Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33362d3336203d3e20323638353936.roa
File:                     323830343a353361303a3a2f33362d3336203d3e20323638353936.roa (raw, json)
Hash identifier:          GGqc92DWS7gVA01tWaUSIsC0CGdJDbMVMcoCBsf0U3o=
Subject key identifier:   E1:5F:4B:96:35:CA:85:CB:BD:63:45:08:EC:15:B3:CF:F5:69:94:9B
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       11F3AADE165E6A9AF7DA0F7E0DFF4AD943AC677A
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33362d3336203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:24:42 +0000
ROA not before:           Wed 14 Aug 2024 15:19:42 +0000
ROA not after:            Wed 13 Aug 2025 15:24:42 +0000
asID:                     268596
IP address blocks:        2804:53a0::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f3:aa:de:16:5e:6a:9a:f7:da:0f:7e:0d:ff:4a:d9:43:ac:67:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:19:42 2024 GMT
            Not After : Aug 13 15:24:42 2025 GMT
        Subject: CN=E15F4B9635CA85CBBD634508EC15B3CFF569949B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:ae:56:42:64:55:15:84:a3:91:6f:3e:44:
                    ca:dd:12:73:97:48:27:b2:33:90:dd:c5:df:76:b8:
                    45:6e:bd:69:c6:33:b9:a4:57:b5:00:04:02:9e:c0:
                    4f:71:c8:f9:dd:78:30:b2:71:9f:5c:48:7a:a8:22:
                    d0:e8:cb:fd:20:d3:7e:2b:60:dc:ca:9f:a0:11:f7:
                    c9:1b:ad:c5:42:cb:85:72:8a:bf:0e:7a:89:e5:01:
                    a2:fb:77:56:a5:2a:3e:08:8a:12:31:e0:e5:99:ae:
                    43:32:29:92:7d:08:a2:7d:e7:21:12:3a:8f:03:ab:
                    76:e4:5a:33:5d:9a:03:2e:28:3d:dc:4e:7a:c1:1e:
                    8d:4a:2e:ec:5b:4b:d4:06:c5:cd:f0:8f:aa:8e:22:
                    5f:f7:a8:9d:83:99:ee:e1:8a:f7:96:4a:57:73:6c:
                    42:4d:19:9a:1c:c8:24:fc:13:8e:1f:6d:3b:53:73:
                    eb:c8:cc:49:91:93:03:17:0a:7d:4a:9b:49:65:b1:
                    1f:e5:fc:df:6a:cd:ea:4d:b7:45:d5:d3:24:4a:75:
                    dc:55:a2:f7:6a:ce:1d:a1:d0:8b:78:a9:fc:12:d0:
                    c3:09:78:84:21:9d:71:7c:8e:50:17:f2:06:a6:eb:
                    82:9f:0d:ed:6f:70:c2:ae:e4:6a:40:d7:9b:b3:ce:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5F:4B:96:35:CA:85:CB:BD:63:45:08:EC:15:B3:CF:F5:69:94:9B
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33362d3336203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:73:eb:b6:98:74:7d:f9:1b:e0:30:c5:af:79:5e:50:24:76:
         35:f2:00:4e:e7:08:be:65:05:cd:07:a8:0a:0d:48:11:53:12:
         7f:d8:f9:93:12:84:17:2a:a3:82:8b:44:65:23:31:24:7e:b8:
         88:d0:2a:47:94:8e:f6:c3:cd:36:57:14:fe:7f:62:ca:39:bb:
         0e:e1:67:53:e6:8b:84:d9:17:7d:b5:ec:43:8e:d5:d6:80:59:
         84:d0:78:1f:a7:e7:e7:f2:ed:83:f0:8b:58:69:b6:64:7f:2b:
         62:cd:1a:bc:c2:fb:3e:e3:ea:5d:19:ea:a0:ab:a8:3a:9e:8a:
         ba:f6:80:e2:a8:f4:54:f4:70:f2:ab:46:37:60:55:6e:67:ad:
         d5:4a:36:fa:ae:c4:31:fc:41:19:12:49:96:06:5e:c7:cc:a9:
         8a:25:d4:cd:a8:f7:f2:cd:77:93:de:ba:d8:9a:38:32:8c:b8:
         c9:76:ef:05:1e:2d:96:8d:7c:b6:6a:a9:35:16:4c:a5:37:cd:
         53:23:40:0f:05:4b:da:73:d6:ae:a8:06:28:ea:b8:b9:84:6e:
         4e:f0:e3:90:70:0c:ef:4c:60:f5:53:03:87:f4:41:a6:7b:a4:
         ef:47:95:19:d1:7c:08:67:af:1c:df:fd:e0:46:72:d7:ef:df:
         0a:12:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:52:58 2025 by rpki-client