Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a363030303a3a2f33352d3335203d3e20323636303430.roa
File:                     323830343a333961303a363030303a3a2f33352d3335203d3e20323636303430.roa (raw, json)
Hash identifier:          Cav1S3Q1QjuFqYI4+Cbi8fmBLmmXi9i7Ye+KNg6kAfo=
Subject key identifier:   92:0C:95:92:9B:F4:21:A3:DE:2B:0E:D7:21:A6:D9:02:37:CC:FB:1E
Certificate issuer:       /CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
Certificate serial:       5DD8967175EB05E8A29C0724BED5FD5BEA73F338
Authority key identifier: 18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a363030303a3a2f33352d3335203d3e20323636303430.roa
Signing time:             Thu 07 Mar 2024 13:26:18 +0000
ROA not before:           Thu 07 Mar 2024 13:21:18 +0000
ROA not after:            Thu 06 Mar 2025 13:26:18 +0000
asID:                     266040
IP address blocks:        2804:39a0:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:96:71:75:eb:05:e8:a2:9c:07:24:be:d5:fd:5b:ea:73:f3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
        Validity
            Not Before: Mar  7 13:21:18 2024 GMT
            Not After : Mar  6 13:26:18 2025 GMT
        Subject: CN=920C95929BF421A3DE2B0ED721A6D90237CCFB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:d5:14:d7:f0:35:78:6b:f0:20:35:96:d0:
                    bf:c7:77:89:b2:7b:8b:91:32:51:0d:71:02:c5:c5:
                    4a:17:39:43:2b:bf:24:0d:5d:98:65:0f:fe:fb:fb:
                    ef:7f:33:49:9c:b3:7d:39:88:f9:c6:51:3c:93:55:
                    55:96:0c:1a:78:05:a6:be:93:44:5c:13:bb:45:5a:
                    d1:0c:f3:5b:cb:34:34:7c:26:df:68:9a:8f:4d:41:
                    10:06:fd:6d:85:05:d8:4b:0b:6d:1c:9a:9d:84:b3:
                    c2:58:1f:7b:b0:d2:39:bc:87:cd:f9:48:05:cc:ae:
                    b3:75:48:5b:6f:67:42:d9:4b:71:c7:cb:48:c0:2d:
                    52:05:e6:dd:c9:0f:a5:49:95:39:e7:89:8a:7f:0e:
                    32:f8:4a:1a:cd:02:dd:7c:a6:8a:d6:41:7d:92:16:
                    5a:86:e0:b6:8e:ee:14:d1:bd:3c:82:70:be:36:b2:
                    e0:f9:00:65:6d:22:00:17:c0:b6:26:07:d6:5e:1a:
                    cd:34:83:2c:c7:a7:67:51:90:bb:c8:e2:6b:f9:e2:
                    73:f7:ac:e9:18:ab:94:17:35:26:bf:26:6f:f1:18:
                    a9:15:ef:30:41:ac:83:1e:69:3e:30:38:ac:cf:4b:
                    2e:f6:b0:8a:6a:47:86:81:0e:01:46:d6:c8:68:f2:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:95:92:9B:F4:21:A3:DE:2B:0E:D7:21:A6:D9:02:37:CC:FB:1E
            X509v3 Authority Key Identifier:
                keyid:18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a363030303a3a2f33352d3335203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:30:77:42:9e:73:87:3b:96:13:fb:dc:95:96:1e:09:5d:
         b5:a2:74:68:fb:c1:b1:fb:ed:d1:0b:77:a7:06:87:f5:29:8e:
         0f:f8:89:e7:c1:b7:23:19:b5:f1:dc:7e:bf:df:3e:7e:2a:4a:
         35:ef:4c:79:fa:50:4a:0c:75:0f:4b:26:14:02:a9:e9:5f:5a:
         12:f1:a6:6e:2f:3f:7e:4a:4e:fc:13:cb:e4:e4:17:43:ba:d7:
         1e:78:36:a9:1c:96:4c:3e:b6:9e:4a:06:4d:06:35:54:1e:39:
         b8:28:26:be:ee:95:f3:d7:b1:0c:4b:9f:83:2a:96:b3:8f:ea:
         39:57:fe:5c:a6:11:a2:c1:13:32:60:47:34:a4:c0:78:5a:be:
         bb:e4:46:b4:72:f7:c2:27:5e:48:ba:5c:86:1b:9f:8d:52:d2:
         d5:5f:f0:88:ea:7e:26:40:e7:b5:25:2d:ce:9d:3e:ea:0a:ca:
         51:10:f4:26:3f:0a:43:eb:87:a4:16:11:94:f6:9a:9d:1c:f7:
         4a:e8:2e:ab:a4:02:42:ed:ab:b4:b1:ff:a1:9d:df:3e:f7:57:
         f8:c0:fb:82:68:ad:2b:76:ce:ec:fe:79:74:20:7d:17:fe:4b:
         3c:52:25:97:f6:f3:2d:e3:19:13:0b:94:e7:23:53:3b:cf:b5:
         4a:cd:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:10 2025 by rpki-client