Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3130303a3a2f34302d3430203d3e20323638353936.roa
File:                     323830343a353361303a3130303a3a2f34302d3430203d3e20323638353936.roa (raw, json)
Hash identifier:          3CS8ki+nagMj7yMElN/rm2pBnZVEexmEnoAGQVNwCv4=
Subject key identifier:   DF:D2:A0:19:20:FB:FE:32:AB:A8:3D:D0:5C:D9:87:AD:2C:37:A2:47
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       3DDB502C3BC8BFE1F207FEE8E850AC3A3C5558A9
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3130303a3a2f34302d3430203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:24:47 +0000
ROA not before:           Wed 14 Aug 2024 15:19:47 +0000
ROA not after:            Wed 13 Aug 2025 15:24:47 +0000
asID:                     268596
IP address blocks:        2804:53a0:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:db:50:2c:3b:c8:bf:e1:f2:07:fe:e8:e8:50:ac:3a:3c:55:58:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:19:47 2024 GMT
            Not After : Aug 13 15:24:47 2025 GMT
        Subject: CN=DFD2A01920FBFE32ABA83DD05CD987AD2C37A247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:31:5e:d5:24:91:46:e5:a9:77:24:13:80:
                    3d:54:e9:9d:6c:d9:9b:0e:b4:71:dd:38:27:77:4e:
                    bf:e5:a7:43:a8:bb:9c:84:02:61:01:1b:f8:3f:25:
                    be:35:7f:a0:01:9b:d5:c9:6d:34:47:e0:8b:38:6b:
                    61:72:87:4a:45:b9:89:fa:7c:bc:e4:67:5c:61:a0:
                    d3:9b:6f:fc:5a:3e:50:19:21:85:7b:36:56:b4:d4:
                    f2:a9:d7:b7:77:b0:8f:82:12:83:47:97:85:10:ea:
                    2a:74:67:1e:2f:cc:67:52:b1:60:f8:6e:ae:dd:43:
                    e0:f3:af:00:68:61:7f:8f:b1:37:99:5a:0a:c6:d3:
                    3d:f4:58:02:31:95:cc:30:7c:2c:87:45:b8:fe:12:
                    32:f0:ec:1d:3f:d4:5d:ed:e3:02:49:ce:06:0c:f0:
                    a3:a1:61:41:ed:af:2a:16:c2:3f:96:81:7e:f8:07:
                    eb:b2:74:c5:fb:4c:b0:9f:6b:74:71:88:79:38:ec:
                    f3:4b:f1:2d:45:b8:7b:72:f3:ad:e5:fb:1d:7e:ed:
                    0e:2d:c0:54:8a:4e:19:f9:93:8b:6b:c3:59:1f:aa:
                    fa:ab:6f:c3:6d:14:87:0e:20:f8:61:6a:33:5a:73:
                    f0:b8:45:60:b4:09:d2:77:f8:7b:fe:55:6e:8f:33:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D2:A0:19:20:FB:FE:32:AB:A8:3D:D0:5C:D9:87:AD:2C:37:A2:47
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3130303a3a2f34302d3430203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:76:02:c2:6c:26:4b:fa:d1:0a:db:56:59:53:d7:fa:21:
         ce:e8:de:d4:f9:b5:94:d3:61:7a:4b:4d:b7:8d:c9:e2:b5:15:
         0e:30:5e:5d:6a:0f:a7:b5:e8:11:52:68:fe:e0:3f:7b:6b:f8:
         dc:af:41:dd:d2:72:06:46:e4:cc:f0:6c:dc:a6:77:4e:91:a3:
         bd:5c:33:65:8f:a8:eb:9d:cd:ba:65:c2:19:b0:f0:97:d0:c7:
         72:00:a0:dc:40:67:70:d0:d8:96:0c:64:e9:70:b5:c5:26:2b:
         ae:a9:0f:3a:b8:e5:bd:a6:6a:4a:f6:15:ea:0d:6b:b1:e6:12:
         47:b3:33:d0:16:d0:f9:bd:6c:08:6f:f0:89:f4:80:bf:74:53:
         da:b8:90:0d:f6:e1:81:11:5d:51:8b:8b:df:bf:18:2f:23:ea:
         0c:4d:aa:12:fc:1c:78:27:36:c5:68:c3:34:2a:de:81:7a:56:
         c9:34:e7:98:4c:97:97:23:2b:a4:55:a7:da:55:f5:3a:4f:03:
         86:eb:ff:e0:48:53:78:b4:55:b8:b7:b9:fc:66:6c:44:52:ea:
         47:87:e8:8a:24:3f:3f:68:e6:7b:72:be:c7:58:8a:04:d8:71:
         53:59:bf:a5:a7:42:bf:16:44:6a:b1:08:14:8a:d9:48:f8:55:
         ee:89:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:25 2025 by rpki-client