Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/323830343a383031383a3a2f33322d3332203d3e20323731373239.roa
File:                     323830343a383031383a3a2f33322d3332203d3e20323731373239.roa (raw, json)
Hash identifier:          1MRBOgu1ouflfZVIKpl4MhHZ7o1q6zl3dtQabePlYVk=
Subject key identifier:   24:29:8D:A2:1F:C4:37:A1:E1:7C:DD:A0:54:DF:6F:0E:12:11:E9:65
Certificate issuer:       /CN=67B2664D2E6E96D73A15D705B531D2A7386AF888
Certificate serial:       4D7BF6DB8088FE7BF672E58DD0EFAE5DC187F8B2
Authority key identifier: 67:B2:66:4D:2E:6E:96:D7:3A:15:D7:05:B5:31:D2:A7:38:6A:F8:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/323830343a383031383a3a2f33322d3332203d3e20323731373239.roa
Signing time:             Mon 11 Sep 2023 19:05:30 +0000
ROA not before:           Mon 11 Sep 2023 19:00:30 +0000
ROA not after:            Mon 09 Sep 2024 19:05:30 +0000
asID:                     271729
IP address blocks:        2804:8018::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7b:f6:db:80:88:fe:7b:f6:72:e5:8d:d0:ef:ae:5d:c1:87:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B2664D2E6E96D73A15D705B531D2A7386AF888
        Validity
            Not Before: Sep 11 19:00:30 2023 GMT
            Not After : Sep  9 19:05:30 2024 GMT
        Subject: CN=24298DA21FC437A1E17CDDA054DF6F0E1211E965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:01:c8:24:3f:65:a7:46:75:af:8a:b8:da:
                    35:e3:aa:12:57:32:a6:14:66:d2:af:13:63:67:67:
                    73:6d:4f:6c:da:39:08:ff:63:4b:18:2b:fe:20:b3:
                    4d:8d:f3:5a:c8:57:51:56:f0:eb:39:8a:67:e0:66:
                    21:b4:41:e6:ed:59:a9:96:87:51:73:88:56:d0:de:
                    65:ff:c9:9b:c0:c2:a7:bd:b7:05:75:64:92:4a:f8:
                    22:24:2c:44:92:03:81:8b:14:9d:02:72:2e:9f:02:
                    fe:49:cd:1a:b8:42:e0:bc:f4:6b:95:ed:6e:db:1f:
                    b0:0e:96:e6:4f:a8:45:02:8e:8b:b8:ea:1e:6a:e4:
                    8c:4a:d2:6b:77:95:41:73:ab:2f:d8:2a:fe:a3:5b:
                    a5:ec:ce:6f:74:82:22:4c:c9:65:8c:1a:71:73:64:
                    85:90:c6:e6:21:4d:d9:e5:4e:9b:1b:14:cc:06:ba:
                    3a:ed:99:36:e6:9d:8b:0b:e2:2a:9e:72:5c:26:5f:
                    15:7b:ad:66:2c:a4:c1:13:5b:28:bd:58:a7:26:a7:
                    c5:ac:b6:ec:ab:45:25:1d:63:31:46:b0:a7:71:9a:
                    59:5f:19:b8:aa:c8:dd:17:6c:c2:7c:68:f8:38:6c:
                    85:13:44:3c:23:50:2a:a3:ed:35:48:2e:3e:e7:70:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:8D:A2:1F:C4:37:A1:E1:7C:DD:A0:54:DF:6F:0E:12:11:E9:65
            X509v3 Authority Key Identifier:
                keyid:67:B2:66:4D:2E:6E:96:D7:3A:15:D7:05:B5:31:D2:A7:38:6A:F8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/323830343a383031383a3a2f33322d3332203d3e20323731373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8018::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:ce:05:f1:e2:82:3c:3a:ff:d4:70:bc:3e:5a:26:58:33:
         9d:ab:e7:ed:b8:02:57:d5:b0:b6:a4:0e:7b:f8:51:c0:3f:f0:
         0e:02:82:d1:60:8e:4a:44:61:78:49:a7:77:31:ee:cc:5d:2c:
         18:48:32:7d:b0:08:e2:c4:b1:e8:37:0d:d8:32:96:47:c7:92:
         eb:f8:04:eb:16:a9:8a:10:76:fb:dc:4b:1b:21:f4:c2:46:db:
         ed:7c:d6:a2:7b:66:02:74:c7:90:27:de:85:c2:93:38:db:41:
         ae:d9:62:d1:0b:73:f3:4d:82:ee:e8:b5:73:21:e0:9c:41:25:
         27:49:70:df:38:15:36:01:fe:08:1c:51:55:83:3e:69:a9:97:
         3c:b5:8c:75:f8:c9:c5:7e:1a:87:1a:3d:b4:6c:2a:0a:86:05:
         0c:69:98:9b:66:01:a0:92:84:62:ce:8b:43:cc:60:cb:4c:85:
         52:63:2a:7d:b5:65:36:89:39:73:05:1f:c3:db:c9:40:10:d7:
         c0:ca:e7:54:b6:7d:73:ff:02:77:f5:da:f9:36:2c:c9:62:c0:
         6a:d0:aa:7d:99:12:15:e0:fd:c5:70:d9:0f:65:16:f9:10:47:
         f7:05:e9:e8:13:a2:07:f7:d8:e4:0d:61:be:db:1c:6a:b1:c9:
         55:06:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:43 2025 by rpki-client