Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f36382d3638203d3e20323733333039.roa
File:                     323830343a386337633a383130303a3a2f36382d3638203d3e20323733333039.roa (raw, json)
Hash identifier:          wUASKKTaSV1V2SMgMBM9G15CadEBUc4QI4jU0s8B9Lw=
Subject key identifier:   B0:83:E6:8B:03:8A:34:D0:F9:3B:60:A7:DF:93:91:79:C3:6C:BB:1F
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       1400F69709641DFEA55052D5DB5D6608106613D0
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f36382d3638203d3e20323733333039.roa
Signing time:             Thu 05 Dec 2024 19:11:37 +0000
ROA not before:           Thu 05 Dec 2024 19:06:37 +0000
ROA not after:            Thu 04 Dec 2025 19:11:37 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8100::/68 maxlen: 68
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:00:f6:97:09:64:1d:fe:a5:50:52:d5:db:5d:66:08:10:66:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Dec  5 19:06:37 2024 GMT
            Not After : Dec  4 19:11:37 2025 GMT
        Subject: CN=B083E68B038A34D0F93B60A7DF939179C36CBB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:04:c2:a6:81:ca:de:50:ce:0c:dd:03:01:
                    8f:36:0d:87:67:ab:f2:b3:c4:c7:30:b3:9d:f3:6c:
                    a6:5e:9f:5d:f3:9a:c5:bf:e8:32:c9:08:5d:3a:f7:
                    69:e5:a6:18:0f:c5:80:96:dd:25:f2:ea:4d:a1:03:
                    61:80:b2:76:50:ac:30:1e:a5:b2:80:a0:a5:4a:bc:
                    7f:5a:a6:c2:2e:48:c5:35:77:3f:9f:c8:0b:7b:5f:
                    3d:4f:db:ae:c5:3c:c3:7a:cc:b6:93:0d:7c:3d:fe:
                    a6:2e:2c:b5:6d:90:e7:dc:49:ed:6d:13:c4:40:b3:
                    60:00:7a:aa:a9:b5:f2:99:23:45:e8:ff:0b:56:23:
                    5d:c8:17:bd:2f:6d:76:f1:56:10:d0:cb:92:88:27:
                    c5:d5:4d:c2:ae:00:14:bc:7e:34:b1:fb:62:80:cd:
                    b8:8d:13:3d:4a:39:c3:14:d4:ee:45:17:3f:cc:6e:
                    d0:07:9f:63:80:db:0f:7f:b6:cb:dd:37:d1:56:fd:
                    91:75:4e:90:01:35:ad:e4:eb:ac:63:26:ff:e7:f8:
                    e4:ed:28:b5:a2:5c:bb:0d:7b:c5:df:c4:02:5b:bf:
                    d6:69:0b:f4:d3:95:dd:cb:ce:5c:81:05:56:38:07:
                    7b:7e:cb:aa:cb:56:82:4b:b5:ba:2a:a3:1d:28:9a:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:E6:8B:03:8A:34:D0:F9:3B:60:A7:DF:93:91:79:C3:6C:BB:1F
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f36382d3638203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8100::/68

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:a7:5d:fc:c4:fe:97:5c:0a:50:70:e2:93:b8:2c:e3:70:
         a1:40:89:4c:71:93:e6:47:71:7d:a3:75:44:ec:8a:93:3b:b0:
         dc:e7:01:d9:ef:c4:60:c6:da:d5:1c:1b:d9:cf:06:14:30:17:
         cf:a4:a3:7e:be:bf:4e:bb:6b:f7:65:d4:c6:4f:fa:5f:f0:1b:
         82:f5:ea:19:3b:bd:e6:86:64:8e:5e:45:64:47:0d:c0:32:dd:
         bf:a3:ce:20:3a:7a:58:03:a7:27:a0:ca:89:2f:57:d9:71:37:
         23:ea:d7:06:c0:6b:da:70:68:ac:17:b7:e7:0f:91:b0:e5:cb:
         00:11:ec:86:80:3d:79:3c:71:73:3d:ba:f9:b4:70:64:b9:50:
         c1:38:74:de:ad:04:72:69:04:5c:8d:da:8c:43:ba:46:03:fb:
         ec:06:e8:1c:25:87:f0:66:dd:dc:04:91:fc:b8:08:75:b8:bf:
         e5:b2:59:6c:f0:ac:47:7b:ec:06:a8:e3:54:50:a5:28:1a:24:
         4e:4f:cf:55:b3:48:c0:6d:ea:98:d4:c8:f0:a0:33:24:72:65:
         60:13:a3:72:7b:43:3c:c6:ef:4b:7f:f8:eb:0f:a0:9b:ba:90:
         ff:1b:0e:82:bc:ed:33:06:6d:0a:d7:2c:48:78:e4:18:0a:a1:
         bd:0c:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:33:40 2025 by rpki-client