Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a383030303a3a2f33332d3333203d3e203238353737.roa
File:                     323830343a6437343a383030303a3a2f33332d3333203d3e203238353737.roa (raw, json)
Hash identifier:          Xt6phT5cqK83ZBFhNw0rxySVLFu3hQpJ9PVTrvAEy50=
Subject key identifier:   A9:33:17:BD:3A:F2:EA:92:1F:81:19:45:AA:AD:0A:5C:FF:FC:D4:29
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       743B9850CD6124E1276FFAACD5D2C533778CBD41
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a383030303a3a2f33332d3333203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:57:03 +0000
ROA not before:           Tue 30 Jul 2024 18:52:03 +0000
ROA not after:            Tue 29 Jul 2025 18:57:03 +0000
asID:                     28577
IP address blocks:        2804:d74:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:98:50:cd:61:24:e1:27:6f:fa:ac:d5:d2:c5:33:77:8c:bd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:52:03 2024 GMT
            Not After : Jul 29 18:57:03 2025 GMT
        Subject: CN=A93317BD3AF2EA921F811945AAAD0A5CFFFCD429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:e4:1a:0f:f4:94:eb:3d:93:7f:19:7d:f8:
                    ef:fc:06:4a:6c:d0:38:3e:42:a6:4e:7d:54:13:dc:
                    af:69:8a:f9:54:43:93:0f:2f:80:04:4c:37:cb:bf:
                    5f:d6:4e:1c:4a:d8:1d:78:af:8d:95:f8:e0:ff:8b:
                    4e:c1:62:9d:b0:e5:1a:b4:dc:33:93:f1:04:3d:60:
                    46:6f:72:26:45:07:e4:b0:49:b1:4c:a3:ab:8d:f5:
                    30:97:62:5a:da:89:58:a2:07:f9:46:91:cd:0d:de:
                    2d:06:ef:f4:56:0e:ee:de:94:58:49:68:3b:18:1c:
                    fc:92:11:26:ce:c4:20:3c:c1:c3:06:8b:c8:27:eb:
                    b6:af:7d:65:15:cb:94:f0:85:b8:11:8b:b0:dd:f9:
                    35:0e:cf:7e:bc:c5:24:20:d8:72:18:b6:99:4d:09:
                    e4:0c:47:1f:3e:17:19:12:ca:d7:22:68:60:bc:86:
                    6a:90:b3:83:bc:4e:f1:bf:f6:1f:a1:9e:a1:7a:ee:
                    38:2d:19:84:b3:d8:d2:3a:24:04:51:b2:3a:8b:4a:
                    d4:90:58:76:e4:da:1b:5a:6a:85:e5:af:6b:17:62:
                    7c:32:76:2d:6c:3f:91:9e:66:6d:2e:95:8e:f6:cb:
                    02:6c:1d:92:c9:41:47:76:73:b1:8f:3e:9d:ca:5f:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:33:17:BD:3A:F2:EA:92:1F:81:19:45:AA:AD:0A:5C:FF:FC:D4:29
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a383030303a3a2f33332d3333203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:d3:4c:16:08:7a:a5:61:c5:46:1d:eb:a0:1b:17:79:6d:f4:
         64:ef:82:3e:f5:b8:da:d9:16:55:41:02:ce:d7:20:ef:67:f7:
         9e:da:76:15:ec:f1:4a:06:77:01:e5:e0:d5:e4:fb:09:39:a0:
         65:b3:bf:00:82:11:df:f3:6f:60:2e:6f:29:31:f3:c2:58:e9:
         a2:9b:8a:b9:0a:d0:23:e8:31:1b:66:09:62:df:86:d8:4f:4c:
         e8:5b:85:a1:2c:bb:36:f8:54:ef:99:a6:d2:5c:7c:7a:d8:6d:
         67:9b:12:a2:59:b2:f7:ef:3b:1a:fb:fe:16:03:01:d2:4f:8b:
         91:ea:00:33:3a:d3:bf:61:56:1a:1c:47:f2:fa:da:a0:96:33:
         7d:32:77:36:08:b3:7b:03:41:15:85:68:c5:c8:8a:a4:fc:14:
         34:b4:63:75:0f:7a:5d:47:c1:44:da:a4:9f:66:3e:3e:61:d4:
         9f:02:3b:8c:54:78:55:83:77:43:bc:5a:2b:33:86:8e:69:4d:
         18:be:39:b8:bb:93:bd:8d:59:46:fa:01:bb:1d:fd:c2:2e:6d:
         5a:5c:4f:ca:ce:d8:91:72:d6:cb:01:52:1e:75:1a:1e:29:38:
         e3:36:74:48:64:f4:a1:94:ef:0f:e3:e2:4a:77:c6:84:fa:9b:
         29:cc:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:52 2025 by rpki-client