Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
File:                     323830343a313431633a3a2f33322d313238203d3e203533313330.roa (raw, json)
Hash identifier:          kk3gE2U4wIag+/HDvfsbTt6rF6+u6OIACmTLO6KE2bA=
Subject key identifier:   A4:C5:0E:B3:BD:F3:8B:79:B5:A0:AD:C0:D3:35:B1:EE:1E:D3:4D:DB
Certificate issuer:       /CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
Certificate serial:       53DB231696A7405EF296B188E0256BC54DE30503
Authority key identifier: 6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
Signing time:             Thu 24 Aug 2023 15:04:58 +0000
ROA not before:           Thu 24 Aug 2023 14:59:58 +0000
ROA not after:            Thu 22 Aug 2024 15:04:58 +0000
asID:                     53130
IP address blocks:        2804:141c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:db:23:16:96:a7:40:5e:f2:96:b1:88:e0:25:6b:c5:4d:e3:05:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
        Validity
            Not Before: Aug 24 14:59:58 2023 GMT
            Not After : Aug 22 15:04:58 2024 GMT
        Subject: CN=A4C50EB3BDF38B79B5A0ADC0D335B1EE1ED34DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:08:f4:1b:03:41:9c:7e:e2:96:76:62:8a:
                    09:e3:f7:3e:b9:d0:00:cd:3a:42:d3:65:02:c7:04:
                    a7:37:dc:84:a8:ac:56:cc:5b:37:81:98:14:bf:2a:
                    db:18:52:2d:20:65:6a:2e:cb:dd:64:94:6b:ff:8a:
                    ee:3d:14:6d:ec:1e:ee:06:92:64:2a:54:42:c8:15:
                    5d:20:79:61:62:f8:34:b1:82:f3:37:b1:9f:0b:fc:
                    a2:30:15:37:62:c9:14:35:d3:04:d8:e8:da:c1:d9:
                    a0:a3:e5:6a:0d:84:29:5c:16:ac:83:f3:06:81:95:
                    fa:56:4f:08:18:50:ea:1b:e3:f4:6f:ac:7b:c3:16:
                    d2:a1:e8:9b:3f:25:98:5f:09:2c:48:c7:31:38:a1:
                    34:cd:c4:83:61:bd:f3:b3:e7:69:2e:7e:55:0d:0a:
                    35:5c:0d:84:ba:bf:b8:07:43:c5:e8:fa:e5:4c:94:
                    bf:49:d1:d5:28:e9:c8:4b:36:a0:3c:b2:df:7d:f9:
                    a8:f3:54:b9:80:02:39:89:e8:78:3a:84:76:77:e3:
                    b9:dd:4b:44:22:64:c1:24:a5:91:2a:b6:77:3c:15:
                    9d:a6:69:83:0d:63:22:41:58:fc:9d:17:cd:ed:ee:
                    0f:f1:6d:fd:5a:5c:39:37:e6:ae:a3:5b:29:bd:05:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C5:0E:B3:BD:F3:8B:79:B5:A0:AD:C0:D3:35:B1:EE:1E:D3:4D:DB
            X509v3 Authority Key Identifier:
                keyid:6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/323830343a313431633a3a2f33322d313238203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:141c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:9b:4e:ec:8c:ac:84:e3:c9:d6:24:7e:81:25:09:d1:0c:29:
         5a:c8:40:39:50:30:88:97:63:0d:c7:98:e9:d9:d4:69:fe:8e:
         70:8c:db:24:5e:42:20:2b:0c:87:fd:d2:89:65:ba:ec:26:00:
         b0:df:7e:38:62:3b:11:e6:bc:1e:15:4b:d3:b1:8a:e3:ca:4c:
         39:8b:92:4f:47:cb:93:f8:59:2e:87:fd:a6:1e:20:ba:08:85:
         e3:55:7d:db:d7:a8:a7:6b:93:2f:7e:0b:29:28:66:6f:7b:cb:
         2c:9a:94:b9:bf:1c:4a:58:a1:1d:8d:0f:c1:64:6f:93:14:9f:
         9c:e4:cd:68:1b:5c:22:40:90:19:29:69:fe:77:64:41:4e:84:
         39:a1:79:7f:dd:52:d4:a4:b4:c0:6a:02:82:e1:da:ba:c1:0f:
         7e:33:00:dc:5b:8a:ec:1a:90:81:27:58:8c:2d:ca:29:d3:a0:
         e2:0f:8d:ba:f5:5a:fa:71:0c:3d:81:ac:44:fc:bc:a2:35:c6:
         f6:da:9b:bc:1a:64:44:a6:84:b4:2f:7d:d4:74:9f:65:10:3e:
         f9:e3:bb:a3:e8:e0:7c:bb:d0:5c:e7:53:00:c3:4c:5f:ff:f9:
         06:9b:96:6f:2f:3b:89:c6:a7:75:5e:aa:59:79:f0:78:a2:58:
         3f:f5:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:44 2025 by rpki-client