Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653833303a3a2f34342d3434203d3e203238323630.roa
File:                     323830343a323865343a653833303a3a2f34342d3434203d3e203238323630.roa (raw, json)
Hash identifier:          duMqLWBYK9UlwCibnToFKED5WBpWCkAjA972j7FHC4Q=
Subject key identifier:   B7:76:80:16:47:63:27:C5:7C:6C:21:2C:87:14:FB:3F:94:60:A9:ED
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       185F17187BBC3332EE59E31A1C9868CF0B7FC71C
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653833303a3a2f34342d3434203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:53 +0000
ROA not before:           Thu 09 Mar 2023 20:12:53 +0000
ROA not after:            Thu 07 Mar 2024 20:17:53 +0000
asID:                     28260
IP address blocks:        2804:28e4:e830::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5f:17:18:7b:bc:33:32:ee:59:e3:1a:1c:98:68:cf:0b:7f:c7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:53 2023 GMT
            Not After : Mar  7 20:17:53 2024 GMT
        Subject: CN=B7768016476327C57C6C212C8714FB3F9460A9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:08:db:ad:b7:67:ad:b3:1e:fc:a2:67:40:
                    27:77:ac:f5:42:1d:07:f5:73:dc:fb:5f:a0:c6:cd:
                    b2:39:f4:be:8a:2b:8c:94:0c:7e:a5:d8:f8:83:61:
                    69:f9:02:da:c6:b0:f0:f9:20:14:66:55:ab:c9:61:
                    78:7a:dd:e1:c1:f2:5d:ed:cf:0d:7f:38:06:a0:23:
                    78:8a:50:a9:80:17:3d:98:40:8f:99:9d:b7:f4:e7:
                    e0:1b:e1:9b:d7:13:34:79:fa:57:bd:47:9b:54:6e:
                    7e:68:ad:a8:c2:fd:67:64:cb:7d:61:18:f0:9d:8d:
                    52:00:90:57:aa:5a:c2:7d:f6:ad:f4:e9:76:5c:cd:
                    d6:3f:4b:a3:cc:fa:72:f0:16:ec:bc:32:62:3f:1c:
                    d1:6b:3f:62:f6:3d:ec:73:3a:b9:ef:05:3c:22:b6:
                    58:54:2d:fd:75:b8:7b:19:32:b4:f0:90:5b:e0:f3:
                    03:36:b7:59:3b:62:ee:f9:9c:7a:24:2c:4e:4d:99:
                    35:01:5c:94:29:96:d0:d1:3b:e7:a3:bb:82:31:ac:
                    ee:1d:c3:cd:d9:99:9e:a9:4a:ef:37:2d:5d:c0:39:
                    f5:3b:d3:b9:b3:11:dd:b5:75:db:7c:03:20:9c:e1:
                    05:42:47:3b:64:b8:0e:7a:ce:7d:20:ba:8e:0b:e9:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:76:80:16:47:63:27:C5:7C:6C:21:2C:87:14:FB:3F:94:60:A9:ED
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653833303a3a2f34342d3434203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e830::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:be:c5:60:3a:6a:9c:1d:d5:39:c6:6b:b0:73:e2:38:71:
         a6:39:06:60:ee:57:79:74:eb:66:72:e4:1a:09:37:b1:2e:7c:
         f3:45:85:b4:a1:27:22:a5:f4:17:5a:90:fb:27:84:35:0c:42:
         4c:66:e3:e8:df:b5:f9:d9:44:29:32:80:25:1c:d0:29:e1:75:
         c6:d8:a6:2a:15:8b:4b:2e:94:6f:ff:a6:12:f6:85:7e:ac:0a:
         14:ae:72:dc:0a:c3:25:b5:99:59:24:62:27:c4:ad:38:5a:03:
         aa:60:08:87:54:c7:95:24:cb:b5:eb:dd:c1:1d:a6:23:48:7b:
         9e:7c:dc:a9:33:70:dc:0d:fc:9f:95:27:25:3b:cd:41:b9:5b:
         4e:c0:6e:ae:09:da:ff:a9:61:c1:1f:a4:8d:5f:04:cc:d5:af:
         05:be:f2:da:97:c1:78:f1:95:ed:50:2c:72:0e:e3:f6:b2:d7:
         7b:59:2f:00:9a:cd:d9:d6:2a:8a:11:06:0a:ed:22:64:1a:85:
         51:32:20:bd:8c:2d:54:19:5f:27:6c:48:cf:1f:48:3a:d7:63:
         80:26:f7:80:56:1d:c8:77:59:7f:8c:48:7f:de:ea:25:46:58:
         ac:e4:70:50:30:57:99:bc:d1:f6:7e:01:bf:14:0a:aa:30:00:
         02:d8:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:34 2025 by rpki-client