Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33322d3332203d3e20323636393231.roa
File:                     323830343a343535633a3a2f33322d3332203d3e20323636393231.roa (raw, json)
Hash identifier:          YurWLZTNx56wRNLKeBIDo8tKyuacScmfUqr/OxtMkKc=
Subject key identifier:   03:F4:47:6F:41:C4:6F:06:D0:31:CB:6C:FF:20:8D:99:95:0B:11:26
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       5B26766FA77FB5F5CE7B21761D5BE5FDB759B7EF
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33322d3332203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:28 +0000
ROA not before:           Tue 09 Jul 2024 14:10:28 +0000
ROA not after:            Tue 08 Jul 2025 14:15:28 +0000
asID:                     266921
IP address blocks:        2804:455c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:26:76:6f:a7:7f:b5:f5:ce:7b:21:76:1d:5b:e5:fd:b7:59:b7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:28 2024 GMT
            Not After : Jul  8 14:15:28 2025 GMT
        Subject: CN=03F4476F41C46F06D031CB6CFF208D99950B1126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:bf:07:d3:db:44:bd:65:be:75:e4:c5:da:
                    43:99:67:ff:aa:9a:3c:5e:df:75:19:8f:32:41:dc:
                    b1:55:03:1a:26:c8:71:9e:ab:2b:2d:f2:38:85:72:
                    73:d0:c2:64:f0:44:6d:dc:2b:fc:17:dc:42:70:60:
                    9b:09:c9:07:7b:f5:c6:45:04:26:7c:26:a8:54:ea:
                    87:8b:a7:ec:25:57:05:49:a0:14:fa:22:52:96:79:
                    39:83:e3:7c:44:bc:13:29:50:ae:f7:21:23:0f:c4:
                    66:21:9a:eb:f2:ce:a8:a5:c8:a9:fa:1d:b5:d5:f6:
                    12:df:60:e7:5a:5e:31:6a:12:3b:1f:0e:d7:e1:ab:
                    37:7e:31:e3:20:e6:13:8a:73:11:f5:fe:b6:ee:29:
                    30:e4:1e:bf:f6:a3:80:d5:94:9d:c6:7d:64:87:7f:
                    34:95:50:94:60:c6:65:87:bd:3f:ef:6c:82:d7:4b:
                    56:ef:75:0b:69:df:24:91:c5:be:26:ab:77:3f:bd:
                    e3:f3:2d:9b:38:79:b0:af:2b:65:fa:8a:1d:b6:6d:
                    96:ab:89:be:e8:5b:ed:4e:d7:70:8d:1a:4d:18:b8:
                    1d:c3:f6:4e:4b:08:42:2f:d4:f1:04:99:0f:2a:bf:
                    60:d0:6d:e6:13:00:3d:a8:bf:40:98:7a:8a:8e:4b:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:47:6F:41:C4:6F:06:D0:31:CB:6C:FF:20:8D:99:95:0B:11:26
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33322d3332203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:455c::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:be:56:9d:1a:ef:91:79:76:00:9d:5e:a6:51:d5:71:12:56:
         88:7a:5e:7c:2c:23:59:50:2d:4f:af:25:2a:fa:b8:7d:c8:94:
         2b:34:89:81:4b:4c:c1:64:28:10:bd:95:75:39:9e:01:f8:11:
         fe:db:1c:b5:59:46:cf:81:be:16:03:cd:ce:80:1a:d7:f3:fa:
         b8:30:d4:1d:da:63:ce:10:5a:81:a9:84:88:23:c8:d7:8c:24:
         ab:67:7a:22:7b:d4:9c:1e:e0:00:7b:7c:c0:64:36:68:69:7d:
         31:dd:ee:ac:d9:e5:d7:8b:a1:51:c0:0c:ca:64:18:33:4d:58:
         94:4b:d8:55:e8:eb:98:4b:b7:bd:20:a3:ff:d8:10:5e:54:a5:
         88:d1:81:0f:01:18:fc:2f:e3:e2:1d:e2:e6:f6:af:09:00:40:
         41:6d:7a:58:24:32:da:1b:3b:6f:ef:88:2d:f1:57:59:aa:b9:
         48:04:a9:5c:f0:71:34:bb:1c:65:39:35:fd:b0:c0:57:bb:53:
         cb:65:5b:b7:ee:82:4d:d8:21:d4:fd:9a:ee:ee:b3:83:0b:2a:
         df:cb:ab:74:d0:ec:88:da:37:93:ba:f6:9f:de:b0:c9:39:2f:
         92:14:86:27:8e:8d:76:ee:3a:43:e2:7c:45:96:c4:37:d6:6c:
         5d:30:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:04 2025 by rpki-client