Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a343030303a3a2f33342d3334203d3e20323632333132.roa
File:                     323830343a333730303a343030303a3a2f33342d3334203d3e20323632333132.roa (raw, json)
Hash identifier:          0mSvcg94wVYVE9FRAaUwnjjY5yWqiq+UnMZlk9PH+q0=
Subject key identifier:   2B:DA:09:FA:61:EF:54:17:6B:FD:E6:A1:AF:EB:72:73:B6:36:9C:00
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       360EB33E437E39D4A72CE0FF26588DB6CC58C654
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a343030303a3a2f33342d3334203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:21 +0000
ROA not before:           Fri 16 Aug 2024 16:21:21 +0000
ROA not after:            Fri 15 Aug 2025 16:26:21 +0000
asID:                     262312
IP address blocks:        2804:3700:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0e:b3:3e:43:7e:39:d4:a7:2c:e0:ff:26:58:8d:b6:cc:58:c6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:21 2024 GMT
            Not After : Aug 15 16:26:21 2025 GMT
        Subject: CN=2BDA09FA61EF54176BFDE6A1AFEB7273B6369C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:92:87:78:47:e0:62:e1:2c:bf:0b:78:25:
                    9b:d5:b3:37:ea:05:c7:53:de:22:41:6d:df:68:4c:
                    3d:24:19:46:53:e7:16:c1:75:ff:a6:2b:9f:17:b3:
                    7a:0a:aa:1e:63:a4:a1:c0:dc:32:80:ba:36:c5:09:
                    eb:43:b0:32:fb:28:9c:60:2c:ae:26:22:79:3c:11:
                    0f:bc:ac:96:dc:a5:9f:ac:0d:1d:26:ba:89:4a:f0:
                    a4:c3:78:5e:85:4d:40:0b:bd:fd:dd:40:74:55:cb:
                    34:4a:5c:bd:de:c4:a3:52:7a:22:41:d7:f0:91:c3:
                    e3:35:c0:28:94:ae:a3:3e:e8:5f:20:c3:92:39:38:
                    b4:29:fb:a3:26:6e:59:39:91:42:11:2e:86:bf:56:
                    3c:0b:58:20:97:06:53:24:30:d3:fa:bf:62:74:28:
                    5e:19:bb:56:f4:bb:ed:80:1a:f8:c5:6e:86:c2:e5:
                    e7:72:0f:e1:0c:27:59:43:b3:d3:62:33:34:39:ac:
                    5b:98:04:17:ab:ae:12:5c:ac:d3:2a:c7:b2:a3:0f:
                    dd:c5:47:7d:9a:17:8b:19:3f:c9:60:de:68:4e:ef:
                    96:79:3a:fb:4d:49:a5:bc:d9:0f:c6:a8:70:a8:74:
                    56:58:98:90:fc:66:37:b0:4d:82:3f:e9:08:2d:82:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:09:FA:61:EF:54:17:6B:FD:E6:A1:AF:EB:72:73:B6:36:9C:00
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a343030303a3a2f33342d3334203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:29:30:df:62:42:33:c7:a7:62:87:e2:67:d3:38:c7:a3:
         ff:b4:db:46:34:26:92:98:fa:52:b7:fd:49:7b:43:d5:9b:26:
         a3:55:71:8d:dd:48:83:77:54:8d:17:c7:b8:8a:3a:25:14:f5:
         8e:82:94:80:7f:17:f3:2b:7d:e8:4e:25:eb:50:de:76:f5:23:
         ef:ce:37:b6:9a:f9:66:09:0f:4c:8c:62:6d:ca:03:38:a0:e4:
         1a:f6:da:c0:ec:cc:6a:c7:54:2e:10:b2:69:26:e2:5e:b8:99:
         07:df:6d:c8:2d:a1:60:17:14:c1:89:a5:a9:b6:53:47:e4:36:
         3f:bf:32:1d:17:76:0b:7d:55:93:3e:65:b7:43:c0:17:07:72:
         1d:0c:84:58:ba:81:3a:79:5e:00:b1:ce:b9:ac:90:e4:74:82:
         0f:e0:15:53:4f:3b:a1:83:b3:b7:c4:1c:30:65:64:44:98:c4:
         0e:8a:96:04:3b:1f:2e:2e:9e:f3:23:3e:2c:ec:82:87:77:87:
         f0:53:ec:cf:30:8d:de:09:af:bb:01:81:af:59:e0:f6:fb:63:
         13:6b:48:8a:17:d7:14:d9:1b:45:8b:2a:59:5e:f4:f2:0e:b8:
         b5:40:1a:54:6e:12:e9:0d:db:61:29:eb:0b:14:f2:f4:94:d3:
         ca:74:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:22 2025 by rpki-client