Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3335203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33322d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          PXACFPWo6qYZYoNQ3pTWvu+OzT453yPwczlg/+iPJcw=
Subject key identifier:   69:7E:05:D7:06:B4:63:C0:FB:DF:8B:9C:17:32:48:8B:B1:30:98:AB
Certificate issuer:       /CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
Certificate serial:       51D35E2B5C03C8B94A803CE2143A868F7D5D4554
Authority key identifier: 2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3335203d3e20323733363036.roa
Signing time:             Mon 04 Dec 2023 20:03:54 +0000
ROA not before:           Mon 04 Dec 2023 19:58:54 +0000
ROA not after:            Mon 02 Dec 2024 20:03:54 +0000
asID:                     273606
IP address blocks:        2804:8978::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d3:5e:2b:5c:03:c8:b9:4a:80:3c:e2:14:3a:86:8f:7d:5d:45:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
        Validity
            Not Before: Dec  4 19:58:54 2023 GMT
            Not After : Dec  2 20:03:54 2024 GMT
        Subject: CN=697E05D706B463C0FBDF8B9C1732488BB13098AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:44:d9:da:00:fe:c7:49:0b:b1:7c:05:6d:
                    aa:c2:c3:39:82:78:da:44:f5:f8:be:98:5b:3f:1d:
                    eb:ad:75:2f:fc:2b:4c:06:b6:22:15:c8:25:f9:0a:
                    3c:f0:f0:89:ff:f6:70:de:e2:d8:f8:77:d6:c6:6e:
                    7e:98:94:4d:1e:e7:36:7e:5c:56:99:63:49:e4:d8:
                    b9:49:c7:13:c7:8d:30:da:12:a4:03:98:e0:fe:23:
                    1e:d6:ba:a7:ef:1e:29:f5:8b:1c:12:df:bd:f0:29:
                    28:ef:bd:6e:66:07:df:b4:85:c2:32:91:61:63:43:
                    74:07:31:b3:bf:06:38:e3:29:bc:82:2b:56:76:56:
                    89:71:e8:db:0f:e2:ab:f9:73:40:4f:5c:1c:18:db:
                    69:35:97:bf:c3:70:1f:53:50:46:9a:2d:c2:10:d9:
                    ca:5c:c1:6a:56:29:0c:20:98:3d:f9:97:44:3b:75:
                    37:03:ce:19:95:03:6f:4b:9d:9a:43:9c:ab:28:bb:
                    71:98:cd:50:ae:0c:4d:49:ac:f2:35:72:70:06:38:
                    4f:e4:fe:77:0c:e2:8a:a9:a0:b8:3d:f2:1e:d8:dd:
                    97:c9:75:8a:c9:cd:23:ce:52:2c:66:14:fe:3c:34:
                    20:63:a6:0b:2d:6b:ab:54:e6:7f:ac:05:c1:7b:b8:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7E:05:D7:06:B4:63:C0:FB:DF:8B:9C:17:32:48:8B:B1:30:98:AB
            X509v3 Authority Key Identifier:
                keyid:2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:f2:20:9d:e5:74:e5:ca:38:c6:62:1a:33:27:11:96:c9:
         c5:b9:da:c3:30:49:e9:90:a4:d2:f5:5c:d3:c6:ca:56:16:2b:
         86:b0:53:ae:79:15:11:c3:e5:a3:5d:a8:d6:3e:5c:f1:04:7c:
         f7:9c:67:e9:61:bf:cf:88:b5:0f:0f:04:5d:bd:f4:97:e2:d8:
         83:88:7c:70:a4:dd:ee:f9:8e:66:23:d5:a8:16:67:f4:5d:97:
         7d:e4:76:77:b2:a4:63:67:b2:97:d4:dc:6d:03:92:41:e3:10:
         6c:27:a6:5b:dc:ea:4a:bf:31:46:8f:78:25:57:8b:29:aa:5c:
         fa:e6:4b:36:60:4b:91:f2:5f:9a:58:26:cd:47:4e:6b:07:ef:
         cb:14:e7:20:12:58:0c:e8:47:27:6b:8d:77:e1:0a:49:bc:61:
         c4:29:52:4d:d1:c8:3e:14:a3:dc:b2:c7:26:bb:39:fd:2c:05:
         3e:c3:9a:44:07:e0:38:ee:5c:cf:7e:22:eb:55:b7:b6:cd:95:
         a9:f7:b7:6c:14:d4:45:b4:c2:8a:7e:04:30:fc:7a:1e:53:35:
         5d:42:d8:54:79:09:98:cb:97:56:b4:76:ec:f7:b9:ea:03:e2:
         7a:86:f0:fa:64:27:99:36:9b:5a:65:62:47:f8:27:63:ef:8b:
         d1:0c:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:24 2025 by rpki-client