Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/323830343a346565633a3a2f33322d3332203d3e20323638323931.roa
File:                     323830343a346565633a3a2f33322d3332203d3e20323638323931.roa (raw, json)
Hash identifier:          iSRSgRbYt31fS+0HxRWdkJ6ohHCIB+9Z7+utwuLsdPE=
Subject key identifier:   D2:F0:56:C8:0E:C7:E8:BE:BA:9A:64:76:55:85:4B:AC:22:27:09:74
Certificate issuer:       /CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
Certificate serial:       1EDE8D06BE34EAB4AA2A9C09E3A688B26E7A4009
Authority key identifier: 28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/323830343a346565633a3a2f33322d3332203d3e20323638323931.roa
Signing time:             Wed 06 Sep 2023 12:39:02 +0000
ROA not before:           Wed 06 Sep 2023 12:34:02 +0000
ROA not after:            Wed 04 Sep 2024 12:39:02 +0000
asID:                     268291
IP address blocks:        2804:4eec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:de:8d:06:be:34:ea:b4:aa:2a:9c:09:e3:a6:88:b2:6e:7a:40:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
        Validity
            Not Before: Sep  6 12:34:02 2023 GMT
            Not After : Sep  4 12:39:02 2024 GMT
        Subject: CN=D2F056C80EC7E8BEBA9A647655854BAC22270974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:f7:64:15:72:af:9f:21:a4:35:b6:88:38:
                    24:b4:05:3f:b4:c5:d5:89:bf:80:2d:72:7f:e6:09:
                    36:23:aa:61:6b:d9:c4:6d:45:c0:d6:c2:71:e7:3f:
                    97:d2:08:0f:1a:ab:f8:f6:0e:00:17:a8:65:e1:11:
                    85:4a:4f:c4:bf:cb:a0:73:c4:89:19:8c:b2:1b:bb:
                    88:05:10:f4:0d:16:f0:c9:ff:5b:29:39:3a:ec:76:
                    73:e9:cc:89:eb:ce:59:48:a1:11:a4:4b:07:a9:e7:
                    1f:dc:b7:6f:39:4e:72:4f:e6:14:a1:6c:27:36:78:
                    bb:80:8d:be:f7:df:8f:27:d0:ec:1e:4f:92:d5:ed:
                    60:29:e5:b4:5e:36:53:e4:c0:d8:78:d2:a6:4f:5b:
                    79:e8:07:ad:ee:ba:4c:80:2d:18:85:b1:8d:b3:72:
                    18:c6:13:cb:ca:66:2f:f4:40:5d:62:66:59:7c:ea:
                    0b:7c:4f:da:a5:ad:38:25:1c:65:53:36:8e:3f:fa:
                    32:e2:44:5d:74:ff:1f:c8:32:f4:f4:49:00:3e:f8:
                    9d:4c:a0:e0:ad:e8:06:ff:43:89:7d:57:a3:b3:0c:
                    91:3a:70:4c:a5:f8:4d:ef:bf:85:ef:b2:80:9f:1f:
                    78:c0:19:11:56:95:f5:e1:76:f6:d1:98:e0:14:f5:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F0:56:C8:0E:C7:E8:BE:BA:9A:64:76:55:85:4B:AC:22:27:09:74
            X509v3 Authority Key Identifier:
                keyid:28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/323830343a346565633a3a2f33322d3332203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4eec::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:21:32:18:fb:52:bf:b9:df:74:8a:3c:f1:fb:3a:af:28:10:
         c6:30:dd:e0:0f:d1:a2:67:71:ba:17:fe:81:4a:fb:01:89:a8:
         92:c9:1c:53:89:60:42:98:a1:03:74:a8:aa:02:41:cf:8c:72:
         2d:2f:32:28:d7:9e:f1:b5:74:20:93:84:7f:a5:34:78:51:0e:
         22:65:87:8c:04:11:9c:21:91:8e:ed:99:dd:aa:ec:65:1f:b8:
         a0:1b:f0:8a:ba:f5:b1:42:bd:5e:b3:62:cd:dc:e4:4e:ec:11:
         54:05:53:6b:e2:bc:59:8c:9b:3e:76:93:da:77:f8:97:55:6a:
         fd:91:10:8f:53:c1:05:b6:6b:17:bc:b0:94:ca:7d:2d:93:d4:
         18:ee:30:a3:b6:5a:73:1a:37:6a:b9:20:36:58:44:82:6a:c8:
         eb:43:4e:0b:5b:d6:aa:4b:ab:aa:0e:0c:1b:e7:69:a8:34:0b:
         a6:bc:9c:39:1c:6c:5d:03:d3:f4:a0:e8:8f:e9:66:ee:8c:05:
         3f:08:05:03:29:62:4d:7a:1d:66:4d:a8:ea:76:a6:e4:1d:fe:
         7a:13:2b:ff:6f:da:1c:ed:e8:0b:01:b7:8f:80:4e:cb:46:96:
         db:e0:cb:c8:6e:5e:31:4e:94:74:44:3f:bd:85:8c:93:af:8d:
         66:94:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:00 2025 by rpki-client