Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          bDGMfB0LngFvwNFOJEKtd74tYagI7jvsZBgyHzhTUqg=
Subject key identifier:   BE:6B:9B:25:E3:A2:70:60:EC:94:1B:41:C7:71:5A:EC:A1:78:0F:E3
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       2C474109C9F0B92DF761359F3CDF13211197073B
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:02 +0000
ROA not before:           Sat 04 Nov 2023 20:55:02 +0000
ROA not after:            Sat 02 Nov 2024 21:00:02 +0000
asID:                     264247
IP address blocks:        2804:24e4:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:47:41:09:c9:f0:b9:2d:f7:61:35:9f:3c:df:13:21:11:97:07:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:02 2023 GMT
            Not After : Nov  2 21:00:02 2024 GMT
        Subject: CN=BE6B9B25E3A27060EC941B41C7715AECA1780FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:bc:d2:ea:a5:5b:e4:ec:93:d3:06:24:c5:
                    dd:07:e8:d4:9d:1d:42:2d:ae:62:28:f1:3e:79:90:
                    cc:d4:66:d8:34:2b:e2:b0:ab:ba:1d:a8:52:76:7b:
                    33:6c:5e:e6:0b:70:5e:62:5a:0c:1d:b4:41:86:a5:
                    4c:a9:e0:cd:2b:31:9d:12:b2:7f:96:28:78:12:9a:
                    fa:a6:98:a9:e1:5a:66:68:bf:03:f3:d7:f1:95:10:
                    c9:19:92:95:a5:6e:84:b7:f8:96:04:16:a5:03:5e:
                    3d:ae:91:74:fc:c2:d0:86:ac:5e:e0:15:00:ba:8f:
                    3f:b3:74:6d:92:83:a0:da:95:11:a0:53:99:56:82:
                    23:d3:5b:83:54:f5:04:f1:ab:06:70:95:6d:be:53:
                    09:fc:8a:f7:79:f6:a5:d8:0a:4d:3b:f5:d2:88:8a:
                    70:0e:1b:2a:2c:76:d9:c2:b7:a6:12:47:cc:aa:bd:
                    94:33:98:b3:ae:92:11:f0:cd:11:90:b8:65:64:1c:
                    73:8d:ff:ba:17:4b:fc:c8:6d:8d:ac:33:ef:8c:c1:
                    b1:d1:45:0d:0d:44:2b:ee:8e:82:6b:16:c9:23:b4:
                    ef:f7:79:7b:0d:6d:ea:dc:ab:f1:70:da:cf:c5:05:
                    c9:a9:16:d9:d5:33:90:24:85:47:84:cb:09:4c:1d:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6B:9B:25:E3:A2:70:60:EC:94:1B:41:C7:71:5A:EC:A1:78:0F:E3
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:59:e4:ee:f9:ac:5e:64:10:7b:50:84:07:40:d5:ef:b4:21:
         6a:0a:57:cd:80:8e:cc:6f:1e:79:a7:b9:3f:dc:c8:6e:60:c6:
         20:a8:fb:de:d1:0f:4f:f8:16:fb:e7:ba:98:a2:1c:5a:9a:9a:
         5c:3b:d9:82:19:62:51:b3:ab:6d:36:2d:0b:a4:c2:48:71:4d:
         66:50:23:10:e5:d6:49:21:d9:a5:f1:65:95:73:ea:42:5d:88:
         68:78:59:ff:00:2a:6e:11:3e:8b:c9:ca:d9:1e:8d:dc:75:cf:
         b1:5b:c9:fd:a3:a6:30:af:dc:67:f6:0e:01:92:b0:f9:a2:57:
         80:43:63:a4:33:b6:5c:60:59:b1:9e:72:39:a2:b3:35:10:2f:
         7f:75:bb:bc:86:32:1c:55:d5:6e:fb:e8:4f:f8:aa:e0:32:4c:
         83:7a:be:b5:ce:8c:e5:b8:e4:8c:19:9b:ba:8e:5a:bd:26:71:
         62:2e:43:0d:e5:a7:de:18:72:86:8b:33:d1:5e:c2:9d:97:f8:
         78:bb:2c:4b:4c:ee:6f:1d:de:75:c3:99:4f:34:0a:6c:23:67:
         eb:93:36:5f:4a:eb:ee:87:90:29:4b:47:0e:45:c6:ae:9a:64:
         10:1e:3f:ae:d4:ba:3f:1e:32:1c:06:84:37:32:2c:bf:31:98:
         c7:d1:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:01 2025 by rpki-client