Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a3a2f33332d3333203d3e203238353737.roa
File:                     323830343a6437343a3a2f33332d3333203d3e203238353737.roa (raw, json)
Hash identifier:          jnRdLAMG/ghdUXipEdj2c1tqgWSHDHnaJ40DK4iMPsQ=
Subject key identifier:   57:E7:F2:3A:BB:8A:EF:D6:AD:B3:65:04:E9:6D:88:1E:F1:D4:7A:FE
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       7EC995779EA33B35F7FB4D69C0A3DD87EFC939BA
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a3a2f33332d3333203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:57:00 +0000
ROA not before:           Tue 30 Jul 2024 18:52:00 +0000
ROA not after:            Tue 29 Jul 2025 18:57:00 +0000
asID:                     28577
IP address blocks:        2804:d74::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c9:95:77:9e:a3:3b:35:f7:fb:4d:69:c0:a3:dd:87:ef:c9:39:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:52:00 2024 GMT
            Not After : Jul 29 18:57:00 2025 GMT
        Subject: CN=57E7F23ABB8AEFD6ADB36504E96D881EF1D47AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:7b:9e:46:e9:32:7d:48:7c:36:a8:5a:f8:
                    f2:7c:4e:e8:25:94:dd:ee:1f:da:d9:2a:9c:be:a8:
                    20:0b:6d:4c:85:63:62:44:64:e9:06:fd:8b:e7:08:
                    84:c7:9b:13:e3:e4:54:3f:eb:2b:f1:8f:67:2f:f1:
                    1f:71:f5:2f:1d:e1:21:62:44:f5:6b:51:72:c6:79:
                    92:67:15:b5:a0:61:d7:24:6c:77:81:2f:4b:7d:f3:
                    36:f3:3f:ce:72:7e:1a:93:46:72:ac:90:99:16:d4:
                    fb:f3:85:96:73:c0:23:e7:aa:a0:26:04:25:f7:1c:
                    47:b3:f5:cb:31:33:97:f7:9c:48:8d:43:e8:4e:14:
                    c9:73:07:26:8b:54:0b:cb:66:b0:d9:0f:81:18:5a:
                    c8:21:fe:61:45:13:64:8e:42:09:6f:bb:84:1e:83:
                    e0:ed:b3:79:ff:65:24:d8:f8:ba:c1:d7:15:f4:fe:
                    99:f9:26:bd:0e:f4:3a:0d:a0:f8:69:a0:5f:08:80:
                    95:24:be:7c:33:77:14:23:5b:d7:16:18:c9:ac:e0:
                    42:b0:a0:c7:97:b8:16:8e:02:23:cf:47:d6:2a:fd:
                    37:33:9c:58:6c:b9:ac:13:31:3f:42:14:59:d1:16:
                    01:49:ac:59:ce:20:51:06:03:e0:ae:02:dc:81:7f:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:F2:3A:BB:8A:EF:D6:AD:B3:65:04:E9:6D:88:1E:F1:D4:7A:FE
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a3a2f33332d3333203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d74::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:0a:85:fe:6d:60:ee:5b:9b:77:ef:4b:99:4b:17:71:90:75:
         c1:7e:08:b6:a9:28:c8:c5:89:2a:93:9d:a3:62:70:d0:d9:d2:
         82:89:2c:be:3d:18:ec:cf:0c:22:a0:06:b4:45:76:f9:93:8b:
         3e:3c:3f:76:fc:15:87:df:a2:f5:9d:66:58:b4:af:fa:03:a2:
         93:bf:e0:b8:a3:13:49:1c:db:53:05:70:67:27:9e:bb:b1:f4:
         ff:14:c2:29:ad:3a:86:1a:0b:84:b0:d8:ef:fa:f7:81:4e:68:
         b5:f9:1f:c3:da:c7:9d:7d:69:d4:c0:21:50:92:03:92:df:ad:
         75:67:cc:d2:d1:2d:d4:f8:54:84:4f:e0:55:e5:be:05:15:0b:
         9e:a6:30:6a:ec:33:2e:72:06:4b:95:bb:ac:3f:a4:aa:eb:89:
         fa:94:38:d0:2a:b7:3a:c2:02:98:8d:9e:f4:de:d9:da:55:2f:
         da:b4:84:6c:55:12:91:c8:8d:c3:b9:c2:24:8f:54:13:ec:fd:
         a9:24:6a:dc:8a:df:79:a6:e4:e2:ed:c9:53:bd:36:df:22:4b:
         4c:7e:c0:3f:86:d5:ad:40:0f:0a:74:b6:7c:0b:1b:96:10:a0:
         c3:08:95:0d:5c:f1:67:4e:57:49:3a:28:0b:c7:7f:4b:f7:05:
         08:6e:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:00 2025 by rpki-client