Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa
File:                     323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa (raw, json)
Hash identifier:          I2Z+kmzMU5LbYXkwmdXGXhBycPWJdbYgjCeBrnv4G8Y=
Subject key identifier:   CA:21:64:EA:A0:CB:64:01:9D:F8:17:C4:8C:13:0A:45:65:C1:6C:1D
Certificate issuer:       /CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Certificate serial:       731B2E9EA905DA1BAE9E2F9B1A4F179CF7E5CA5C
Authority key identifier: E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa
Signing time:             Sat 15 Apr 2023 22:19:05 +0000
ROA not before:           Sat 15 Apr 2023 22:14:05 +0000
ROA not after:            Sat 13 Apr 2024 22:19:05 +0000
asID:                     270256
IP address blocks:        2804:6938:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1b:2e:9e:a9:05:da:1b:ae:9e:2f:9b:1a:4f:17:9c:f7:e5:ca:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
        Validity
            Not Before: Apr 15 22:14:05 2023 GMT
            Not After : Apr 13 22:19:05 2024 GMT
        Subject: CN=CA2164EAA0CB64019DF817C48C130A4565C16C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:56:75:73:01:4b:30:17:b8:7f:99:c0:be:
                    ff:21:ac:7c:33:51:84:11:2b:c0:f8:cf:b3:3d:06:
                    d2:22:31:22:8b:82:46:29:f6:18:0a:8c:e9:72:6f:
                    83:d0:a4:e5:a2:10:be:ea:00:48:ca:cf:00:3e:1c:
                    59:09:8c:18:38:d0:ea:e3:d1:13:82:bf:e9:8a:45:
                    75:51:cd:ab:19:a6:3e:4a:66:01:a0:33:1a:e3:b5:
                    d9:ad:8f:30:2d:e0:11:cd:a8:38:7e:bf:5d:99:e4:
                    9c:50:8c:c6:de:62:fb:69:42:b1:ea:78:c5:5f:b9:
                    29:25:6b:17:6b:4f:ee:08:14:36:e7:75:14:50:1d:
                    69:57:51:f0:74:aa:94:f8:46:41:b0:cf:ba:ab:da:
                    55:90:df:00:21:df:9e:35:18:11:c4:56:11:b1:2e:
                    61:81:c6:b2:60:7a:52:c5:3d:7b:19:77:90:9a:71:
                    59:c6:fb:8d:25:b5:c9:80:88:b7:91:65:f5:3e:66:
                    8a:a7:b0:9d:52:c5:c5:b2:b9:03:15:9b:45:ba:f3:
                    cf:8f:9b:96:4b:de:ea:e8:86:62:cf:b4:05:9a:5d:
                    80:5a:b9:3f:e9:27:0c:03:4c:15:30:38:cf:aa:72:
                    f5:0a:67:13:f3:87:f7:41:d1:49:b8:86:e2:cf:d0:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:64:EA:A0:CB:64:01:9D:F8:17:C4:8C:13:0A:45:65:C1:6C:1D
            X509v3 Authority Key Identifier:
                keyid:E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6938:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:25:32:89:40:0b:6e:49:69:c4:08:23:ed:16:ab:bd:ec:
         61:0a:62:78:b0:14:31:5b:d0:01:1e:2e:af:9c:65:6d:1d:01:
         75:63:35:31:4d:a3:c8:95:2f:e3:fb:8d:4d:af:a1:5f:fc:1d:
         37:1e:e0:a7:f7:56:ea:f9:2d:b0:d1:eb:e6:a0:37:17:ee:ac:
         75:92:b5:c2:1d:bf:4a:b8:14:96:24:b0:9d:01:15:5b:15:00:
         02:9a:90:81:d8:66:b2:f1:61:f1:f4:8f:b3:7d:b4:f3:10:1b:
         29:b7:c1:07:fc:c5:f9:5d:54:60:99:ec:c9:e8:2d:5b:71:1c:
         3f:4b:f5:3f:f8:46:a0:ff:3b:ec:9e:6b:c8:79:e9:fe:3b:f5:
         e9:e4:ec:22:5e:bd:fb:53:cb:10:5a:a3:26:30:06:36:76:18:
         fb:e0:35:cc:d9:44:11:5e:5f:55:59:b1:ab:7d:50:4e:07:e5:
         cd:6e:d2:c2:34:83:31:0a:63:2a:b2:a6:58:f6:fa:e7:19:58:
         f3:b6:05:30:5a:31:a9:f8:cf:8e:a2:80:cf:43:a7:12:cd:2f:
         69:2b:57:21:24:ea:1f:70:1a:d9:e1:c6:62:74:6f:03:36:e9:
         b3:69:1a:d5:ad:e1:35:0e:5a:37:a1:d0:88:35:9c:50:03:08:
         d4:0e:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:35 2025 by rpki-client