Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/323830343a353564343a3a2f33322d3332203d3e20323637393539.roa
File:                     323830343a353564343a3a2f33322d3332203d3e20323637393539.roa (raw, json)
Hash identifier:          80e6upJQWcSIa86RO22fvlQ2EYd9z/rN+BGeYWLjUIE=
Subject key identifier:   15:DD:D2:EE:74:D1:22:0E:14:95:B5:3B:7D:10:44:65:C2:59:83:15
Certificate issuer:       /CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
Certificate serial:       561F5104E5CC661076909E49F0D3A28EF0BDA89F
Authority key identifier: 5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/323830343a353564343a3a2f33322d3332203d3e20323637393539.roa
Signing time:             Wed 19 Feb 2025 16:09:19 +0000
ROA not before:           Wed 19 Feb 2025 16:04:19 +0000
ROA not after:            Wed 18 Feb 2026 16:09:19 +0000
asID:                     267959
IP address blocks:        2804:55d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1f:51:04:e5:cc:66:10:76:90:9e:49:f0:d3:a2:8e:f0:bd:a8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
        Validity
            Not Before: Feb 19 16:04:19 2025 GMT
            Not After : Feb 18 16:09:19 2026 GMT
        Subject: CN=15DDD2EE74D1220E1495B53B7D104465C2598315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:69:52:74:99:a4:c2:87:b0:fe:c4:4e:65:
                    85:e6:11:be:ab:fe:95:ab:56:1d:d9:8a:8d:02:1d:
                    bc:f2:4c:2b:79:b1:e2:a7:f0:32:0c:6a:f5:33:c3:
                    79:7c:04:4d:35:83:76:3e:98:31:9c:85:87:eb:64:
                    46:15:fe:58:19:1b:15:9e:33:24:de:8b:f6:22:6e:
                    0f:57:af:54:15:7f:37:5b:12:9e:43:a7:11:b3:5a:
                    9c:c7:e5:ab:8d:e6:43:ce:82:6d:8a:4a:2d:19:21:
                    e8:e8:bf:10:9b:b2:8d:75:ac:c7:26:38:6d:ed:c0:
                    ff:5a:35:e1:82:7b:96:20:50:c4:42:29:a6:11:d1:
                    70:3a:96:7d:d2:f6:1f:28:13:ed:14:61:ed:d7:74:
                    4b:3d:ec:7a:01:d9:f8:81:11:19:30:89:4e:63:6d:
                    1a:10:96:93:42:fe:23:b4:17:58:96:73:1f:1d:05:
                    6c:11:c1:8e:b6:44:1d:c3:ef:9a:fc:57:7b:24:0f:
                    42:85:18:0a:cd:f1:06:81:bd:84:45:da:60:36:15:
                    b1:88:b2:96:d4:db:dd:06:04:ba:b5:19:e8:52:3b:
                    fe:99:87:2a:7a:8c:48:55:86:74:51:3b:ca:32:ff:
                    6f:c7:4e:d5:ed:32:d5:28:51:f0:07:0c:49:27:f6:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DD:D2:EE:74:D1:22:0E:14:95:B5:3B:7D:10:44:65:C2:59:83:15
            X509v3 Authority Key Identifier:
                keyid:5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/323830343a353564343a3a2f33322d3332203d3e20323637393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:fe:20:a2:15:45:ae:27:dc:e1:f0:ec:91:06:fd:df:20:
         9a:cc:ee:46:42:34:2a:46:a9:1c:58:d3:fc:5e:81:cf:5a:8f:
         8f:93:20:3a:f9:60:d8:93:59:19:5c:e5:15:37:3f:82:b9:20:
         23:ec:a4:f3:cf:6d:09:8e:c0:9b:84:3b:a3:a5:70:02:5f:c2:
         2e:af:52:bd:dc:60:a2:41:26:ad:6c:18:f3:d7:4d:99:a3:51:
         65:bf:1a:62:61:e8:b2:45:d2:e8:23:00:bb:2f:3f:07:6b:1a:
         32:d4:96:d3:f4:29:71:44:5b:26:ae:35:92:9a:43:39:0c:6f:
         a0:a6:dd:30:c0:4d:a0:ae:6d:ed:1f:dd:01:8a:53:10:e1:a9:
         c2:17:19:df:39:c0:4c:b2:bf:37:d4:0a:c1:38:3f:ed:bb:ec:
         6c:1e:41:b9:98:d1:ea:25:ee:42:6d:bf:97:69:1c:ba:ed:17:
         21:31:22:13:04:7b:f4:b5:eb:b4:bb:c9:23:3b:3f:b0:55:32:
         4d:6a:6b:e2:66:16:b9:93:6c:87:d4:71:bf:5a:98:ff:00:f4:
         4f:75:08:4c:ef:89:81:e8:1b:f8:23:48:ac:8e:90:16:8a:8f:
         de:e1:15:ec:5f:ed:75:f8:00:df:3b:30:99:f6:83:cf:18:ab:
         6f:a5:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:40:30 2025 by rpki-client