Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa
File:                     323830343a363461303a3a2f33322d313238203d3e20323639343339.roa (raw, json)
Hash identifier:          QktKHlVEjAoJJSreQ1gE4MyHp5KmrpUUdQWPe+cumdg=
Subject key identifier:   22:0C:46:2B:05:C3:BF:EC:87:BA:70:64:C1:74:56:5D:95:7D:9A:17
Certificate issuer:       /CN=D95F806F2454B9E12E868A8E309DCB7F1F2BAA45
Certificate serial:       08B23C9215DB1DA96B3333BE95C7EF67C574585B
Authority key identifier: D9:5F:80:6F:24:54:B9:E1:2E:86:8A:8E:30:9D:CB:7F:1F:2B:AA:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa
Signing time:             Tue 20 Aug 2024 13:10:48 +0000
ROA not before:           Tue 20 Aug 2024 13:05:48 +0000
ROA not after:            Tue 19 Aug 2025 13:10:48 +0000
asID:                     269439
IP address blocks:        2804:64a0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b2:3c:92:15:db:1d:a9:6b:33:33:be:95:c7:ef:67:c5:74:58:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F806F2454B9E12E868A8E309DCB7F1F2BAA45
        Validity
            Not Before: Aug 20 13:05:48 2024 GMT
            Not After : Aug 19 13:10:48 2025 GMT
        Subject: CN=220C462B05C3BFEC87BA7064C174565D957D9A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:02:22:3b:f2:c3:23:8a:e6:4b:b8:59:6d:
                    cd:71:c7:ae:79:b2:29:af:05:2b:8f:ad:11:fe:f5:
                    d9:a3:8c:b3:d5:28:2b:6c:9a:00:9a:78:6b:a7:44:
                    c5:5c:2a:8e:da:8b:cf:5d:5d:24:93:17:54:6b:fd:
                    cd:b5:40:43:44:ab:3c:f5:9d:14:ae:6c:b9:52:31:
                    3c:bb:b9:f7:ee:94:37:9c:6d:d9:90:18:0a:3e:0a:
                    76:e9:20:03:61:5f:aa:23:fa:36:c7:56:d0:97:b5:
                    05:c2:81:68:58:73:ab:e8:61:89:76:ac:9c:a8:06:
                    0c:85:c2:20:a2:78:5a:90:d7:46:6e:63:3c:14:c2:
                    71:f3:fb:24:3e:a4:5b:79:85:9c:c4:af:4e:c2:c3:
                    51:22:de:0b:9a:6c:8b:94:fe:55:cd:88:29:87:07:
                    f1:5f:81:1f:95:41:41:10:37:de:07:a8:cd:0b:a6:
                    47:0f:b9:84:6b:e7:21:58:76:7c:42:dd:99:3d:5b:
                    be:90:14:22:3c:11:66:36:8f:db:18:78:ad:95:7d:
                    1d:ea:40:62:8f:58:14:34:e7:16:31:f7:c6:46:1a:
                    cb:c1:96:b5:8f:c1:e3:0c:01:95:02:06:52:2b:e7:
                    e7:4d:42:67:4a:f5:b4:66:ac:8a:6b:dd:be:1f:7a:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0C:46:2B:05:C3:BF:EC:87:BA:70:64:C1:74:56:5D:95:7D:9A:17
            X509v3 Authority Key Identifier:
                keyid:D9:5F:80:6F:24:54:B9:E1:2E:86:8A:8E:30:9D:CB:7F:1F:2B:AA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:47:62:ef:6f:cf:9e:78:2a:32:e0:00:c0:24:c2:28:ef:7f:
         ae:d2:8a:bb:00:66:a1:d3:15:3c:58:38:98:f9:0a:7a:f9:6f:
         2c:26:b0:90:15:67:37:10:6c:63:d7:fa:dc:45:b5:f5:8b:ab:
         8d:a0:24:80:21:c2:e2:86:0a:99:12:af:7c:51:ef:b9:3a:1d:
         be:61:a2:30:a8:ff:cd:18:c5:94:72:93:ce:05:52:8a:8e:74:
         16:5b:c5:ba:60:9a:69:83:6b:e8:a6:f9:49:d4:7e:b3:df:6a:
         cc:70:7f:7a:01:0c:00:65:39:2e:2c:f9:d2:4e:2a:48:19:da:
         c5:e7:f1:eb:60:dc:ec:2e:9b:d4:96:5b:f8:d4:9d:75:ae:e6:
         db:89:e6:18:58:cb:8c:e6:23:29:18:ba:0c:cf:15:10:4b:96:
         9b:b6:ac:0d:55:83:dd:47:2d:c7:49:81:66:8f:6c:fb:45:ba:
         9c:86:67:f7:f7:55:c5:4a:1d:66:c6:39:53:4f:77:24:87:ad:
         39:7a:32:52:41:c6:58:52:9b:2e:4f:ee:06:2d:a5:86:18:a9:
         cf:27:8a:b6:e0:56:c3:84:26:59:50:c5:c7:31:b2:a4:30:d8:
         52:27:80:e4:91:50:9f:f1:96:af:dd:e9:40:84:0a:63:e1:f3:
         b5:6b:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:13 2025 by rpki-client