Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a3a2f33322d313238203d3e20323632353835.roa
File:                     323830343a386637303a3a2f33322d313238203d3e20323632353835.roa (raw, json)
Hash identifier:          mT60PmRXYOfxNx8KBhXDDjRWZPJCUc5ejw4wwKq745c=
Subject key identifier:   AF:CA:9C:B8:FF:3B:33:6B:B8:A7:1D:53:16:20:AC:43:E6:94:61:E0
Certificate issuer:       /CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
Certificate serial:       0EC84D32B0D13B6A3B12E5593D6738F132221CF9
Authority key identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a3a2f33322d313238203d3e20323632353835.roa
Signing time:             Thu 16 May 2024 18:25:06 +0000
ROA not before:           Thu 16 May 2024 18:20:06 +0000
ROA not after:            Thu 15 May 2025 18:25:06 +0000
asID:                     262585
IP address blocks:        2804:8f70::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:4d:32:b0:d1:3b:6a:3b:12:e5:59:3d:67:38:f1:32:22:1c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
        Validity
            Not Before: May 16 18:20:06 2024 GMT
            Not After : May 15 18:25:06 2025 GMT
        Subject: CN=AFCA9CB8FF3B336BB8A71D531620AC43E69461E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:13:38:00:e7:e8:e7:94:aa:ac:12:4f:65:
                    c6:cf:ad:d7:48:5c:c4:f3:44:0b:b1:d5:9c:1a:a7:
                    0e:ff:14:d0:1d:2b:3e:45:18:63:a2:d3:19:11:f3:
                    9c:23:0f:3e:00:cc:c1:19:63:1c:8d:2f:24:c4:ef:
                    b7:65:97:c0:94:9d:3a:2f:31:42:b6:a9:39:e9:c0:
                    38:5c:b9:87:2b:01:bb:55:df:87:86:d6:18:a2:49:
                    fc:9d:2c:fe:66:68:2f:ac:36:c1:e7:1f:da:6f:e1:
                    d5:98:48:f2:63:cf:78:d8:28:66:b2:8b:a9:7c:e8:
                    a2:d7:75:35:f7:a1:18:ee:8d:e7:77:a6:66:03:f1:
                    a0:21:18:a4:8f:d8:cf:1e:f9:d2:6d:0b:df:3d:b1:
                    04:42:bd:ce:85:7a:1f:2c:a2:70:be:17:45:53:1a:
                    66:e9:02:3b:53:95:f6:ca:43:35:b2:88:b7:d0:a9:
                    e0:47:4b:56:65:54:01:15:aa:4e:89:88:0e:35:75:
                    ae:24:cb:a7:af:0c:a8:dc:49:bd:b0:d3:0c:1f:e7:
                    9b:8b:8d:d4:56:aa:7f:10:8d:5d:b5:ef:05:26:ea:
                    cb:ec:1d:7a:03:f3:1f:ed:08:01:e4:34:ea:3a:50:
                    cc:8b:52:b0:c9:5b:6d:a7:77:01:ed:f1:0c:f3:12:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CA:9C:B8:FF:3B:33:6B:B8:A7:1D:53:16:20:AC:43:E6:94:61:E0
            X509v3 Authority Key Identifier:
                keyid:2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a3a2f33322d313238203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:46:60:4b:ed:a3:d5:5c:62:84:52:85:0a:bc:10:00:cf:
         fd:aa:74:49:5b:27:ec:c2:f3:91:d3:b0:8d:92:90:4d:80:12:
         64:1c:d5:a5:48:9a:0d:79:b9:45:dc:09:64:69:af:79:88:bb:
         18:b6:15:18:cb:ba:8f:89:cc:85:61:8a:53:99:8d:12:7c:dd:
         4d:64:31:a9:f6:75:a7:b9:c3:d3:72:2c:3f:6c:70:5b:be:79:
         02:5c:0c:7b:f5:62:85:69:9b:be:2f:ac:e1:ce:a9:1c:ef:ec:
         f5:ba:f9:7b:ac:b0:0d:bb:85:58:33:09:03:47:90:4d:3b:70:
         fb:49:52:59:cb:a1:c1:6e:0e:64:9b:eb:e6:21:2e:22:79:33:
         58:ef:d1:81:0e:7a:84:c4:56:70:cc:63:17:fc:85:13:53:33:
         5e:1a:b1:af:40:b0:7f:48:1d:76:3e:7a:94:7a:26:29:8f:bd:
         3d:9f:30:c0:96:72:3b:70:03:7d:05:15:8a:d3:72:39:45:c2:
         c8:0c:53:4b:86:9d:15:32:a9:d5:e5:72:d9:16:18:98:b9:0a:
         1c:0c:88:8e:05:f9:ab:f1:ae:35:c2:a6:28:b8:5c:26:3d:23:
         61:62:7b:38:79:b9:a1:58:5e:33:5b:18:7e:06:72:34:e1:78:
         f0:2a:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:21 2025 by rpki-client