Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33322d3332203d3e20323637363638.roa
File:                     323830343a343530383a3a2f33322d3332203d3e20323637363638.roa (raw, json)
Hash identifier:          uRpQ0G4AXbP8llNYKss3ue/zR/ydZ8vS8FAkSeomx2M=
Subject key identifier:   64:E1:5F:8E:50:EF:A3:6D:B6:11:01:BA:AD:50:51:DE:BE:F7:43:5C
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       478207D5319D263529FEDCF8F48F2C3AF166ED3B
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33322d3332203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:04 +0000
ROA not before:           Tue 13 Feb 2024 19:12:04 +0000
ROA not after:            Tue 11 Feb 2025 19:17:04 +0000
asID:                     267668
IP address blocks:        2804:4508::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:07:d5:31:9d:26:35:29:fe:dc:f8:f4:8f:2c:3a:f1:66:ed:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:04 2024 GMT
            Not After : Feb 11 19:17:04 2025 GMT
        Subject: CN=64E15F8E50EFA36DB61101BAAD5051DEBEF7435C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:a6:b4:8f:e7:f1:81:fb:53:2a:e1:f0:5d:
                    0a:37:c0:1e:0d:22:eb:a7:4b:0f:c4:a4:9f:af:66:
                    2e:71:19:0b:ba:19:92:82:a8:ce:f4:c6:66:45:0e:
                    2c:42:a5:14:9b:ec:92:5f:35:d8:c8:f1:33:64:03:
                    16:6d:19:ce:1d:6f:9e:e8:27:be:9e:13:81:8c:51:
                    27:e4:0b:30:c4:6e:26:37:7f:33:a4:1b:d2:01:41:
                    40:32:98:5f:0b:e6:ab:86:5d:1f:5d:53:ca:18:8a:
                    d0:c1:3c:4a:ff:c3:d6:bd:ef:21:e4:80:a2:b3:74:
                    d0:cf:15:ae:87:9e:80:67:f4:00:e3:4f:d9:64:39:
                    22:51:f9:3c:d1:08:48:e9:1e:d6:f5:22:ca:d3:bb:
                    85:84:f9:92:13:3a:49:ad:cf:87:61:3a:25:80:b4:
                    e6:6c:84:ab:79:e3:64:fb:22:f6:03:db:52:5c:d7:
                    f7:20:27:39:1d:8c:50:7b:7d:4b:dc:21:c9:ca:aa:
                    3c:7a:34:f9:b1:ae:8b:6e:90:11:00:97:d0:d7:89:
                    5d:ad:21:ef:77:93:c7:4b:bc:41:5c:90:01:42:4b:
                    3e:21:41:54:94:0e:73:3c:51:b8:eb:f6:a3:d4:27:
                    15:f6:0d:13:45:c1:7b:04:7c:25:d3:d7:9e:0a:90:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:5F:8E:50:EF:A3:6D:B6:11:01:BA:AD:50:51:DE:BE:F7:43:5C
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33322d3332203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:4f:69:c3:a0:e0:a0:35:b0:ae:86:1d:3d:a7:0c:d4:4f:
         1d:d8:58:8e:46:64:26:6c:45:cb:90:76:8e:b3:38:fb:06:6c:
         61:84:76:48:23:51:e2:8e:0a:0c:20:2b:7b:e5:60:53:0e:2e:
         2a:be:0a:89:bc:d8:f0:d2:0f:50:0e:51:ef:c7:38:e3:ce:47:
         ce:9b:7d:fd:cd:30:81:09:63:16:a1:62:38:50:dd:c9:3b:83:
         8b:b4:3d:8a:8d:15:d3:8d:ef:04:1a:7d:9d:16:fc:84:bc:82:
         a5:f0:ed:02:91:29:46:48:89:5d:df:10:29:34:05:9d:90:16:
         87:ee:7e:c3:96:1f:f3:a2:ac:31:f4:d1:be:4a:1d:ce:60:b2:
         6e:0b:66:42:7f:3b:f7:58:56:7f:e1:e7:cc:a4:e7:82:d0:38:
         db:52:23:4f:12:29:d3:32:3b:2b:f7:1c:06:02:25:c2:59:27:
         69:c5:a0:f4:93:c3:87:82:3e:ba:e2:4f:d4:fa:d9:9f:c1:d8:
         35:cf:67:40:74:b8:84:6e:c4:64:e9:8e:fc:d8:60:5d:e4:66:
         c3:8c:52:7e:18:d1:53:00:1a:84:c0:dd:07:da:68:11:5d:cb:
         37:7a:25:ab:55:ce:3c:c2:fa:b4:27:d4:f6:a6:1a:eb:e0:e9:
         d0:8c:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:23 2025 by rpki-client