Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/323830343a356333343a3a2f33322d3334203d3e20323638383934.roa
File:                     323830343a356333343a3a2f33322d3334203d3e20323638383934.roa (raw, json)
Hash identifier:          Muc9DIVhXZ2tz2/Dm2grdyMD6YIHfEVCrUa75q8FGjM=
Subject key identifier:   72:10:6B:CC:EC:85:77:3A:38:A5:AB:D4:11:CE:05:69:C0:8A:D2:4E
Certificate issuer:       /CN=DFE5412EB2722EAA777BCCB7B63BB67F319E789A
Certificate serial:       3435333BD8A855047C4A1337068EA1203DAD4181
Authority key identifier: DF:E5:41:2E:B2:72:2E:AA:77:7B:CC:B7:B6:3B:B6:7F:31:9E:78:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFE5412EB2722EAA777BCCB7B63BB67F319E789A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/323830343a356333343a3a2f33322d3334203d3e20323638383934.roa
Signing time:             Mon 16 Aug 2021 20:54:52 +0000
ROA not before:           Mon 16 Aug 2021 20:49:52 +0000
ROA not after:            Mon 15 Aug 2022 20:54:52 +0000
asID:                     268894
IP address blocks:        2804:5c34::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:33:3b:d8:a8:55:04:7c:4a:13:37:06:8e:a1:20:3d:ad:41:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE5412EB2722EAA777BCCB7B63BB67F319E789A
        Validity
            Not Before: Aug 16 20:49:52 2021 GMT
            Not After : Aug 15 20:54:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:0f:2f:b8:80:52:6b:e2:12:f6:27:7d:c5:
                    88:7c:02:f5:4a:d4:02:16:0e:8c:40:59:69:30:d6:
                    18:7f:da:68:9d:24:bf:ac:0c:a5:6f:b9:0d:65:4b:
                    ba:33:99:4f:97:65:23:de:19:38:04:64:51:7e:51:
                    e5:1d:58:91:fb:16:d3:40:42:fc:96:e3:83:e6:95:
                    5a:66:b5:32:41:09:20:50:b4:0b:48:e7:3f:55:26:
                    d7:6a:66:93:9e:9e:3f:e2:35:7f:3f:dc:a3:9e:e4:
                    01:3b:fd:ac:d8:94:a6:3a:01:43:dd:fb:bf:6b:a5:
                    83:85:73:cb:72:c2:a1:2c:d1:ef:fa:89:cc:f9:91:
                    c9:72:26:67:ff:e4:6d:90:0a:1a:66:cf:15:0f:0c:
                    74:86:6e:05:5a:10:84:65:75:24:93:9d:b3:b0:78:
                    d9:d0:fe:b4:d6:a4:76:11:56:f0:b0:31:4c:c6:9f:
                    7a:21:b0:09:0a:38:af:73:3f:0c:a5:b5:d9:44:5d:
                    70:d9:65:41:45:ff:03:5e:65:7d:16:36:32:c6:87:
                    eb:0a:c9:fb:ff:94:ab:d4:21:4a:16:cf:52:49:9f:
                    3e:82:f7:e3:f8:71:cc:53:13:6d:d4:6d:2d:2c:60:
                    6b:0f:59:9e:cf:d3:01:47:9b:25:83:c0:60:75:c3:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:6B:CC:EC:85:77:3A:38:A5:AB:D4:11:CE:05:69:C0:8A:D2:4E
            X509v3 Authority Key Identifier:
                keyid:DF:E5:41:2E:B2:72:2E:AA:77:7B:CC:B7:B6:3B:B6:7F:31:9E:78:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/DFE5412EB2722EAA777BCCB7B63BB67F319E789A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFE5412EB2722EAA777BCCB7B63BB67F319E789A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/323830343a356333343a3a2f33322d3334203d3e20323638383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:92:c6:9a:f1:8d:33:e8:78:95:fa:ad:65:97:22:02:d0:
         f6:ab:ae:42:0f:ae:62:8b:d5:3d:55:30:80:b3:d3:ea:cf:ca:
         da:69:df:87:0c:e9:2b:a3:92:bf:12:b3:bb:b4:a5:79:9a:b4:
         14:45:48:35:40:35:cc:4d:27:7a:c2:56:cc:af:b4:0b:ba:ee:
         82:77:15:f0:f0:85:92:74:6a:f7:e2:cc:a1:86:c7:4a:35:df:
         df:e5:9d:e6:0d:44:ac:bf:ae:64:fd:29:9e:18:84:75:9f:c6:
         74:6e:ea:3b:99:a9:69:46:6a:49:2f:e1:0e:76:c9:16:7d:e7:
         9f:1c:0f:e0:23:7c:64:47:b0:1d:df:9a:de:81:1f:75:30:ff:
         8d:e6:2d:4b:0e:08:c8:92:88:97:0a:9b:c2:58:5d:10:fa:65:
         62:61:ff:4e:7d:74:f3:fa:71:18:e6:62:59:3d:0f:d2:3f:92:
         b1:f7:b2:97:61:3b:ae:86:b2:78:86:5f:09:73:35:ce:05:0d:
         04:07:bc:42:b4:0a:a1:60:e3:6b:bb:64:24:e8:46:64:9b:d7:
         b5:b3:69:2b:67:ef:01:46:a0:f6:aa:8c:55:d8:7a:7d:ba:16:
         cb:9b:2b:ab:d5:01:f7:fa:33:26:b2:f8:26:d2:09:55:7e:fb:
         8d:64:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:30 2025 by rpki-client