Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/323830343a6131633a3a2f33322d3334203d3e20323632373237.roa
File:                     323830343a6131633a3a2f33322d3334203d3e20323632373237.roa (raw, json)
Hash identifier:          KIJl7MWpMJLupuERt6WDWj2t+2d0Zehv51cFcbPJ4U8=
Subject key identifier:   82:EA:14:40:82:2B:5F:C8:DB:B4:D8:50:C2:3A:D5:54:C6:84:CB:58
Certificate issuer:       /CN=EF08A46E7F0139B6793DF7AE1772FEA66C73E614
Certificate serial:       7587B4DC998A10C2BE559E005ED8C43E993EE7B2
Authority key identifier: EF:08:A4:6E:7F:01:39:B6:79:3D:F7:AE:17:72:FE:A6:6C:73:E6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/323830343a6131633a3a2f33322d3334203d3e20323632373237.roa
Signing time:             Sat 04 Nov 2023 02:28:13 +0000
ROA not before:           Sat 04 Nov 2023 02:23:13 +0000
ROA not after:            Sat 02 Nov 2024 02:28:13 +0000
asID:                     262727
IP address blocks:        2804:a1c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:b4:dc:99:8a:10:c2:be:55:9e:00:5e:d8:c4:3e:99:3e:e7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF08A46E7F0139B6793DF7AE1772FEA66C73E614
        Validity
            Not Before: Nov  4 02:23:13 2023 GMT
            Not After : Nov  2 02:28:13 2024 GMT
        Subject: CN=82EA1440822B5FC8DBB4D850C23AD554C684CB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:73:b3:88:4e:c2:5f:30:62:22:cd:30:6a:
                    9e:c6:a5:0e:f9:62:a7:43:b2:9f:f2:b9:fb:f0:1c:
                    f3:f8:86:64:75:a8:4d:38:3d:bb:f5:b9:00:f7:4a:
                    5a:25:3c:f8:fb:c8:52:98:27:eb:31:11:e4:21:de:
                    d2:52:86:60:19:06:67:4a:ae:95:3f:d8:62:15:d8:
                    2b:73:1b:09:94:4c:17:5b:99:60:66:2e:f2:76:f1:
                    23:9a:58:93:82:af:87:94:f3:e2:29:2e:f3:62:99:
                    42:3d:71:ac:85:e5:88:57:f6:a4:fc:79:fa:06:4e:
                    04:81:0f:9d:b9:bf:82:90:be:9b:9a:c5:c6:4c:80:
                    4d:a5:fb:81:e0:70:d9:f1:2c:ed:2a:ca:0c:99:01:
                    c6:64:ea:d3:4e:8c:7e:b7:98:76:b0:c9:77:f2:72:
                    b7:16:46:a7:03:e3:99:78:30:85:7e:02:45:56:24:
                    0e:b4:52:98:f7:c8:ac:d0:51:98:4c:30:50:76:c0:
                    8b:2b:1c:72:ee:dd:19:73:07:e6:17:0c:a6:1c:dc:
                    9c:77:be:3b:01:fb:6d:c1:90:90:7e:fe:47:ed:04:
                    46:13:80:b3:97:f1:0f:6b:4e:dd:e6:cd:e5:fc:6a:
                    ca:f2:09:fb:e7:74:2b:0e:d0:18:97:fc:da:aa:34:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EA:14:40:82:2B:5F:C8:DB:B4:D8:50:C2:3A:D5:54:C6:84:CB:58
            X509v3 Authority Key Identifier:
                keyid:EF:08:A4:6E:7F:01:39:B6:79:3D:F7:AE:17:72:FE:A6:6C:73:E6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/323830343a6131633a3a2f33322d3334203d3e20323632373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:fe:c0:f8:0d:e5:24:7c:16:78:b0:be:ae:94:8d:fe:8d:
         20:28:73:6d:c7:83:d7:00:7a:79:38:81:f1:f6:2f:cb:d3:69:
         16:1e:55:8b:96:93:dd:e6:95:83:dc:17:92:e3:23:37:85:95:
         57:6a:61:ea:e7:cf:3c:77:c7:9e:9a:91:7d:79:78:96:2d:06:
         7c:fb:e8:19:1f:4a:c2:f8:11:c2:de:b3:e7:77:67:0c:ea:a5:
         3e:84:af:85:7a:7c:0d:88:4e:fa:28:2e:d1:b4:be:31:5a:1a:
         18:61:83:01:5c:e3:21:22:db:77:55:e0:31:c9:ea:8e:cc:a3:
         5e:c7:0d:8a:b7:61:9a:63:d2:03:85:d1:12:f3:95:fc:3f:1b:
         fd:d6:ff:b5:64:8f:85:66:db:07:6f:95:a1:a7:1d:1e:9d:57:
         a9:df:74:6a:72:c5:d1:a9:8e:be:fc:72:e0:9c:49:89:fe:a5:
         0c:1a:e2:95:91:45:7c:1d:36:b2:2b:5f:b7:a5:b3:17:45:74:
         3d:ca:34:fd:78:87:c0:8c:22:c0:01:51:0d:c6:84:fd:b9:a5:
         85:3b:42:56:1c:ac:2a:77:7d:99:c0:43:2e:59:9d:82:4c:91:
         9c:1f:17:9a:2b:8d:b5:01:2a:e3:3e:91:84:f6:91:9a:50:06:
         b3:1e:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:20 2025 by rpki-client