Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a3a2f33322d3332203d3e20323639333931.roa
File:                     323830343a363365383a3a2f33322d3332203d3e20323639333931.roa (raw, json)
Hash identifier:          HkB1IlI8o2t3OW/+aMZtlD9qlkR5nmPrAbRtC1xt7YA=
Subject key identifier:   7F:7B:C6:A2:83:3F:8A:6C:B2:3F:30:18:DC:32:AD:08:03:E8:20:72
Certificate issuer:       /CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Certificate serial:       386EB93C3E72DAC581A4F4B287DC51C904031D5D
Authority key identifier: 5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a3a2f33322d3332203d3e20323639333931.roa
Signing time:             Wed 05 Apr 2023 19:54:43 +0000
ROA not before:           Wed 05 Apr 2023 19:49:43 +0000
ROA not after:            Wed 03 Apr 2024 19:54:43 +0000
asID:                     269391
IP address blocks:        2804:63e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:b9:3c:3e:72:da:c5:81:a4:f4:b2:87:dc:51:c9:04:03:1d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
        Validity
            Not Before: Apr  5 19:49:43 2023 GMT
            Not After : Apr  3 19:54:43 2024 GMT
        Subject: CN=7F7BC6A2833F8A6CB23F3018DC32AD0803E82072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:c8:75:2d:b0:ac:fc:40:d7:44:97:13:ae:
                    ba:c4:1f:d5:8f:a9:e8:be:20:0f:2c:aa:b2:0d:c9:
                    92:ae:28:30:13:7d:84:f6:ad:3a:1f:34:c9:73:e1:
                    65:f0:36:1e:b8:f6:b5:98:c1:59:b9:e1:e9:6c:45:
                    21:55:4a:71:17:24:85:2a:60:13:de:49:67:ed:4f:
                    96:d5:0a:bd:03:00:a2:3f:03:40:4e:dd:85:d1:eb:
                    03:f9:c5:31:8b:e9:4e:6e:c6:d1:88:29:8d:36:fa:
                    61:57:54:b6:ba:d1:d6:df:b1:b6:d9:a3:a4:76:73:
                    cb:5e:31:aa:17:13:02:96:12:e9:83:ca:9c:54:b9:
                    84:28:1b:cc:1c:83:d5:30:fe:80:d8:f0:5a:08:72:
                    79:18:99:4f:c8:07:d6:ff:bd:13:86:36:6e:f2:6b:
                    b9:01:02:55:74:14:78:e0:b1:4a:64:32:41:21:72:
                    29:08:a3:37:a6:db:1a:cc:06:29:08:be:c9:c7:88:
                    8f:6a:05:94:ba:d0:ba:ae:74:d0:c4:31:87:d0:56:
                    26:f4:04:25:61:fd:21:a6:bc:85:95:3d:62:c0:1a:
                    59:7c:cd:46:0f:f8:8d:b9:4c:d4:9c:25:70:8b:26:
                    1b:69:a1:01:2e:d6:80:ce:70:dc:ca:1e:35:a0:f8:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7B:C6:A2:83:3F:8A:6C:B2:3F:30:18:DC:32:AD:08:03:E8:20:72
            X509v3 Authority Key Identifier:
                keyid:5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a3a2f33322d3332203d3e20323639333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:3d:6c:0f:58:24:5d:61:07:dc:9d:4a:50:9a:86:76:f2:
         d2:e2:79:29:f3:04:57:0a:73:d5:b2:81:e4:10:1c:0c:bb:c3:
         26:df:59:84:3c:6d:81:22:92:b7:dd:9f:24:4f:30:0f:f9:52:
         8b:07:33:fe:5f:a5:b9:a8:21:0e:c7:5a:65:d0:5d:41:08:e1:
         80:29:bf:2f:81:06:c7:85:8f:34:87:ef:b2:18:4a:1f:7b:cc:
         21:e5:16:4c:40:3d:4b:9f:e5:db:4f:b3:b5:a8:74:d4:18:57:
         0d:78:4a:00:24:d2:2f:51:b0:8c:67:f4:da:69:41:be:54:96:
         6f:73:53:56:14:ef:ae:17:f1:6c:62:3a:3c:2f:87:ff:40:5d:
         95:7b:f1:0a:20:b4:7b:97:1a:e2:2c:72:07:d2:10:34:49:ee:
         4b:93:89:ae:8c:e5:34:f8:ff:c8:ba:1d:ff:f5:4f:21:af:85:
         f3:b2:fd:f7:bf:12:9c:91:8d:df:ca:b0:90:8e:8c:5f:67:96:
         ab:84:7d:1b:86:6c:59:0b:ca:50:7b:a4:cf:c2:8b:b0:6e:2a:
         1f:03:c3:2e:2a:62:11:a9:d9:e3:8d:a0:e0:23:e9:72:6a:f3:
         48:f2:88:f5:63:75:cf:10:ee:8d:10:7f:c6:9c:49:e1:4f:8b:
         50:02:12:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:27 2025 by rpki-client