Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33322d3332203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (raw, json)
Hash identifier:          p3oJE16d+iZKNxHGp+t9uOMF806fyfxN7mEkgoOtqcs=
Subject key identifier:   16:72:60:7E:94:12:D7:8C:1A:06:DD:C2:4F:8D:F6:42:7D:FD:7E:8E
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       1B8336ADC135C3D2F6F8D914B9742AFF43072313
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33322d3332203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:27 +0000
ROA not before:           Thu 04 Apr 2024 07:12:27 +0000
ROA not after:            Thu 03 Apr 2025 07:17:27 +0000
asID:                     270910
IP address blocks:        2804:735c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:36:ad:c1:35:c3:d2:f6:f8:d9:14:b9:74:2a:ff:43:07:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:27 2024 GMT
            Not After : Apr  3 07:17:27 2025 GMT
        Subject: CN=1672607E9412D78C1A06DDC24F8DF6427DFD7E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:34:4c:5e:6f:54:1c:6d:22:24:5f:aa:65:
                    c7:ce:14:2b:26:a9:e7:ec:75:22:29:2f:3e:06:8a:
                    53:e1:c7:ee:a2:b8:a6:6b:8c:97:81:db:9b:05:f1:
                    44:df:a3:f6:5f:40:43:56:35:f5:e8:b8:94:0d:06:
                    c5:69:f0:45:44:98:63:2c:27:d7:ae:ee:8d:0d:83:
                    30:c6:9f:32:79:c9:ad:84:8e:c1:c2:8e:76:62:40:
                    b4:56:24:87:db:a4:f2:fd:bf:06:03:ec:0a:8f:01:
                    75:eb:c5:59:c4:7c:ca:81:48:af:ce:e5:f2:92:d6:
                    6d:fc:74:4c:64:01:0a:0f:3d:42:f4:9d:2b:d9:12:
                    68:38:fe:c7:c6:a8:62:90:15:e6:73:6c:44:95:35:
                    26:18:1f:d6:7d:38:0a:7e:99:5e:10:f8:5f:f1:20:
                    e3:4d:f7:66:76:6c:09:96:ad:25:b4:7c:0c:a3:71:
                    85:57:1a:19:1f:9f:b3:0b:9a:88:c9:3f:f2:9c:67:
                    92:ff:57:ae:2b:7b:0a:8a:6f:e6:b4:b4:c2:20:aa:
                    5d:c1:ef:8c:52:fe:39:51:06:a6:94:88:85:a2:71:
                    85:75:d9:0f:9d:23:e0:bf:d7:a8:6f:d4:8c:2d:02:
                    53:75:a2:c9:f0:df:96:a8:70:74:f2:5d:f7:21:ca:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:72:60:7E:94:12:D7:8C:1A:06:DD:C2:4F:8D:F6:42:7D:FD:7E:8E
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33322d3332203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:f7:be:50:16:30:5b:c1:9e:c6:a2:6d:b4:65:88:04:e9:
         c1:42:d9:e7:0f:49:b3:6a:cd:34:b9:05:fc:1f:85:80:af:43:
         26:7f:84:97:1a:ae:9f:7a:f8:73:35:de:d2:58:de:5c:56:ed:
         b8:56:eb:35:2a:6d:50:dc:a8:3b:e4:8e:2b:00:3a:03:85:ba:
         f0:44:79:5c:9e:c6:e2:2c:fa:21:51:b6:45:5c:d0:1d:cc:f7:
         b4:ef:10:fd:96:af:2d:c9:e4:ed:76:a8:2b:9c:94:b8:75:bc:
         3b:36:75:11:0f:5a:4a:49:a0:73:9f:9c:31:3b:52:54:a7:52:
         b8:62:6d:a5:b6:55:85:24:e8:53:97:89:5d:32:67:bc:8d:5b:
         92:38:9e:92:ce:e5:f3:61:a8:24:72:65:74:f2:34:c6:73:f4:
         91:ca:c6:d7:fe:0b:6b:6b:a8:4f:58:31:78:da:9a:ac:86:b8:
         cc:99:09:4c:84:86:e2:e0:5d:b3:05:d5:c0:e4:8f:8c:72:d8:
         08:bf:cb:95:02:b4:5b:a4:97:9f:07:34:91:b3:c4:cb:07:7a:
         76:08:78:5f:7f:38:97:27:37:fb:1e:14:2e:6b:dd:97:dc:19:
         53:b8:f6:ed:a5:cc:10:1e:b2:b5:9e:c9:aa:43:87:6c:b4:b7:
         53:07:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:21 2025 by rpki-client