Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33332d3333203d3e20323634353030.roa
File:                     323830343a323039383a383030303a3a2f33332d3333203d3e20323634353030.roa (raw, json)
Hash identifier:          trMjmYnWesa+uqx9D6he9PDnW8zI2sG07xL9TRGdnJI=
Subject key identifier:   4D:2D:FC:3A:99:FF:D6:68:02:EF:A4:1D:07:26:80:01:9B:EC:DD:D1
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       30EC770FBA348B5BF4CD18D9C520A3C814FF4800
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33332d3333203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:00 +0000
ROA not before:           Tue 30 Jul 2024 17:36:00 +0000
ROA not after:            Tue 29 Jul 2025 17:41:00 +0000
asID:                     264500
IP address blocks:        2804:2098:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:77:0f:ba:34:8b:5b:f4:cd:18:d9:c5:20:a3:c8:14:ff:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:00 2024 GMT
            Not After : Jul 29 17:41:00 2025 GMT
        Subject: CN=4D2DFC3A99FFD66802EFA41D072680019BECDDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:89:b8:eb:7f:65:71:63:df:30:a4:1b:26:
                    76:d2:39:ae:24:9d:60:9b:af:fe:d7:ec:20:b7:4c:
                    55:87:9d:c3:99:a8:03:41:e8:a3:43:47:de:33:69:
                    a0:ee:3a:1b:37:61:4d:60:66:2d:6d:66:5c:27:2e:
                    1c:9a:d3:e2:e7:d8:1c:9e:3a:e4:83:3e:25:ee:e0:
                    54:0b:fc:7f:88:2c:28:a2:9b:67:d1:d4:cf:95:0c:
                    74:ea:19:f1:1e:77:10:72:b9:a1:77:70:03:53:bd:
                    fc:e9:ff:ba:81:0f:02:b0:6d:3e:be:3e:0b:71:0b:
                    02:9e:22:18:77:8b:77:b3:ed:03:00:69:a1:2a:7d:
                    80:3f:85:c3:bb:4c:33:f1:db:dc:42:c7:b8:b7:14:
                    c0:29:86:5e:32:23:8a:29:5c:68:a8:ec:de:fb:c3:
                    9d:bf:ef:9a:ca:c1:33:84:f7:a9:86:ab:3c:6f:75:
                    9d:ba:c6:7c:2d:7a:cc:33:46:2c:3e:55:3a:c7:a0:
                    3e:e2:90:f8:86:df:da:60:7a:a3:36:8c:9b:3b:d5:
                    62:30:11:79:65:ac:59:94:34:d9:ca:bf:8e:3f:f8:
                    c2:67:80:04:d0:16:aa:99:c6:9b:9e:84:6d:4a:87:
                    d5:24:8a:5f:36:80:c5:89:ce:f5:14:e9:06:d0:46:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:FC:3A:99:FF:D6:68:02:EF:A4:1D:07:26:80:01:9B:EC:DD:D1
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33332d3333203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:2e:8b:46:fc:f1:c7:81:1d:e2:c9:a2:4c:4f:d4:5b:4d:b4:
         68:6c:06:98:79:ab:dd:26:09:bb:aa:8d:e3:19:37:f7:9c:52:
         9e:a2:4b:ae:e1:1f:d6:31:f0:a0:50:00:e1:97:38:f2:c8:c0:
         c1:54:cc:04:1e:2f:b7:f7:7f:26:01:8f:21:30:fd:dd:94:4e:
         e1:0e:7c:aa:38:14:5f:74:84:c5:b2:8d:99:af:fa:7b:d6:2d:
         97:94:b7:2a:e5:f3:bd:a9:70:93:ea:b5:be:24:1d:66:5f:74:
         dd:8a:5d:6a:29:be:e4:0c:b1:a6:30:e3:7a:63:95:44:d5:9f:
         4d:69:81:e2:dc:7f:a0:cc:db:52:90:cc:3c:4a:3c:db:8c:62:
         69:30:89:91:7f:c4:ce:07:96:41:b9:ee:16:04:96:c6:1a:9f:
         82:03:30:65:29:5a:53:c3:c3:bc:94:d5:0d:f1:37:68:6a:47:
         06:f5:4b:e0:ca:24:ec:c7:83:a4:1e:da:b5:4c:96:ab:c8:e6:
         47:53:3f:06:00:e4:82:cf:87:81:d2:75:18:71:3f:8a:c9:1d:
         c9:e9:60:cb:54:48:98:d0:ca:c2:fe:31:56:98:59:67:48:7d:
         a6:18:36:9f:06:76:55:45:1b:a5:46:58:f7:96:a6:f2:94:b6:
         5e:5f:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:21:46 2025 by rpki-client