Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a633030303a3a2f33342d3334203d3e20323638393637.roa
File:                     323830343a356435633a633030303a3a2f33342d3334203d3e20323638393637.roa (raw, json)
Hash identifier:          BTZ4diB9XKG3kOmlM/M6Ef2teyb0qnEQLJbTAf+nztQ=
Subject key identifier:   04:CA:4D:30:6E:25:F2:69:75:89:47:8F:F3:DE:0E:90:2C:54:43:41
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       4D6CDC46E01ED1115AD64CD3A5D082A0D21EA9ED
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a633030303a3a2f33342d3334203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:33 +0000
ROA not before:           Tue 05 Sep 2023 14:04:33 +0000
ROA not after:            Tue 03 Sep 2024 14:09:33 +0000
asID:                     268967
IP address blocks:        2804:5d5c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:dc:46:e0:1e:d1:11:5a:d6:4c:d3:a5:d0:82:a0:d2:1e:a9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:33 2023 GMT
            Not After : Sep  3 14:09:33 2024 GMT
        Subject: CN=04CA4D306E25F2697589478FF3DE0E902C544341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fc:bb:3f:72:24:7a:2e:3f:b6:2f:3f:47:fc:
                    e4:b7:54:75:18:ca:5d:91:d9:86:b3:93:f5:f0:5d:
                    c1:04:dc:ae:79:3f:26:b4:0b:49:d1:41:b3:f0:e9:
                    26:b7:04:55:80:76:af:df:fb:8d:52:1d:3a:c4:b4:
                    bc:03:00:fe:21:b1:32:63:db:00:3e:e7:98:6e:06:
                    95:bf:c8:70:0b:a1:0c:a3:ca:d0:85:d2:7e:72:9d:
                    c7:18:bd:fa:c8:38:fd:c5:05:48:ea:57:f9:7b:56:
                    7a:7e:d2:ed:dc:2b:57:86:4c:11:b7:3e:8d:56:0a:
                    9f:02:bd:8b:bd:0d:7a:84:35:ca:e4:ea:58:34:02:
                    0c:3d:c9:e4:2c:e0:b1:dc:d5:c0:4d:ce:de:7c:ff:
                    b3:4f:29:75:ee:57:2f:f5:43:0d:19:a7:68:82:da:
                    bb:34:cc:14:e8:27:c4:be:c9:9e:7f:7a:d7:f9:9e:
                    79:d6:d1:64:fc:db:5c:3e:0c:28:45:0b:8b:04:70:
                    7a:80:58:e4:0c:6d:f4:39:2f:50:13:34:a7:f9:23:
                    e5:f0:89:4c:8e:98:dd:af:a8:1a:ab:d9:66:bc:3d:
                    0b:38:ed:c9:30:38:a2:bf:11:9e:a2:a3:92:80:52:
                    30:e2:5e:78:b5:1e:9a:3b:d1:2e:0f:9f:a9:65:31:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:4D:30:6E:25:F2:69:75:89:47:8F:F3:DE:0E:90:2C:54:43:41
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a633030303a3a2f33342d3334203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d5c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:8e:1f:0b:98:64:73:69:a8:e8:3e:4c:c2:41:70:bb:43:c3:
         d3:5e:22:57:58:1f:d2:a5:a4:ab:46:b2:f5:56:12:5a:42:0f:
         b7:6c:5c:98:b0:ef:7d:e9:83:b9:11:a6:3a:78:22:64:d5:9a:
         0d:82:d1:28:31:0f:d1:f9:59:fe:e5:a4:c2:e2:ae:f0:68:3e:
         5b:65:3b:79:30:2c:50:d1:8b:54:92:0f:95:35:0f:1b:b9:fe:
         8f:0f:b7:c7:46:48:0f:44:02:69:35:7f:3c:30:b8:34:aa:bc:
         ff:fe:be:d1:88:09:ff:fa:7c:d9:19:25:64:23:18:a7:f8:40:
         3d:d1:08:13:c6:59:fe:7e:d7:75:16:9d:e6:0f:a3:83:a4:48:
         25:02:07:3c:fd:9a:20:db:68:de:bd:06:03:af:b5:79:03:77:
         d9:64:66:b4:43:fc:95:a1:c2:3c:86:33:56:8a:f8:5f:38:a8:
         f3:c0:15:c7:bf:c6:67:8b:18:2b:bb:58:04:d7:4c:58:26:a6:
         9c:c1:b8:db:68:63:d2:df:cb:f8:bd:d0:79:04:93:f4:ac:56:
         db:52:22:25:81:97:52:65:e5:17:22:14:68:88:96:23:64:39:
         86:3c:bf:f3:62:40:b9:bf:f0:fa:20:57:76:19:98:05:87:3c:
         05:64:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:15 2025 by rpki-client