Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa
File:                     323830343a363765343a3a2f33322d313238203d3e20323639363537.roa (raw, json)
Hash identifier:          /ora91HBjRbrlCAMuMFJRTgoSciFUFW74vEGooSyxKs=
Subject key identifier:   2C:79:63:4A:85:07:00:86:89:7A:1B:0D:CE:22:C7:27:A1:18:AF:95
Certificate issuer:       /CN=B3946A372075D6C3B9F81EEA0143749803BCA6C3
Certificate serial:       793D5DC2C52ED33C6629C50E6D9E0EC187AF334A
Authority key identifier: B3:94:6A:37:20:75:D6:C3:B9:F8:1E:EA:01:43:74:98:03:BC:A6:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3946A372075D6C3B9F81EEA0143749803BCA6C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa
Signing time:             Tue 20 Aug 2024 13:28:02 +0000
ROA not before:           Tue 20 Aug 2024 13:23:02 +0000
ROA not after:            Tue 19 Aug 2025 13:28:02 +0000
asID:                     269657
IP address blocks:        2804:67e4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3d:5d:c2:c5:2e:d3:3c:66:29:c5:0e:6d:9e:0e:c1:87:af:33:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3946A372075D6C3B9F81EEA0143749803BCA6C3
        Validity
            Not Before: Aug 20 13:23:02 2024 GMT
            Not After : Aug 19 13:28:02 2025 GMT
        Subject: CN=2C79634A85070086897A1B0DCE22C727A118AF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:0e:78:19:ce:43:80:9a:80:55:75:0f:b7:
                    3a:a2:87:4d:e4:a0:87:1e:bf:76:fe:69:dd:63:e3:
                    81:97:14:80:cc:26:84:0b:42:4a:92:e5:97:99:fb:
                    bd:51:34:3c:f8:c2:5e:7d:02:c8:67:d3:fc:48:aa:
                    3b:a3:1b:08:28:01:18:67:c2:25:f5:9f:0f:fc:21:
                    46:92:a6:3f:02:56:42:8c:e8:af:7e:33:b6:ab:c6:
                    b5:9a:9c:57:01:3c:77:a4:d0:aa:69:dc:08:9d:16:
                    0d:e3:e3:6d:eb:e6:73:96:61:ff:9e:ef:73:df:49:
                    e4:37:90:08:24:f4:fd:60:45:aa:c3:ac:e7:a5:51:
                    e4:98:d9:3e:b1:dc:1f:50:0e:c2:68:f6:c5:0d:5c:
                    70:51:f6:66:dc:b0:1b:4d:af:2e:5a:f3:bf:25:09:
                    4b:86:e7:ef:24:07:97:ba:ea:6a:49:27:85:05:03:
                    7a:44:98:9d:0c:5a:e0:b6:74:a5:e7:2c:c1:31:d2:
                    0c:c9:4e:cd:eb:50:93:c3:2e:70:a7:ab:ea:a7:95:
                    75:96:0e:31:c5:90:ae:d6:16:88:53:0e:20:5d:7b:
                    6c:4d:25:7d:e9:51:c6:b4:fb:9c:90:23:59:c2:e2:
                    ea:4f:dd:6d:67:a2:ea:af:01:76:08:cb:27:16:32:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:63:4A:85:07:00:86:89:7A:1B:0D:CE:22:C7:27:A1:18:AF:95
            X509v3 Authority Key Identifier:
                keyid:B3:94:6A:37:20:75:D6:C3:B9:F8:1E:EA:01:43:74:98:03:BC:A6:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/B3946A372075D6C3B9F81EEA0143749803BCA6C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3946A372075D6C3B9F81EEA0143749803BCA6C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:70:c2:68:3d:2f:f2:38:f0:99:ca:53:cb:7c:36:0d:e4:
         30:28:97:09:de:3a:da:2a:41:5a:6e:0c:f8:21:61:29:2f:2a:
         c5:d7:9f:bf:b5:be:83:aa:ee:cc:6f:8f:6f:ea:d9:bd:97:2e:
         dc:9a:75:d3:90:d8:6c:5b:d4:50:e6:f0:1a:5a:41:84:0e:01:
         2b:3d:45:97:6c:54:c3:8a:c7:db:18:38:f3:a6:ea:a3:b0:67:
         f1:1b:4c:d6:c8:7f:b0:ed:11:95:f9:6d:b9:0e:af:cd:b1:cc:
         70:d1:34:68:dd:52:58:8e:f8:36:5f:62:56:46:82:88:4b:61:
         05:58:e1:3b:95:ce:c6:7a:85:96:f9:bb:c7:dc:54:bc:75:fd:
         4d:d8:7f:53:be:cd:2d:34:94:09:6a:77:e0:08:1f:3c:6b:94:
         a5:11:18:63:a5:f5:e0:8f:35:e5:20:55:bb:0a:61:e8:cf:3d:
         ba:b5:82:b7:24:ea:25:63:09:ff:47:e6:dd:e2:2e:02:7b:07:
         26:d4:e7:23:7d:cd:7d:12:16:6e:ee:99:d6:34:43:15:7c:84:
         2a:ba:c5:21:44:f4:3d:f7:a5:b7:3f:60:cc:ff:94:7c:b1:9e:
         65:6e:66:71:f7:4c:5c:c0:01:61:06:75:47:df:76:35:65:21:
         8f:35:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:36 2025 by rpki-client