Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a323030303a3a2f33362d3336203d3e20323634343634.roa
File:                     323830343a323031383a323030303a3a2f33362d3336203d3e20323634343634.roa (raw, json)
Hash identifier:          U7XkWfTs5rBf3OesXFYp40LAwVsFBBpL8ntWVQ+fKP4=
Subject key identifier:   C2:07:CA:91:D8:7B:9E:49:53:F5:A9:E8:FB:7D:36:54:5A:53:24:EA
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       5DCE223DE42AD0F222E007C3916F3C140065DA25
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a323030303a3a2f33362d3336203d3e20323634343634.roa
Signing time:             Mon 13 Dec 2021 14:00:00 +0000
ROA not before:           Mon 13 Dec 2021 13:55:00 +0000
ROA not after:            Tue 13 Dec 2022 14:00:00 +0000
asID:                     264464
IP address blocks:        2804:2018:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ce:22:3d:e4:2a:d0:f2:22:e0:07:c3:91:6f:3c:14:00:65:da:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Dec 13 13:55:00 2021 GMT
            Not After : Dec 13 14:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:89:2f:4f:7f:a1:19:8c:31:94:c4:68:58:24:
                    82:8d:22:70:6a:d3:45:eb:6c:38:f5:d4:1f:20:be:
                    6a:ba:c2:03:64:ea:63:64:78:ee:7f:65:27:dc:8a:
                    9c:8b:aa:63:0c:36:cd:d5:d4:1f:9c:b3:1c:f9:9e:
                    19:7e:1a:19:ea:29:ad:c8:51:19:66:6d:4d:77:74:
                    94:ae:6b:36:4a:46:75:7e:da:9e:c3:8f:2d:01:55:
                    1e:56:15:f7:22:07:67:4e:78:1c:fd:89:d0:47:1d:
                    68:af:e2:6a:ca:90:4c:24:4a:d6:1f:53:81:13:1c:
                    57:86:21:dd:70:7e:6e:8b:22:22:b9:b3:f8:c6:00:
                    fc:d7:9f:dc:5c:b4:1c:0e:78:39:65:b4:51:49:21:
                    5f:08:f9:9a:79:6c:66:1b:85:25:fb:cf:df:a7:6f:
                    3b:50:b7:74:49:d6:50:5b:db:f7:c1:35:b2:a4:94:
                    f7:e8:43:bc:f7:8d:c8:fa:4a:25:84:23:7b:9c:5f:
                    21:de:82:a7:e3:b1:d3:9f:81:a5:21:2d:c2:09:5e:
                    84:3a:f7:4e:8b:51:30:30:04:cb:32:4d:6c:6a:19:
                    7b:ac:d6:a1:fb:ba:7f:0c:1c:fa:09:e6:9d:b9:49:
                    9a:c5:af:56:73:bd:ad:16:46:e5:5a:a2:20:81:32:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:CA:91:D8:7B:9E:49:53:F5:A9:E8:FB:7D:36:54:5A:53:24:EA
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a323030303a3a2f33362d3336203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:58:fa:5d:09:aa:9c:f9:d2:b8:a9:64:4a:24:bd:fa:bb:d3:
         c1:cd:e5:20:f4:f3:22:c6:54:f9:39:b6:97:fa:ab:d3:c6:c6:
         94:b5:62:92:b2:fe:09:86:25:5b:97:77:a1:5f:e5:bd:79:10:
         cd:30:fd:e7:4c:8e:6b:53:a2:31:fa:24:d3:b5:62:87:14:0e:
         c1:41:b5:23:2d:0e:6f:08:be:ee:d1:92:5f:d1:12:9d:e8:f5:
         90:be:42:a3:80:e2:b3:77:1c:da:c6:ae:68:a7:88:0b:c9:4a:
         a9:42:91:54:a2:e0:f9:4f:d5:05:fb:10:da:74:7d:a4:8d:6f:
         1b:a3:12:f4:78:75:e1:c9:64:a1:34:5e:cb:44:0d:66:71:71:
         7a:42:a8:93:ff:7e:40:54:64:c9:5f:72:6c:f0:65:26:a7:86:
         2c:32:4b:fc:9f:2a:af:80:30:3b:0d:0b:d2:37:db:c4:a5:6d:
         1c:30:da:5f:75:47:37:79:5c:fc:32:04:03:d7:78:ff:f7:da:
         13:3f:6b:7c:ec:5d:20:bf:a5:c6:46:96:38:75:ce:73:e8:19:
         5a:9f:e2:f0:b8:9a:4e:08:3b:27:97:6c:05:ed:27:fe:80:61:
         a8:e2:df:60:3d:7d:36:87:4d:1b:d4:50:c4:be:83:7e:2e:6a:
         90:fc:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:58 2025 by rpki-client