Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a383030303a3a2f33342d3334203d3e20323638393931.roa
File:                     323830343a356463343a383030303a3a2f33342d3334203d3e20323638393931.roa (raw, json)
Hash identifier:          4JdqtVnuT2428Bvb/B1hag074ZhbM8LYOOGAPOW7MF0=
Subject key identifier:   28:CA:7F:1F:8B:6E:5D:7B:71:A1:1F:2C:DF:8C:51:57:81:6C:6C:39
Certificate issuer:       /CN=93073D69667BA705C8AE7B577FDD18FB85987CAA
Certificate serial:       26BC912B7214BE248DD0C4513E62CF93E40002CB
Authority key identifier: 93:07:3D:69:66:7B:A7:05:C8:AE:7B:57:7F:DD:18:FB:85:98:7C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a383030303a3a2f33342d3334203d3e20323638393931.roa
Signing time:             Thu 19 Oct 2023 13:14:35 +0000
ROA not before:           Thu 19 Oct 2023 13:09:35 +0000
ROA not after:            Thu 17 Oct 2024 13:14:35 +0000
asID:                     268991
IP address blocks:        2804:5dc4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:91:2b:72:14:be:24:8d:d0:c4:51:3e:62:cf:93:e4:00:02:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93073D69667BA705C8AE7B577FDD18FB85987CAA
        Validity
            Not Before: Oct 19 13:09:35 2023 GMT
            Not After : Oct 17 13:14:35 2024 GMT
        Subject: CN=28CA7F1F8B6E5D7B71A11F2CDF8C5157816C6C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:8f:55:ce:ec:36:58:b7:8c:1d:ef:c5:b5:
                    c4:7c:20:d4:7f:1a:bc:45:48:49:e4:81:76:72:43:
                    3f:ef:2f:a9:55:3a:85:4a:05:8e:f0:40:1e:f0:26:
                    ad:e8:a1:9d:e9:fd:5b:62:a6:f3:bf:f0:0f:d0:0b:
                    a2:72:6e:c9:f3:f9:c6:0a:98:14:15:97:b6:ba:6d:
                    60:70:d5:19:3c:64:3f:46:65:2e:86:5a:e6:e0:eb:
                    4b:b6:73:70:48:21:7a:38:ba:31:1c:6c:f5:82:ad:
                    4f:95:29:f9:95:ff:23:59:04:91:75:c4:3a:d8:63:
                    33:7c:83:b0:71:34:b3:a5:26:81:65:9e:c4:59:72:
                    a5:fc:7e:41:50:75:4a:98:71:6b:f5:57:06:22:0f:
                    88:35:26:e2:e3:8e:39:77:d8:da:dd:c8:bd:bc:f8:
                    82:b1:50:08:4b:e7:d9:21:96:c1:9d:43:f3:33:75:
                    13:7b:15:1c:b2:2d:97:73:9b:90:22:7f:ab:36:b2:
                    ee:81:ae:05:3f:2b:07:a3:8a:ec:14:02:9f:b3:5e:
                    52:14:0f:1c:f2:95:4a:b0:33:1a:67:7c:5a:39:d2:
                    cc:3c:9e:ee:16:a9:6c:b2:fb:af:67:e8:06:13:c5:
                    91:70:e1:1d:be:c0:0a:04:0a:9b:8c:b0:7f:be:e7:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CA:7F:1F:8B:6E:5D:7B:71:A1:1F:2C:DF:8C:51:57:81:6C:6C:39
            X509v3 Authority Key Identifier:
                keyid:93:07:3D:69:66:7B:A7:05:C8:AE:7B:57:7F:DD:18:FB:85:98:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a383030303a3a2f33342d3334203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dc4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:0f:9a:9e:5a:da:8f:cb:47:6c:80:10:03:00:a8:01:eb:
         c6:48:7f:14:94:e7:d7:f4:32:96:b1:a0:ac:2f:42:ee:78:57:
         4c:cf:8a:85:dd:0c:5c:82:2d:3f:c9:b4:14:0a:0a:df:7e:53:
         33:67:41:cb:46:1f:c4:18:d1:dc:2b:b9:b0:a6:08:41:99:f8:
         74:90:23:10:c1:eb:19:03:22:80:78:be:e4:c4:f0:4e:7a:3a:
         57:d0:4e:3f:36:e8:6a:ef:b7:d2:00:2b:7e:4f:a7:1b:76:f0:
         5e:1f:17:68:82:65:d3:c7:d4:80:68:19:91:c0:1c:af:dc:a1:
         29:84:3a:56:09:4f:58:82:c4:41:97:b7:e8:97:ec:ff:d2:80:
         10:b3:a8:bc:40:e5:6e:9a:77:71:f4:db:ca:03:39:e6:65:73:
         6b:04:07:be:08:55:05:41:92:7a:1d:f3:88:4b:ed:17:db:03:
         c2:09:45:e1:15:bb:16:13:a3:46:d0:bc:74:5e:55:15:36:7b:
         a9:a5:7c:11:75:b2:ef:e7:20:00:62:61:49:2a:30:21:ba:3e:
         06:56:ad:2d:62:06:2c:ad:ec:2e:8b:ab:85:48:04:ba:46:60:
         eb:c1:58:05:27:eb:f0:36:dc:15:e2:85:fb:40:1e:81:72:70:
         f4:17:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:04 2025 by rpki-client