Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33342d3334203d3e20323636393231.roa
File:                     323830343a343535633a3a2f33342d3334203d3e20323636393231.roa (raw, json)
Hash identifier:          Eifw6SoRtz/d8xlH5LyXXHPFTG7gm6o8ILD51c+270A=
Subject key identifier:   A5:91:3A:C5:FD:6B:61:68:08:32:BC:14:7D:41:1A:28:DC:DA:9B:91
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       3A2A568B783ADC0F58023BDDAF3CE61FFED721EB
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33342d3334203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:27 +0000
ROA not before:           Tue 09 Jul 2024 14:10:27 +0000
ROA not after:            Tue 08 Jul 2025 14:15:27 +0000
asID:                     266921
IP address blocks:        2804:455c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2a:56:8b:78:3a:dc:0f:58:02:3b:dd:af:3c:e6:1f:fe:d7:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:27 2024 GMT
            Not After : Jul  8 14:15:27 2025 GMT
        Subject: CN=A5913AC5FD6B61680832BC147D411A28DCDA9B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:c8:a6:02:21:4f:a8:81:cb:fe:9d:99:28:
                    37:4f:f8:65:b4:e1:7c:9b:c6:1d:71:7d:0e:9c:f0:
                    f2:c9:c8:16:54:69:0a:e8:18:5c:3e:03:5e:a7:72:
                    64:8a:00:b1:3c:21:39:51:d1:34:43:1b:b5:aa:13:
                    fa:fc:89:e8:66:69:7d:f7:fa:30:84:43:e5:d5:00:
                    cb:6b:2f:ff:f7:ec:77:13:3e:8c:69:f2:51:13:a4:
                    6d:1f:49:9f:b8:4e:24:10:0f:af:95:6a:39:06:a9:
                    c8:6c:2f:08:5e:5e:33:93:09:e7:bf:2a:b1:40:27:
                    ce:54:e7:5b:54:3c:4b:e2:57:7c:00:50:4f:7a:f6:
                    6b:1c:1d:92:a3:ae:db:7c:27:ff:3c:70:c2:20:f2:
                    31:ab:28:ad:18:9a:c4:9d:fc:74:22:c6:e8:29:45:
                    a8:f3:c3:43:fc:84:91:19:80:8c:a1:d8:de:81:bb:
                    2b:79:83:66:e4:ae:0c:81:48:6c:b9:16:4a:09:2e:
                    93:99:e9:3a:0a:25:c7:48:d9:f7:1b:5b:c0:75:a6:
                    4f:1f:7b:b7:78:4d:9e:1d:04:a8:41:c3:cd:44:e6:
                    8d:f2:de:7d:44:b1:2a:ad:80:f5:dc:ea:07:0c:e6:
                    de:d2:eb:c1:6c:fb:8f:22:45:32:e5:65:1b:04:02:
                    1f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:3A:C5:FD:6B:61:68:08:32:BC:14:7D:41:1A:28:DC:DA:9B:91
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33342d3334203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:455c::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:5f:ab:eb:66:c5:96:13:ad:b6:26:35:fc:80:e7:1d:d8:
         b8:36:54:d5:69:4b:83:d5:0e:00:19:d6:e8:22:ce:56:6e:d7:
         96:8e:3f:25:44:0f:e4:a9:20:81:11:f9:21:3a:81:58:65:d2:
         f0:cb:4b:f5:29:f0:10:25:1f:6f:3f:d4:20:a2:6e:8a:57:32:
         15:83:8e:74:a5:98:a9:43:02:19:a5:76:67:ed:c0:3f:0b:ad:
         08:5d:e0:d4:bd:9f:e1:78:51:67:d1:8a:51:2d:85:1a:74:d9:
         14:c5:10:ca:02:26:5d:c4:d7:9e:23:d4:fd:63:01:d2:30:bc:
         0f:39:7e:2a:ed:71:a0:be:46:e6:59:26:93:60:a6:9c:16:2b:
         02:29:e8:51:b9:e6:60:f9:71:b9:2c:f6:93:8d:12:f1:86:e9:
         6c:8d:54:a6:71:39:89:8d:23:dd:aa:d3:50:6e:9c:60:c8:06:
         c1:e4:e2:89:e5:34:74:3b:85:d2:fe:88:d2:75:24:93:12:19:
         54:20:2b:2c:fa:42:e4:a1:85:c8:86:ec:75:51:f6:48:e1:b6:
         e0:4b:18:69:35:19:c8:bf:da:d0:f4:71:09:4b:c0:26:59:1d:
         64:9e:f3:09:9a:7d:ce:50:f6:fb:db:b0:1a:8e:fe:7a:88:34:
         bf:92:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:51:00 2025 by rpki-client