Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/323830343a353239343a3a2f33322d3334203d3e20323638353237.roa
File:                     323830343a353239343a3a2f33322d3334203d3e20323638353237.roa (raw, json)
Hash identifier:          3rhRZ3ci1So+VWb4/uIQZXmENdtLlD+wQ0AfCRrk290=
Subject key identifier:   EB:E1:09:20:98:4B:80:CF:0A:1E:B4:05:19:40:53:13:5E:BF:27:A1
Certificate issuer:       /CN=1F8D9307D6B304785DFC33543D60E8337F616CCB
Certificate serial:       63C073250DC2E577B5DD5E72E5DF10A35BFB0076
Authority key identifier: 1F:8D:93:07:D6:B3:04:78:5D:FC:33:54:3D:60:E8:33:7F:61:6C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/323830343a353239343a3a2f33322d3334203d3e20323638353237.roa
Signing time:             Tue 01 Aug 2023 18:20:00 +0000
ROA not before:           Tue 01 Aug 2023 18:15:00 +0000
ROA not after:            Tue 30 Jul 2024 18:20:00 +0000
asID:                     268527
IP address blocks:        2804:5294::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:73:25:0d:c2:e5:77:b5:dd:5e:72:e5:df:10:a3:5b:fb:00:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8D9307D6B304785DFC33543D60E8337F616CCB
        Validity
            Not Before: Aug  1 18:15:00 2023 GMT
            Not After : Jul 30 18:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:80:12:ef:79:4d:ab:e8:d5:47:fb:83:e1:d4:
                    ac:9f:69:c6:58:95:ec:ea:24:d4:f9:3c:5c:74:14:
                    46:c4:bc:f0:63:8d:35:2b:56:8f:a8:f4:bc:e7:a2:
                    c2:ff:a9:35:d4:dd:05:fb:b7:f6:c8:f8:45:3e:31:
                    58:f1:e2:e4:42:ac:d6:fb:76:54:b6:22:a4:73:87:
                    a2:74:9e:8a:69:b6:c0:d6:a9:02:da:e6:54:de:d0:
                    4d:99:1d:f4:d8:fc:54:57:5d:26:c3:09:e8:9b:5f:
                    38:44:00:ff:e0:ee:bb:54:83:26:01:39:3e:65:a9:
                    67:18:b1:51:c2:ce:53:32:2c:a1:fa:44:18:73:66:
                    a3:da:49:00:2d:09:b2:1c:87:1e:b3:77:0a:72:f0:
                    66:6e:c8:53:2b:0b:41:33:c8:03:54:21:57:04:d4:
                    85:bf:cd:b5:a9:d6:48:9d:c5:8c:4d:0c:bb:9f:6c:
                    c4:50:f6:3e:82:1f:ec:ca:38:7f:03:20:23:a5:a5:
                    44:f1:0a:b4:d6:8d:27:d2:42:e1:7b:e8:4a:16:3c:
                    0e:37:99:84:50:c0:53:0b:9d:8b:93:40:e7:8f:6f:
                    7c:95:69:bd:d8:f3:9d:fc:6a:b8:69:11:77:32:5d:
                    31:a4:2d:a8:04:66:3d:b7:3f:3c:a9:72:16:d6:e1:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E1:09:20:98:4B:80:CF:0A:1E:B4:05:19:40:53:13:5E:BF:27:A1
            X509v3 Authority Key Identifier:
                keyid:1F:8D:93:07:D6:B3:04:78:5D:FC:33:54:3D:60:E8:33:7F:61:6C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/323830343a353239343a3a2f33322d3334203d3e20323638353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5294::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:77:ae:79:77:28:a5:f8:3b:39:8c:1e:45:9d:1d:98:8f:
         f7:be:b0:a7:7f:96:c8:56:6b:35:f6:0c:d5:80:58:d1:df:70:
         e7:da:51:2a:9d:76:25:a8:8c:79:2e:66:90:b8:45:13:44:bf:
         ed:c9:bd:fc:65:69:66:90:ae:63:6c:e0:d8:90:9f:2c:53:97:
         7f:c3:ee:24:30:5c:fe:a9:4d:2f:03:25:2a:6e:01:db:c6:87:
         3f:89:c2:0a:48:a0:06:5b:c8:d7:13:c3:21:6e:c3:bc:cb:08:
         24:36:b8:87:2f:0f:7f:aa:7b:a6:fd:a6:eb:05:f9:bd:ad:00:
         6f:20:1e:9e:82:ea:08:1b:20:de:60:fb:1e:67:5a:cc:7e:c4:
         34:ff:b5:39:7a:f7:6d:8f:23:2f:82:75:ea:b8:ed:bd:72:fb:
         09:97:61:cb:73:d7:a1:ae:fe:92:6f:60:b3:02:1c:16:9e:6a:
         0f:fa:58:19:16:68:6e:e0:7c:59:00:3f:fa:1f:5d:01:55:fd:
         cd:48:0f:70:7d:f7:e8:79:98:5d:7e:0e:ad:1f:31:8b:f5:96:
         68:21:6c:5d:b7:aa:36:c4:39:3d:ef:f9:36:13:59:eb:1d:19:
         53:8d:38:6e:91:77:97:0b:44:16:9d:74:52:40:6f:79:5b:14:
         a4:4d:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:14 2025 by rpki-client