Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          h7anJ+T5P2hw62S5cPYb6T2XpNFpumDPdLA8RGJ/c0c=
Subject key identifier:   1F:E6:28:5C:0F:1A:2D:55:12:81:FD:46:34:69:5E:AC:2F:B2:E7:5D
Certificate issuer:       /CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
Certificate serial:       081EEF313A65CC203665D00BD61908449F043E08
Authority key identifier: 1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Mon 08 Jul 2024 13:06:57 +0000
ROA not before:           Mon 08 Jul 2024 13:01:57 +0000
ROA not after:            Mon 07 Jul 2025 13:06:57 +0000
asID:                     269566
IP address blocks:        2804:6688:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1e:ef:31:3a:65:cc:20:36:65:d0:0b:d6:19:08:44:9f:04:3e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Validity
            Not Before: Jul  8 13:01:57 2024 GMT
            Not After : Jul  7 13:06:57 2025 GMT
        Subject: CN=1FE6285C0F1A2D551281FD4634695EAC2FB2E75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8f:d4:56:b8:45:5d:0d:27:56:35:1e:65:9d:
                    cb:5a:79:46:84:5d:3f:52:04:20:09:59:bb:e4:60:
                    26:75:fc:f3:3f:66:37:42:00:04:b5:a1:3d:4c:23:
                    15:39:13:7a:6a:17:ea:94:59:fb:72:84:b8:71:86:
                    1f:3b:12:f4:0e:15:bd:29:22:bb:92:e3:bb:e4:aa:
                    30:26:36:06:5a:b6:13:4a:45:56:31:cb:e0:15:50:
                    8c:dd:66:14:0b:b8:7d:fe:a4:37:d9:df:01:2c:63:
                    d5:42:90:1b:8a:f0:a5:42:f8:a3:8d:06:8f:08:a3:
                    f0:19:de:7a:d1:02:1e:74:ce:aa:6c:4e:69:8f:ff:
                    f9:40:20:57:5a:d5:af:57:25:a3:02:a5:5c:c2:cb:
                    f4:ff:0a:2a:bc:d4:a8:20:6d:b5:84:2d:85:5a:b3:
                    65:96:5d:b2:6c:d6:9d:02:94:47:46:02:3e:7b:21:
                    3a:6e:91:5e:98:94:29:40:e1:9c:a5:f6:ce:63:6c:
                    b3:75:8d:4b:df:90:05:8d:fc:41:78:d2:04:ac:ef:
                    87:27:7a:e0:b6:a9:d7:83:0e:34:f5:a3:a4:e2:29:
                    b9:57:80:9a:80:12:24:47:f2:26:1a:a2:1a:9c:48:
                    6b:cc:c8:2e:31:85:61:f2:61:69:72:24:52:89:8e:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:28:5C:0F:1A:2D:55:12:81:FD:46:34:69:5E:AC:2F:B2:E7:5D
            X509v3 Authority Key Identifier:
                keyid:1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:f9:b5:b7:fd:a9:d5:60:1a:53:dd:71:62:06:92:6d:66:
         2b:a2:0e:4a:62:63:fd:a4:15:36:fd:26:0e:c7:94:7a:87:65:
         c3:c4:ae:62:37:5e:ef:96:4f:66:1b:18:f7:a0:ee:0c:05:3c:
         92:18:28:9c:db:5b:29:12:b8:5a:9a:9d:01:cf:47:bf:d0:2a:
         f3:cf:56:54:28:5c:6b:53:7f:1b:50:c1:f3:7f:37:59:0a:29:
         ae:d3:b9:7f:2e:02:a7:4e:57:4a:a8:00:d1:24:fe:d3:4c:24:
         fe:a4:80:4b:2e:8f:e3:96:60:e8:e9:12:a6:10:b1:0d:40:52:
         ba:09:4b:c7:51:4e:43:a8:54:71:98:88:bd:31:26:9d:e3:f1:
         5d:6c:12:a4:a4:89:37:bb:fb:5f:09:00:0f:2c:f1:6b:a3:87:
         28:56:72:94:26:1f:02:71:d3:bd:4d:01:b5:97:a6:10:75:64:
         6a:8f:bf:57:bf:c0:a0:61:2b:92:be:cf:40:ac:88:bb:bc:c2:
         7e:58:45:67:98:86:26:31:51:f3:35:38:35:70:1d:c9:36:ff:
         c3:15:d1:76:e2:3e:b6:e7:66:15:74:a1:59:e1:2a:c5:f6:09:
         78:98:fa:e8:b6:06:11:be:83:f7:f5:dc:7a:b8:ca:7d:ef:89:
         73:8e:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:18 2025 by rpki-client