Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          UjjMplv5SekcnR60m5tJPtBvo9o8XKRZ1q09EFDE91Q=
Subject key identifier:   8D:6F:2F:4A:28:FD:88:A6:31:40:86:06:51:78:4B:C5:15:F8:C0:95
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       5D32D601FD4B9276F0A718357E32EB4646F69DC2
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        2804:d3c:c000:57::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:32:d6:01:fd:4b:92:76:f0:a7:18:35:7e:32:eb:46:46:f6:9d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=8D6F2F4A28FD88A63140860651784BC515F8C095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:59:1b:d9:4d:dd:40:2a:f5:84:19:9f:c6:
                    b0:0d:c4:59:0f:10:28:a3:e0:69:1a:65:d0:dc:63:
                    0c:3a:58:95:e1:21:02:5c:b2:93:f4:58:2c:f1:fc:
                    5b:35:05:db:75:aa:64:f5:f3:4d:24:c2:be:6a:01:
                    01:41:40:99:b6:4f:c9:c0:72:df:06:60:4b:d0:e7:
                    52:ca:64:77:ca:7e:bd:05:90:6f:b1:e2:03:c5:81:
                    2f:ec:e6:46:c7:f8:33:04:27:7d:bd:70:1f:9c:13:
                    08:b0:a7:69:22:78:28:20:29:95:17:82:22:cc:5d:
                    a8:5e:e6:9c:d0:74:d2:4d:03:a5:b5:c0:0e:01:a7:
                    7a:be:b5:69:42:e5:d8:cf:d7:b6:88:6c:90:99:66:
                    06:3e:49:25:f7:d1:57:d6:00:67:ef:0d:fa:af:ed:
                    e3:98:f5:85:36:68:29:8c:7f:27:b6:b6:86:35:36:
                    5a:36:1c:68:c8:d8:9d:3d:39:84:c5:a3:43:30:7d:
                    df:a1:50:0e:b4:57:a2:e4:5f:a2:d7:35:51:ad:c1:
                    a1:32:f6:ea:84:90:cb:d3:96:c9:9c:66:9a:e8:80:
                    ec:a8:6e:64:e3:56:83:d0:5e:af:fc:4d:52:d1:bc:
                    b6:46:e4:d0:77:5a:9f:45:2d:13:e3:fe:63:4d:bd:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6F:2F:4A:28:FD:88:A6:31:40:86:06:51:78:4B:C5:15:F8:C0:95
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:c000:57::/64

    Signature Algorithm: sha256WithRSAEncryption
         be:5d:16:ab:22:f2:56:da:eb:c4:3a:3f:9e:93:63:59:78:cb:
         55:2e:ae:6c:76:00:d4:93:7c:82:dc:e5:99:10:69:12:6b:f2:
         4e:f2:b4:fe:22:76:4a:9e:1d:97:c5:ef:52:b7:e5:c6:fe:c5:
         a2:10:8c:f9:78:c2:81:ff:c2:d8:d8:8f:a1:b2:3e:fc:71:a0:
         9b:db:a6:94:11:db:5c:dc:bf:4c:9f:4a:2c:82:5d:24:22:02:
         fe:ce:27:79:15:95:16:a5:d0:d3:2a:41:a8:a8:bf:41:e5:86:
         60:14:a9:53:22:e0:d2:2b:b6:7b:d9:a4:8c:65:87:3a:91:ec:
         9a:ad:4b:c0:a4:20:38:da:69:18:a7:55:04:2f:69:bf:66:c0:
         d5:1d:39:03:c2:e5:56:06:ee:d0:87:a1:d1:bc:59:e1:40:91:
         1c:b6:a3:19:c5:a2:45:cf:99:12:d5:af:4e:66:ec:1d:44:e2:
         bd:26:cd:dc:8f:8c:bd:b5:f3:04:53:5a:65:78:58:a1:3c:f1:
         14:d9:fc:6a:79:ea:f6:06:23:1f:bd:4e:90:79:5c:c4:e2:8b:
         50:b0:7d:96:11:82:08:71:9d:d3:8a:46:28:0e:56:2e:13:9d:
         b6:a2:c4:38:82:2c:4e:e6:cf:15:7a:a5:d5:17:7e:e2:e1:96:
         ae:bf:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:59 2025 by rpki-client