Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33352d3335203d3e20323634353030.roa
File:                     323830343a323039383a383030303a3a2f33352d3335203d3e20323634353030.roa (raw, json)
Hash identifier:          cx+hSJ9VHm4YHnw7ofqQXhK2JLVEofZgdBs/xWHWlEo=
Subject key identifier:   04:3D:86:53:82:AB:36:8F:FC:32:51:7F:18:40:05:78:98:0F:1F:7C
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       7841AAD372E5512453A4489F06EA3A67CAAEB30F
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33352d3335203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:48:45 +0000
ROA not before:           Tue 30 Jul 2024 17:43:45 +0000
ROA not after:            Tue 29 Jul 2025 17:48:45 +0000
asID:                     264500
IP address blocks:        2804:2098:8000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:41:aa:d3:72:e5:51:24:53:a4:48:9f:06:ea:3a:67:ca:ae:b3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:43:45 2024 GMT
            Not After : Jul 29 17:48:45 2025 GMT
        Subject: CN=043D865382AB368FFC32517F18400578980F1F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:71:a2:ca:5b:5a:c2:e9:38:45:63:75:bc:
                    80:bb:e4:2c:dc:c6:35:70:38:57:45:52:9f:48:66:
                    5c:bc:c2:8a:eb:01:f5:a5:53:08:9c:84:dd:c0:50:
                    bc:c0:3f:ca:9c:93:77:71:bc:a3:88:0d:1e:6d:34:
                    f4:ec:d1:c3:c6:8b:a3:70:88:8b:c0:12:83:60:ec:
                    98:40:9b:77:b5:31:50:71:4a:fd:d4:f4:93:f1:b7:
                    ee:84:58:c6:3f:e7:59:aa:b8:33:02:a3:2d:58:37:
                    99:07:74:3f:59:a1:f3:41:88:dd:6c:9d:57:43:35:
                    fd:9a:de:c1:3d:7e:b7:0a:90:6e:0c:7a:8c:cd:a9:
                    23:17:0a:a4:e9:fa:f2:c7:6c:78:69:56:e8:d9:32:
                    69:33:23:78:93:f4:59:9a:6f:8c:68:e3:ff:93:fd:
                    c9:87:1e:ce:63:09:b3:12:a9:84:ad:73:7a:22:c4:
                    46:b4:6e:97:53:25:1d:49:61:98:31:0b:71:5d:c2:
                    a9:07:e6:7d:58:96:33:6a:60:a3:fc:68:2b:f1:15:
                    72:17:62:51:a6:37:e0:7a:97:52:a7:e2:be:03:89:
                    75:63:d5:3d:9c:70:b6:b2:bf:28:19:ad:1c:33:8b:
                    ea:bd:8c:d6:90:9d:4b:97:5e:c5:db:66:ce:d3:92:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3D:86:53:82:AB:36:8F:FC:32:51:7F:18:40:05:78:98:0F:1F:7C
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33352d3335203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c8:1b:35:19:78:65:70:6f:52:6a:41:cb:8e:8d:e7:72:ff:c3:
         a4:00:01:48:1c:7c:d2:70:e1:d1:95:f7:a5:8e:c4:a7:d2:9f:
         20:95:44:08:08:5d:75:81:66:bd:f5:10:be:01:5c:f0:75:b4:
         96:a4:42:fe:a4:8e:c0:3b:dd:02:62:5e:a2:8c:25:5c:3c:40:
         34:7f:fa:9d:98:62:31:ce:95:2b:39:af:74:60:95:d0:06:37:
         fc:fe:3f:f3:7a:c1:a5:b9:62:0f:35:e9:56:50:3a:07:49:63:
         f9:e6:b8:a9:d4:b7:14:9a:e8:2a:e5:31:00:0e:a6:e4:12:fe:
         c4:c5:d5:ce:73:a9:1c:d1:4e:ee:d2:1e:a0:cc:c6:14:41:ed:
         f6:19:4f:88:32:3f:ce:9c:1d:e0:bd:c2:32:83:e8:ad:db:04:
         9f:49:58:a2:8c:68:30:db:27:32:bc:57:2f:b5:ea:53:88:6d:
         18:db:56:66:89:bf:ab:75:99:1d:79:b6:ea:87:a9:af:c1:17:
         04:e2:a7:d4:7d:2e:46:72:b1:7a:e6:35:e7:9d:fe:88:e9:63:
         29:c2:07:4a:32:25:a0:5c:04:e9:d5:e0:8b:6e:46:af:92:43:
         0c:0a:7b:da:15:32:b0:50:b1:30:63:64:89:4b:d7:42:06:40:
         55:00:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:02 2025 by rpki-client