Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a313030303a3a2f33362d3336203d3e20323638353936.roa
File:                     323830343a353361303a313030303a3a2f33362d3336203d3e20323638353936.roa (raw, json)
Hash identifier:          5oMQOxvf9i3baZk6jqN90//FyvKJPFJqs5NsCfHxIJI=
Subject key identifier:   F4:C1:45:0F:28:5B:E0:27:40:45:A2:A1:3B:80:F5:79:27:AB:BD:47
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       56CF681DB37A3B3E50AAFC594B325FCCE2582569
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a313030303a3a2f33362d3336203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:24:56 +0000
ROA not before:           Wed 14 Aug 2024 15:19:56 +0000
ROA not after:            Wed 13 Aug 2025 15:24:56 +0000
asID:                     268596
IP address blocks:        2804:53a0:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cf:68:1d:b3:7a:3b:3e:50:aa:fc:59:4b:32:5f:cc:e2:58:25:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:19:56 2024 GMT
            Not After : Aug 13 15:24:56 2025 GMT
        Subject: CN=F4C1450F285BE0274045A2A13B80F57927ABBD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:34:63:af:f3:d8:83:88:c2:a4:0f:33:59:
                    c5:2e:9b:96:ce:a6:7c:2f:56:f0:3b:4a:47:90:6f:
                    2f:6f:0a:ca:8f:b3:88:2e:74:78:74:95:3d:aa:2a:
                    64:1e:f0:d9:ed:19:9e:7c:7f:f6:9e:ee:05:6a:bc:
                    38:47:31:51:07:72:76:e7:61:bc:33:ee:6d:37:f5:
                    5c:f2:59:b2:43:ce:7e:cc:86:b0:56:87:fa:1f:11:
                    57:75:5d:50:6f:72:d9:9d:ba:88:dc:3d:31:1e:80:
                    af:96:64:aa:0e:cd:29:83:2e:bc:e0:83:6d:9c:ef:
                    d6:33:e6:93:f8:9a:71:bb:7b:fb:ab:da:ac:6b:23:
                    5e:89:f2:75:2e:aa:40:2a:d1:39:88:47:fd:f4:56:
                    9b:ed:68:d0:ac:ab:f4:11:f1:ba:c7:d5:db:19:46:
                    6c:c3:0d:db:78:82:29:4a:e6:28:ad:ea:4a:a3:53:
                    26:85:a5:8a:82:db:fd:a9:a8:ac:82:0e:ab:93:48:
                    42:b4:a6:75:0d:cd:40:4c:f2:13:8c:20:5d:38:9f:
                    0d:d7:38:b9:b0:e1:54:b2:8a:70:cb:e6:d6:d2:96:
                    e8:89:f3:5c:77:12:bf:85:55:d9:44:f7:71:4a:d2:
                    ca:10:77:8f:27:54:3c:6e:72:a5:eb:2a:1a:9d:73:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C1:45:0F:28:5B:E0:27:40:45:A2:A1:3B:80:F5:79:27:AB:BD:47
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a313030303a3a2f33362d3336203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:72:64:a5:eb:0e:7d:61:e1:fd:00:a5:2d:f0:2d:db:7f:89:
         60:5b:f6:ae:9c:b8:ff:70:0e:46:06:6b:aa:5a:2e:c9:f6:49:
         ec:75:d5:c1:71:08:8c:e9:ad:93:3b:d1:c1:2e:dc:ed:fe:af:
         eb:81:8f:05:3d:98:56:d6:04:ff:1c:64:65:cd:86:58:1e:50:
         f0:97:3c:3a:a5:4b:06:df:7d:01:e7:d9:b6:84:92:65:cc:9a:
         56:85:dd:f3:e1:c4:51:38:9c:6c:fd:fe:f3:b9:5a:60:15:79:
         b6:89:95:1e:b5:9e:62:4a:df:6c:cd:e7:e4:fd:24:f7:f3:92:
         55:6d:e2:82:ce:0a:00:a2:44:82:28:8b:6d:fa:f8:c6:76:d2:
         5f:3e:53:47:c0:34:7c:cb:c7:4a:e0:d4:8c:25:71:25:e5:9c:
         c4:52:6d:74:75:c1:ae:6f:20:79:b0:7c:6c:84:f4:1b:59:20:
         ca:fa:18:88:d2:e2:97:67:48:a8:7c:7c:35:46:ca:c4:b0:82:
         9b:0c:c9:2d:df:76:cd:11:0e:77:f2:4b:9a:b0:32:df:10:c7:
         6c:7a:d0:5b:cf:26:f8:49:24:f7:38:5e:c4:56:13:3b:a9:fb:
         1a:39:7d:3c:b2:ad:f4:2a:d1:10:ec:a7:4e:a4:ce:fb:4f:fd:
         74:c7:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:05:07 2025 by rpki-client