Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a3a2f33322d3335203d3e20323634333439.roa
File:                     323830343a316432303a3a2f33322d3335203d3e20323634333439.roa (raw, json)
Hash identifier:          rOMvT8iKJVZPrhp2CP/mTxkpfFhmRkvgNXlLOVk/w5w=
Subject key identifier:   B1:E7:EA:D0:37:CC:17:5C:BE:FC:32:5D:FC:53:20:A2:EC:69:0D:08
Certificate issuer:       /CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
Certificate serial:       6850373E7350130DE2D39B44EDC6E7C141E28D3E
Authority key identifier: 6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a3a2f33322d3335203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:10 +0000
ROA not before:           Tue 07 Nov 2023 15:14:10 +0000
ROA not after:            Tue 05 Nov 2024 15:19:10 +0000
asID:                     264349
IP address blocks:        2804:1d20::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:50:37:3e:73:50:13:0d:e2:d3:9b:44:ed:c6:e7:c1:41:e2:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Validity
            Not Before: Nov  7 15:14:10 2023 GMT
            Not After : Nov  5 15:19:10 2024 GMT
        Subject: CN=B1E7EAD037CC175CBEFC325DFC5320A2EC690D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:83:2d:00:d8:90:72:23:2d:a3:88:f1:b7:
                    89:9f:6a:6c:a4:1a:9c:d0:26:75:6f:e1:ca:f7:12:
                    28:b2:f5:dc:e3:de:35:2b:85:46:03:22:0a:52:34:
                    a1:28:18:af:dd:70:5d:db:90:3b:3e:8c:fd:e2:31:
                    1a:f4:ac:60:84:27:f6:8a:75:45:55:bc:58:bc:76:
                    16:b1:74:ba:73:71:56:59:ca:1c:8e:73:8b:62:b8:
                    b8:09:f6:2c:3d:38:6c:4f:3b:f3:2a:47:8a:f7:ba:
                    0d:a7:05:4d:82:37:5a:fb:25:a5:6f:06:a7:03:bb:
                    d7:d8:ed:6d:db:d2:97:97:1e:3b:b7:06:1d:f2:cc:
                    e6:11:8e:b2:3e:5a:e8:75:9b:ba:9c:d2:2f:bb:18:
                    e5:37:1d:bc:8e:b9:0c:83:60:d5:2e:7c:cd:88:4f:
                    a6:4c:5c:ec:6f:f7:b8:f9:e5:da:06:f9:76:6a:88:
                    23:36:e5:ab:c3:2e:50:4b:39:58:1e:4d:55:f9:1b:
                    46:c3:8f:6c:6b:69:9b:23:26:ee:cb:6d:a4:59:a7:
                    2a:0a:dc:2b:e3:0f:56:05:3f:17:94:3c:2a:9f:77:
                    7b:85:c2:65:dd:58:19:9f:51:58:c3:5c:fc:09:e0:
                    b8:5f:d4:51:32:36:35:58:55:d9:88:40:31:44:3f:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E7:EA:D0:37:CC:17:5C:BE:FC:32:5D:FC:53:20:A2:EC:69:0D:08
            X509v3 Authority Key Identifier:
                keyid:6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a3a2f33322d3335203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:e5:3a:b2:15:f6:9b:b0:b5:1b:45:41:8b:6e:a4:2e:42:
         0d:78:41:e5:c3:62:3b:c0:ca:5d:36:83:39:be:f4:c4:c4:57:
         0a:4b:40:fd:36:0a:79:92:5f:22:ef:ad:d3:66:ee:f1:a9:fe:
         14:fb:af:22:3d:c3:54:d0:fc:b2:4d:4f:55:df:3b:72:4f:f8:
         12:2a:0c:a4:13:2a:d6:c0:8e:80:99:f5:f2:83:92:94:df:7b:
         b5:7e:10:58:d1:c1:4d:a8:24:53:c0:a3:a7:1e:ba:bd:5b:53:
         41:56:e0:49:da:78:6e:38:13:d9:8b:03:06:9a:b6:59:ac:5b:
         5d:00:68:91:76:27:d8:1c:3b:5f:7e:f7:8e:2f:05:96:5a:7e:
         3f:4a:36:ac:24:25:fd:45:c6:ee:20:57:55:0f:ce:8f:cc:32:
         e6:45:03:a0:52:3d:29:65:cb:a4:21:c7:06:3c:99:6f:50:51:
         4c:ef:8d:71:2b:0d:b5:56:ab:b1:cc:cc:a8:3f:2c:dc:b9:3c:
         b1:b6:f6:2a:c1:ea:0a:5a:eb:50:e7:de:94:3b:38:c3:26:2d:
         8f:b8:62:21:39:c4:80:2a:03:fb:e1:54:93:4e:44:7f:d1:09:
         a2:4f:f4:03:87:ff:f1:8a:bd:8a:44:c9:3d:10:a4:d2:ad:de:
         7c:9f:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:34 2025 by rpki-client