Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/323830343a383632633a3a2f33332d3333203d3e20323732363236.roa
File:                     323830343a383632633a3a2f33332d3333203d3e20323732363236.roa (raw, json)
Hash identifier:          TK+/TUEX3bUmtbvpWOTwIs7xBBmnH7eoq9Sj1FMN/VY=
Subject key identifier:   26:38:AC:D0:DC:13:B4:66:32:1F:3C:B8:0A:3C:6A:3E:2E:A6:78:E8
Certificate issuer:       /CN=AB37C9B50E507E0AE13B0A071E9FF4BC6E39881B
Certificate serial:       38A60A8756ED40AF8923EAD9FF69D5AB9D142970
Authority key identifier: AB:37:C9:B5:0E:50:7E:0A:E1:3B:0A:07:1E:9F:F4:BC:6E:39:88:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB37C9B50E507E0AE13B0A071E9FF4BC6E39881B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/323830343a383632633a3a2f33332d3333203d3e20323732363236.roa
Signing time:             Fri 22 Sep 2023 20:04:36 +0000
ROA not before:           Fri 22 Sep 2023 19:59:36 +0000
ROA not after:            Fri 20 Sep 2024 20:04:36 +0000
asID:                     272626
IP address blocks:        2804:862c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a6:0a:87:56:ed:40:af:89:23:ea:d9:ff:69:d5:ab:9d:14:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB37C9B50E507E0AE13B0A071E9FF4BC6E39881B
        Validity
            Not Before: Sep 22 19:59:36 2023 GMT
            Not After : Sep 20 20:04:36 2024 GMT
        Subject: CN=2638ACD0DC13B466321F3CB80A3C6A3E2EA678E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:08:6c:cb:24:2e:c4:d2:aa:ca:47:1f:9b:
                    f1:8d:55:87:29:53:ce:2b:6e:87:cc:6a:81:49:89:
                    73:a5:bf:d0:e6:3f:e8:f7:66:33:0f:24:54:a8:c3:
                    4e:91:15:3c:ce:77:6f:9d:b4:43:36:31:a8:ee:b2:
                    60:de:45:a8:42:99:2a:1e:8c:8b:9e:09:5c:98:b9:
                    68:03:a2:36:db:43:10:86:89:3d:99:1c:71:a2:7a:
                    26:d6:23:bc:1c:15:21:2f:da:78:e5:02:02:44:a6:
                    a9:8d:2a:b8:e7:d5:3f:da:6a:ca:51:9e:f4:30:9c:
                    33:f5:44:d4:ca:4b:41:f0:f1:cf:5d:17:15:25:fc:
                    dd:9e:22:c6:70:78:9e:64:d2:8b:66:3f:d9:25:2b:
                    5e:ba:16:93:29:17:00:9d:d8:97:4c:c0:7e:de:f5:
                    e2:1f:71:6c:48:83:a0:6b:1a:b6:0c:c4:4f:a8:99:
                    18:5e:6c:0d:8b:76:bc:44:5d:27:cf:6c:69:aa:76:
                    a9:68:19:6d:cf:0b:b8:cf:65:19:fa:f4:94:5e:18:
                    91:6c:69:d4:3b:bb:c2:c7:54:f1:f7:62:90:5f:51:
                    70:46:b0:8b:87:33:a1:14:52:00:65:e5:da:12:68:
                    c1:d5:3b:5d:2a:1e:3e:cf:ff:b5:bc:98:01:d0:00:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:AC:D0:DC:13:B4:66:32:1F:3C:B8:0A:3C:6A:3E:2E:A6:78:E8
            X509v3 Authority Key Identifier:
                keyid:AB:37:C9:B5:0E:50:7E:0A:E1:3B:0A:07:1E:9F:F4:BC:6E:39:88:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/AB37C9B50E507E0AE13B0A071E9FF4BC6E39881B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB37C9B50E507E0AE13B0A071E9FF4BC6E39881B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/323830343a383632633a3a2f33332d3333203d3e20323732363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/33

    Signature Algorithm: sha256WithRSAEncryption
         c4:85:b1:d5:f6:ef:a7:44:3b:07:78:d7:ff:3b:81:7c:d9:5a:
         fa:3e:51:be:43:bc:f9:35:23:3c:ae:8a:8d:e1:2b:8a:0d:1f:
         12:fd:f6:e9:d2:41:17:37:f3:83:fd:81:b2:ff:78:c8:17:42:
         0a:54:fc:48:c7:e0:b9:81:c2:51:70:8b:9a:ac:f5:da:43:93:
         eb:9f:77:46:58:47:e7:a1:42:ff:b9:bf:7f:30:6a:92:54:88:
         8f:22:a9:68:c1:34:04:09:ce:5a:c0:5b:a3:5e:4b:5d:d2:63:
         d6:91:1c:f5:13:2a:77:04:9b:a7:88:0b:69:7c:6e:92:a1:c9:
         4b:a9:c0:a7:55:f4:7c:c7:62:38:e5:50:b6:35:fa:8d:34:8d:
         42:ca:a1:f8:eb:f4:f8:7f:8f:f6:ca:d2:60:a9:93:a1:f4:de:
         97:15:e4:fc:74:b1:3a:b2:10:67:69:56:41:0b:6e:d3:b1:0c:
         4a:8a:f0:f8:6f:54:86:40:44:e5:85:fc:f7:91:b8:7e:c5:31:
         8b:d4:b7:c2:50:1f:7e:bc:23:a3:0c:f0:8b:c9:91:11:a9:2c:
         38:6d:91:d7:de:f5:91:5b:5c:e9:f2:ae:88:a7:69:a8:41:46:
         09:f5:d0:ca:c0:cb:29:31:27:99:bf:2c:80:77:3a:e6:97:2e:
         32:db:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:58 2025 by rpki-client