Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a383030303a3a2f33332d3333203d3e20323730343431.roa
File:                     323830343a366330383a383030303a3a2f33332d3333203d3e20323730343431.roa (raw, json)
Hash identifier:          qUgQpfXiPx5UNOvXOgp/yLbVepw8Y4UNcO4mvUMSM40=
Subject key identifier:   0C:D6:84:43:C6:0C:81:1F:F0:CA:A1:0C:53:51:16:D3:4C:68:FA:2D
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       2CCAE1B9EA5914AA33A34F7D400A71D819FC4E0B
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a383030303a3a2f33332d3333203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:51 +0000
ROA not before:           Tue 03 Dec 2024 14:08:51 +0000
ROA not after:            Tue 02 Dec 2025 14:13:51 +0000
asID:                     270441
IP address blocks:        2804:6c08:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ca:e1:b9:ea:59:14:aa:33:a3:4f:7d:40:0a:71:d8:19:fc:4e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:51 2024 GMT
            Not After : Dec  2 14:13:51 2025 GMT
        Subject: CN=0CD68443C60C811FF0CAA10C535116D34C68FA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:92:16:b2:fc:19:c6:7c:d8:9c:a2:2c:9d:
                    76:93:02:b7:74:df:18:e5:6f:f2:46:0f:e0:d4:86:
                    32:83:75:17:e3:3a:33:d1:f6:d4:b8:db:cd:ff:c5:
                    25:c1:6b:a8:5e:19:4b:31:f1:b2:7e:92:bb:e9:a4:
                    87:9b:39:47:b0:ce:1e:6d:74:8b:11:af:c6:2f:63:
                    fa:0f:7b:33:05:fa:e9:3a:b0:f0:41:2e:39:ab:07:
                    a3:e2:71:4e:f7:47:d2:fd:d5:21:9f:1c:4b:0b:41:
                    ab:e0:b9:4d:ac:4c:29:ba:4d:46:e9:f6:8c:ec:c0:
                    1d:66:07:e5:8a:9c:d9:ce:04:a2:b4:43:0d:82:c3:
                    5a:d9:d7:73:df:00:63:1c:7f:a1:0e:c3:5f:61:6c:
                    51:22:65:af:ee:3b:ba:8e:f6:05:7d:7b:e6:3e:cf:
                    3b:c5:7d:54:89:e2:a9:02:99:e1:3f:3f:be:ea:97:
                    70:94:9e:e5:f3:4f:43:8c:e6:9e:94:48:70:ba:9f:
                    6c:bd:97:e3:3a:43:c6:bb:1d:cb:d9:3a:f4:0c:a9:
                    51:ab:f5:30:d8:fd:1a:3a:20:09:55:fd:d0:6e:01:
                    36:7c:c1:9f:fc:0b:91:a2:39:61:98:4c:64:73:08:
                    9c:b8:73:13:68:b8:59:62:da:84:b1:fa:fd:cb:10:
                    4c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D6:84:43:C6:0C:81:1F:F0:CA:A1:0C:53:51:16:D3:4C:68:FA:2D
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a383030303a3a2f33332d3333203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c08:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:7b:ba:79:78:f8:e0:f7:2b:53:19:b4:33:3c:bf:b3:21:3a:
         90:3a:3f:7a:8a:3f:fa:5a:b9:36:1b:83:af:5d:48:27:10:55:
         1c:6e:d9:45:0d:2a:63:fd:c1:2f:a1:43:6e:dd:fe:5f:dc:f8:
         ce:be:86:d1:92:e5:37:1d:99:47:c2:ba:04:a5:8c:82:6f:32:
         b7:bb:0e:1f:ca:f0:ce:cf:4e:b6:ea:06:16:c7:cf:31:11:83:
         cd:b9:f0:3f:38:0c:9d:b0:1c:91:cb:0e:63:9c:ae:7d:89:57:
         7c:98:ee:0e:d3:97:2b:fc:13:59:f8:a8:02:5c:77:5d:de:8f:
         1f:40:d1:b0:89:be:0d:c2:d2:d8:6b:5c:5d:8d:99:8d:38:20:
         65:10:5e:f2:1f:53:b1:b9:c4:64:6d:b2:39:14:14:5c:87:99:
         a1:43:26:fb:cd:42:06:5b:21:53:b2:b8:30:6c:13:e0:56:df:
         38:ac:82:6a:6d:cb:c9:66:f4:e3:b9:b5:69:8a:c8:af:35:f5:
         ac:d9:12:f4:0f:38:61:ed:74:4b:4a:0a:f2:10:d4:99:2b:b3:
         03:42:1f:4d:11:f1:c6:9d:2c:f1:7a:82:f1:8b:00:13:dd:6d:
         b8:41:8c:48:6b:ae:ae:64:f3:61:34:da:d4:b7:dc:28:d6:94:
         29:b3:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:38:13 2025 by rpki-client