Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a343030303a3a2f33342d3334203d3e20323638363633.roa
File:                     323830343a353461383a343030303a3a2f33342d3334203d3e20323638363633.roa (raw, json)
Hash identifier:          aQu9ECH7MEkpK3yozqziLWGoWUOLAaePpwQYQfoOdWY=
Subject key identifier:   7B:BC:3F:56:E2:A1:FD:9E:95:0D:AD:7E:F7:0A:07:3B:D3:6C:DD:9A
Certificate issuer:       /CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Certificate serial:       2E040D75F76EE0BFD19ABAD2CD7FF2C295D4C764
Authority key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a343030303a3a2f33342d3334203d3e20323638363633.roa
Signing time:             Mon 23 Sep 2024 13:32:36 +0000
ROA not before:           Mon 23 Sep 2024 13:27:36 +0000
ROA not after:            Mon 22 Sep 2025 13:32:36 +0000
asID:                     268663
IP address blocks:        2804:54a8:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:04:0d:75:f7:6e:e0:bf:d1:9a:ba:d2:cd:7f:f2:c2:95:d4:c7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
        Validity
            Not Before: Sep 23 13:27:36 2024 GMT
            Not After : Sep 22 13:32:36 2025 GMT
        Subject: CN=7BBC3F56E2A1FD9E950DAD7EF70A073BD36CDD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:87:d0:23:65:94:6f:98:af:8e:64:b2:2d:
                    7e:5d:36:83:0a:6b:6d:00:70:eb:91:96:b6:33:cb:
                    e6:cc:eb:cb:6e:86:f2:89:c5:58:2c:09:0f:09:71:
                    cf:1f:5a:2b:58:c0:9b:1d:27:2f:85:d6:7f:e8:99:
                    33:b0:9d:f3:b0:ee:de:9e:87:e8:e5:d9:2f:a4:a9:
                    95:14:db:9c:a8:27:d0:79:7c:f6:9c:ca:77:42:d2:
                    f3:50:82:0e:e1:35:df:83:c3:20:55:6b:66:0f:5f:
                    62:59:0e:63:4e:fe:66:ab:52:26:57:3b:9e:a4:a1:
                    1e:3c:52:07:c1:9c:7e:4f:d3:66:b5:a4:b7:3a:33:
                    89:1e:65:13:fa:e4:19:18:94:50:3e:43:c9:2d:76:
                    33:45:0f:8b:a4:cf:3a:3c:89:a4:0e:a0:f9:5c:27:
                    2f:3c:83:83:e0:4f:55:43:e0:e7:b3:aa:fc:1e:cd:
                    6c:08:c4:a8:2d:40:8f:20:dd:6e:b1:df:39:53:20:
                    15:33:7f:18:00:07:c4:4b:b3:87:a3:f4:09:2c:f3:
                    9b:cd:c0:05:29:a6:3e:78:25:57:42:ed:3a:8e:ff:
                    46:5b:9a:a8:a9:e5:79:2f:f4:19:6d:64:f4:91:de:
                    40:dd:4b:5a:0e:75:c8:33:5f:8f:62:dc:ae:68:8f:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:3F:56:E2:A1:FD:9E:95:0D:AD:7E:F7:0A:07:3B:D3:6C:DD:9A
            X509v3 Authority Key Identifier:
                keyid:8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a343030303a3a2f33342d3334203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:95:ea:70:42:47:e1:50:dc:9b:c2:c0:b6:2e:a4:77:05:
         f6:28:75:6d:45:9c:ed:9f:7e:5d:23:57:0f:22:ef:5c:86:fb:
         1c:d8:ef:43:45:dd:b0:f2:f2:41:fd:af:79:b0:30:57:21:57:
         c0:f5:f0:8b:80:54:ad:7f:67:ff:7c:d2:0f:01:06:c9:52:5b:
         63:a6:94:90:41:af:b9:28:c6:f5:bb:b8:6d:aa:53:a3:3b:05:
         22:cb:41:38:fd:54:37:9f:35:23:28:b7:d5:0e:e5:0a:b8:ba:
         c7:69:74:f2:4c:c5:8d:1e:bc:e6:72:ec:2d:7a:ed:13:ec:64:
         09:f9:aa:d4:85:a5:a2:a6:ed:7a:ea:57:d1:d7:6c:40:7b:04:
         77:28:6f:5c:9c:d1:16:19:f4:79:10:e1:09:62:dc:fe:63:28:
         df:d9:0c:f7:d3:6c:8c:c7:b5:17:a0:52:c3:68:76:70:e8:7b:
         71:28:58:84:e1:82:0e:52:3d:2a:79:f9:9d:68:fe:bb:83:46:
         f3:b8:7e:c7:f9:14:ec:ba:88:3e:96:e9:80:65:f6:7e:ae:9e:
         61:05:ac:5a:c3:bd:62:cb:31:c9:09:38:a4:a9:86:6d:37:2b:
         ee:3a:f0:f7:11:f5:72:53:13:8c:2f:61:89:8d:11:c8:ef:af:
         16:b7:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:07:15 2025 by rpki-client