Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa
File:                     323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier:          uwpJpddHiVHWw4ukygibzBzFSlx+yQHuLCtPDCJp3bI=
Subject key identifier:   F2:16:9B:E4:7D:98:B0:08:7E:C5:85:79:CE:98:01:3D:97:B3:B4:25
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       69DA2589F6B7C2182512B49F8BA4F90ACDDFFFF0
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:46 +0000
ROA not before:           Wed 17 Jul 2024 19:29:46 +0000
ROA not after:            Wed 16 Jul 2025 19:34:46 +0000
asID:                     271353
IP address blocks:        2804:7a30:2::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:25:89:f6:b7:c2:18:25:12:b4:9f:8b:a4:f9:0a:cd:df:ff:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:46 2024 GMT
            Not After : Jul 16 19:34:46 2025 GMT
        Subject: CN=F2169BE47D98B0087EC58579CE98013D97B3B425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:dc:e5:cc:cc:84:42:71:7b:26:29:00:d2:
                    ba:e1:cd:af:76:23:1e:19:19:c5:10:d4:8f:ba:a5:
                    07:66:65:f9:41:7a:75:80:ea:30:0a:96:17:98:11:
                    57:1b:32:79:ce:07:5f:ab:80:9d:e2:a0:6a:30:fb:
                    8d:b5:38:cc:53:24:16:73:c6:17:c4:f0:d5:47:63:
                    4d:e2:d7:83:44:09:6b:c9:b8:0c:63:21:2e:8a:51:
                    eb:a6:ce:8f:40:9b:da:22:fe:e4:5a:bc:e8:93:fe:
                    1f:ad:95:a7:71:cf:90:b4:44:18:f7:0c:12:9f:34:
                    c0:75:21:b1:56:ed:8c:35:4f:6c:0e:3a:c9:68:0d:
                    c1:09:ac:e7:68:d0:b3:6a:46:50:ee:0d:92:b6:db:
                    2a:b3:3d:26:cd:ed:25:6c:48:07:bb:34:9f:7a:3b:
                    89:57:c2:19:31:39:a3:3b:0f:ad:0b:1b:5c:2b:05:
                    d1:50:85:e6:7b:be:11:09:d9:c6:38:ae:0f:3e:cc:
                    95:48:0f:bd:7e:bc:e6:2a:ae:5d:d9:0d:e4:89:08:
                    10:21:f4:48:e8:5c:ee:a3:70:c0:b8:92:92:a2:15:
                    bc:66:e3:46:25:32:eb:13:58:1c:9d:30:c9:b0:27:
                    e5:14:78:8f:c9:3e:64:8a:9c:10:de:98:77:78:69:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:16:9B:E4:7D:98:B0:08:7E:C5:85:79:CE:98:01:3D:97:B3:B4:25
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:dc:f4:aa:a4:c2:4e:1f:ca:b4:64:75:7f:1b:35:b0:f4:
         41:85:fd:3f:44:0e:ed:b7:71:aa:aa:5c:68:85:6c:e0:8e:e1:
         68:bd:67:01:51:ba:5f:bb:fd:7f:db:95:56:53:53:02:e0:6b:
         af:88:a7:76:a9:af:06:3d:e9:53:49:64:a6:4d:63:26:0e:c9:
         29:91:79:fb:ca:40:aa:c3:2a:84:59:05:e9:07:3b:62:8f:ec:
         ed:52:9d:c1:72:52:12:a9:ca:69:02:b2:ba:41:de:07:72:c3:
         6f:8a:90:de:bc:b9:e6:ce:cd:b5:f9:72:89:bd:26:b5:0a:1e:
         9e:01:95:15:29:55:f9:d3:52:9d:a3:35:aa:0d:ca:61:57:51:
         52:fc:25:83:ca:c7:c7:2d:ab:31:e9:9a:62:7d:6a:0d:14:20:
         7f:b7:eb:d8:71:e3:a8:8c:9d:35:f9:7f:8b:ee:f0:84:b2:ca:
         68:73:4a:3c:bc:17:40:98:a5:cb:ae:a2:77:2f:e6:c1:e5:f8:
         38:c6:32:02:c5:5f:6a:d3:43:fe:ed:90:95:a1:25:e6:3d:0a:
         b1:31:cf:79:2f:c8:45:48:0e:72:ee:f2:f3:8e:84:4f:81:e3:
         af:b3:b8:6a:c3:fa:a2:25:c4:2f:7a:fd:44:9e:1c:0f:d2:07:
         23:12:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:21 2025 by rpki-client