71:ce:17:b6:c4:51:72:c9:9b:a9:53:2b:96:
                    c4:2e:fb:45:44:d1:34:05:08:47:3d:ef:dc:80:d7:
                    4d:75:75:50:3c:aa:b0:47:8e:93:cd:5a:75:72:5a:
                    2a:5b:ad:23:98:76:9a:82:54:49:c0:f3:64:b3:7c:
                    07:ec:d3:e0:25:c9:2b:73:cf:b7:f9:a8:34:2b:3e:
                    3c:aa:9d:e2:4d:f9:5e:8b:22:c6:80:a9:06:d9:8a:
                    01:79:59:c2:14:c4:94:55:ba:44:66:f5:a8:b2:39:
                    0a:87:37:15:d6:ea:30:23:ef:a5:6e:a0:70:1e:fb:
                    4e:77:72:68:59:84:d5:93:ea:42:78:9c:a9:05:78:
                    16:cc:d9:2e:e0:10:50:ef:6b:d2:d3:70:42:69:1e:
                    57:3d:f1:f9:22:a2:b7:8c:f6:01:b5:9a:bb:31:c9:
                    8b:f6:b4:ae:d2:e8:dc:b8:b9:08:11:ac:e0:36:f9:
                    8d:5f:3a:28:ce:38:20:82:59:0f:14:31:c2:6f:16:
                    d5:c7:55:21:91:a8:b4:d1:ee:57:91:3c:cc:00:2a:
                    72:50:97:15:43:c6:e4:49:bd:af:21:51:6e:25:49:
                    ac:99:62:0d:c7:27:3f:e6:7b:c0:ca:be:6c:a7:6d:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:78:81:CE:1A:49:60:E6:98:3E:0C:CE:78:3F:15:13:A2:18:53:78
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33332d3333203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:30:da:73:2d:f4:64:ec:57:89:98:55:0e:dc:71:f8:18:94:
         59:77:ba:d3:e6:c0:f8:c9:88:8b:cf:d4:c0:41:62:b3:ff:83:
         8c:cc:c5:5b:33:60:e8:66:a5:9c:d6:f4:6b:9d:2c:78:7f:e1:
         ac:4b:78:0d:23:a7:91:30:a0:1c:d8:38:a4:59:d3:ad:77:bc:
         c8:e5:8a:2b:fd:c0:5b:b2:3a:64:51:c3:56:bb:5a:7a:40:c8:
         3d:31:ff:90:4b:51:5a:24:1e:08:e9:95:a4:29:4a:ab:90:84:
         58:de:42:0e:67:0c:c6:82:7f:53:38:0d:36:9e:e1:4c:de:5d:
         28:d3:76:a1:7a:ac:33:57:c2:ee:48:42:b6:9f:c0:a1:30:e2:
         41:e8:e0:50:70:e6:99:4d:d8:b0:54:86:a3:82:48:44:b9:b8:
         51:81:92:6a:97:a3:3b:53:a9:6d:a0:9c:c3:8f:a2:4e:7b:1a:
         c0:8d:fb:0c:bf:d2:2f:07:c8:7b:eb:f2:d1:5f:19:3e:25:2d:
         4f:ed:f6:a6:26:3d:fb:36:10:be:c8:48:2c:f1:0a:38:3f:16:
         36:05:ef:6c:05:06:e8:20:ba:72:dc:8f:d4:a3:2f:d5:24:d5:
         a5:e8:af:0d:69:63:8a:8a:b8:fd:d4:13:06:9f:97:aa:e0:48:
         5f:be:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:28 2025 by rpki-client