Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313132323a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313132323a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          6YrfrL17oKH20t1vwp1rKUhMwOcsWcW0dRUeJ1WuJrQ=
Subject key identifier:   AF:72:FE:62:ED:67:AF:57:53:4E:91:D2:F1:6B:ED:23:82:5C:9F:9F
Certificate issuer:       /CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
Certificate serial:       3B6B9E124C111A017B83C87A4EBD1DBC7A3BC5B4
Authority key identifier: 1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313132323a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Mon 08 Jul 2024 15:32:27 +0000
ROA not before:           Mon 08 Jul 2024 15:27:27 +0000
ROA not after:            Mon 07 Jul 2025 15:32:27 +0000
asID:                     269566
IP address blocks:        2804:6688:1122::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6b:9e:12:4c:11:1a:01:7b:83:c8:7a:4e:bd:1d:bc:7a:3b:c5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Validity
            Not Before: Jul  8 15:27:27 2024 GMT
            Not After : Jul  7 15:32:27 2025 GMT
        Subject: CN=AF72FE62ED67AF57534E91D2F16BED23825C9F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:3f:84:73:07:d2:1b:be:2b:93:cc:bb:7a:
                    08:0b:92:63:db:c2:70:e1:bb:77:7f:bd:57:48:d2:
                    e8:0c:0e:3e:5b:56:14:ed:00:61:30:0e:67:47:83:
                    67:f7:cc:22:2f:e5:f7:6c:a9:bd:6a:9e:64:89:be:
                    f3:2c:51:04:0b:85:3d:66:24:87:06:f1:73:7b:ed:
                    8b:a8:71:9c:66:4f:67:a5:e0:12:67:48:82:ba:2e:
                    f6:80:9a:93:b9:11:a0:ee:d3:96:08:00:59:36:f9:
                    d8:22:06:41:aa:a7:58:63:fc:8c:2a:f5:98:dd:49:
                    ac:15:b6:a1:2c:68:e4:05:25:ee:2e:78:9e:9f:f0:
                    54:62:3b:68:60:2e:26:15:54:e1:21:62:93:2c:a1:
                    b0:04:3a:6e:15:15:6e:00:65:80:15:40:b3:82:9e:
                    97:87:95:aa:2b:cc:ed:7b:c2:37:77:38:cb:2e:b8:
                    d1:92:db:8b:3f:7f:c3:a9:5d:db:73:e7:99:14:d7:
                    33:d3:6d:4f:98:25:dd:f1:be:82:8b:f3:00:ad:fd:
                    28:d3:a5:f5:5c:51:f5:45:0e:f1:6c:55:42:4b:25:
                    77:8a:f8:b7:3e:a0:c1:af:8d:02:60:36:6e:a3:34:
                    a9:38:e3:bf:45:c4:5f:0c:98:ee:1c:95:74:02:f3:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:72:FE:62:ED:67:AF:57:53:4E:91:D2:F1:6B:ED:23:82:5C:9F:9F
            X509v3 Authority Key Identifier:
                keyid:1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313132323a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1122::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:d3:48:7d:68:78:07:11:cf:b3:4d:9d:f1:0b:ca:3c:b2:2a:
         5e:96:27:52:8a:a4:fb:20:a7:e5:51:9a:f6:4c:90:52:28:25:
         90:13:3b:12:b7:61:b6:ed:24:df:7a:b5:57:dd:22:71:85:81:
         67:52:26:f2:5d:e3:3e:a4:26:57:79:8e:82:85:13:10:70:f6:
         e2:22:ad:06:25:30:c6:42:3b:c2:64:8e:62:75:a4:d7:ef:5d:
         56:36:e0:6c:19:0a:7c:cd:73:af:c0:e6:94:a7:f9:44:83:89:
         2a:63:32:4d:db:7c:50:41:b8:43:d6:90:a7:fb:20:a2:46:c6:
         8a:fc:3b:0d:3d:62:49:47:c1:c1:9a:ab:19:40:27:8e:59:48:
         9b:a1:94:c9:4d:ff:44:17:71:84:9d:ab:10:77:c1:2a:d6:c5:
         ef:23:6c:1b:1e:28:71:2e:40:96:0d:b8:23:06:07:83:68:ef:
         23:e0:77:d5:dd:f3:0e:2c:32:72:b2:79:70:77:3a:77:db:62:
         a3:36:b9:3e:b6:34:d7:77:38:92:95:94:df:18:0e:aa:d9:e7:
         76:01:e0:19:81:c3:85:39:f0:66:61:5d:66:d9:58:e7:7a:76:
         81:3b:bf:d8:a3:cb:42:11:d8:08:25:97:0a:5f:9d:d6:4f:9e:
         8a:5f:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:22 2025 by rpki-client