Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/323830343a356263303a3a2f33362d313238203d3e20323638383637.roa
File:                     323830343a356263303a3a2f33362d313238203d3e20323638383637.roa (raw, json)
Hash identifier:          eih8B0KtycMZn4+yG94vRTPbeG5DROq5goI/MJuFJDQ=
Subject key identifier:   34:E3:46:D9:51:9D:BC:2E:DA:39:D2:C1:B6:2A:E9:93:54:B7:A9:70
Certificate issuer:       /CN=A65E24713246C08915D514F09D9BE439ABDB1DE7
Certificate serial:       29528A49414D935AB384FA70319F73C3AF2FEC99
Authority key identifier: A6:5E:24:71:32:46:C0:89:15:D5:14:F0:9D:9B:E4:39:AB:DB:1D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/323830343a356263303a3a2f33362d313238203d3e20323638383637.roa
Signing time:             Wed 28 Feb 2024 17:05:21 +0000
ROA not before:           Wed 28 Feb 2024 17:00:21 +0000
ROA not after:            Wed 26 Feb 2025 17:05:21 +0000
asID:                     268867
IP address blocks:        2804:5bc0::/36 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:52:8a:49:41:4d:93:5a:b3:84:fa:70:31:9f:73:c3:af:2f:ec:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65E24713246C08915D514F09D9BE439ABDB1DE7
        Validity
            Not Before: Feb 28 17:00:21 2024 GMT
            Not After : Feb 26 17:05:21 2025 GMT
        Subject: CN=34E346D9519DBC2EDA39D2C1B62AE99354B7A970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:f4:b1:42:43:9a:ca:5f:35:d6:09:96:ca:
                    a0:f5:11:bb:c4:0b:05:de:07:37:de:06:9e:62:c1:
                    71:c4:22:08:07:a4:c7:ac:a5:d9:b6:a2:f2:fe:02:
                    4c:55:d7:c7:0c:8c:c0:44:04:47:25:75:e4:91:1c:
                    da:3b:99:66:b3:5f:c4:d0:80:28:68:14:b4:2e:9b:
                    dc:23:cf:3d:3f:36:3c:85:cf:08:9a:b8:fb:4e:1c:
                    9b:1b:d3:22:12:ea:4d:61:2e:8d:51:3b:df:4f:d3:
                    1d:eb:a2:03:80:2d:6b:f1:80:7f:df:d8:51:49:e5:
                    9e:0b:b2:26:2e:26:dd:1d:bf:92:b0:af:17:e1:f7:
                    7d:01:a2:41:77:d8:85:4d:12:84:06:b4:47:4d:da:
                    14:92:3f:78:46:bb:f0:b2:e3:da:f4:4a:6b:03:b1:
                    38:a4:79:b0:e6:84:94:fb:a5:4b:dd:a8:f6:3e:7a:
                    a7:03:35:5c:b8:38:c8:84:63:a7:b8:85:d0:98:3e:
                    2b:16:04:d5:ae:3a:2c:30:1b:7a:8b:e3:21:d8:04:
                    37:3f:45:97:3b:bf:5d:87:dc:3e:4a:6c:da:99:70:
                    e0:66:54:36:f2:c5:c0:02:1c:0e:f2:ca:26:9f:d2:
                    15:d9:62:04:a6:13:72:10:6e:09:16:2c:2e:0a:dd:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E3:46:D9:51:9D:BC:2E:DA:39:D2:C1:B6:2A:E9:93:54:B7:A9:70
            X509v3 Authority Key Identifier:
                keyid:A6:5E:24:71:32:46:C0:89:15:D5:14:F0:9D:9B:E4:39:AB:DB:1D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/323830343a356263303a3a2f33362d313238203d3e20323638383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc0::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:d8:f3:76:ab:99:36:ed:cd:80:86:1b:90:d7:82:51:2e:
         85:99:88:cc:04:83:d5:4d:2b:45:93:80:86:48:51:c1:38:a4:
         5e:d7:85:24:8b:a6:51:0f:97:dc:af:b4:18:2f:1c:aa:ca:93:
         df:92:ae:26:01:07:0f:59:39:5d:30:a9:45:80:59:ad:60:c4:
         3f:4d:29:ce:0b:49:22:c3:17:b6:65:2d:e5:4f:ad:91:ed:70:
         59:fa:1d:6b:2c:85:b3:3e:4f:0f:23:51:47:9f:72:77:e3:2e:
         fb:c6:ea:a9:e9:2b:3c:8c:68:cc:0a:1a:ca:6b:d8:f4:ec:d6:
         c0:9c:d9:4b:8c:0a:03:67:d3:33:57:32:fb:9a:c5:80:fd:0e:
         0a:26:8d:d8:64:f4:84:d0:1e:47:24:cb:2e:fe:75:df:33:3a:
         8b:c2:8b:47:5f:4f:5b:79:6f:67:98:78:7a:d1:4c:bc:23:83:
         f9:4c:0a:02:99:0c:23:41:3a:d6:a2:b4:e3:f5:2e:2b:68:d9:
         0c:44:4b:7a:ab:e7:6b:dc:15:96:69:18:e7:6b:78:c6:cb:7f:
         c0:46:ba:47:ef:e3:d6:3f:b8:98:60:05:59:fd:81:b8:e2:40:
         b7:c8:52:5e:32:70:ad:c9:d0:19:d0:88:af:cb:c8:26:35:c7:
         7b:ca:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:52 2025 by rpki-client