Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/323830343a6331633a3a2f33322d3332203d3e203532363739.roa
File:                     323830343a6331633a3a2f33322d3332203d3e203532363739.roa (raw, json)
Hash identifier:          3Vd6B2zfKGTmVix6krm0x48et/pzZLZuH7xE8EN6Ep0=
Subject key identifier:   C5:E4:A0:7B:B9:DA:3A:FF:7B:C0:80:3A:BF:30:C3:BE:F5:67:3B:D3
Certificate issuer:       /CN=5AE95251912A145E4AEB5B04A717C015340C0594
Certificate serial:       6857927A9EDCCAF547C8A0AD5272179417C6B94B
Authority key identifier: 5A:E9:52:51:91:2A:14:5E:4A:EB:5B:04:A7:17:C0:15:34:0C:05:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE95251912A145E4AEB5B04A717C015340C0594.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/323830343a6331633a3a2f33322d3332203d3e203532363739.roa
Signing time:             Sat 19 Aug 2023 01:47:20 +0000
ROA not before:           Sat 19 Aug 2023 01:42:20 +0000
ROA not after:            Sat 17 Aug 2024 01:47:20 +0000
asID:                     52679
IP address blocks:        2804:c1c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:57:92:7a:9e:dc:ca:f5:47:c8:a0:ad:52:72:17:94:17:c6:b9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE95251912A145E4AEB5B04A717C015340C0594
        Validity
            Not Before: Aug 19 01:42:20 2023 GMT
            Not After : Aug 17 01:47:20 2024 GMT
        Subject: CN=C5E4A07BB9DA3AFF7BC0803ABF30C3BEF5673BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:29:cb:77:5c:f7:b2:eb:11:f5:89:19:7f:
                    ca:fc:c7:02:ac:a4:56:0f:14:2f:21:67:1e:2b:f3:
                    69:eb:b2:b2:d0:62:4b:b6:c4:7f:7f:49:ed:5c:d8:
                    cb:cb:d8:ff:98:f0:a2:60:cc:22:7d:13:8d:71:03:
                    a4:28:13:44:49:13:5e:c7:0b:55:ca:8d:ab:88:05:
                    6e:ed:46:ed:30:68:0e:06:d5:8c:18:18:37:8a:70:
                    5e:97:29:a0:f5:06:f3:9c:21:93:0f:1b:1e:77:c5:
                    32:09:32:a3:03:93:46:ee:16:c7:15:84:77:44:cc:
                    26:7f:8c:7d:92:0b:32:b0:53:c2:8a:b0:d2:12:fd:
                    cd:81:10:20:7f:e4:d3:92:b5:57:da:66:24:db:85:
                    fd:34:7a:0d:ef:2a:95:4e:58:c7:3c:ca:00:46:d8:
                    17:e5:58:84:0f:7d:8b:79:81:51:f9:e1:33:92:4c:
                    9a:43:40:76:bc:b6:ca:5e:76:c3:c3:01:78:d2:c4:
                    2a:3a:c4:a6:29:21:0f:eb:94:68:78:2d:98:73:36:
                    65:aa:3c:a3:b7:62:0e:1e:bc:75:de:ae:c3:01:64:
                    e4:5c:cb:d8:79:78:6f:a2:2e:10:fe:69:26:ca:84:
                    fa:e3:fb:5f:b3:2f:b6:30:3d:13:58:6b:29:68:9b:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:A0:7B:B9:DA:3A:FF:7B:C0:80:3A:BF:30:C3:BE:F5:67:3B:D3
            X509v3 Authority Key Identifier:
                keyid:5A:E9:52:51:91:2A:14:5E:4A:EB:5B:04:A7:17:C0:15:34:0C:05:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/5AE95251912A145E4AEB5B04A717C015340C0594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE95251912A145E4AEB5B04A717C015340C0594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/323830343a6331633a3a2f33322d3332203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:b7:34:6e:be:3e:2e:d1:74:e8:1c:13:a8:d7:41:be:e2:
         ef:b5:c3:d3:4a:ed:1e:11:b8:c2:c9:a8:aa:e3:6a:e2:7b:e6:
         1e:72:3d:f8:8d:90:6f:8b:a4:f8:49:a7:8d:43:4d:62:fe:99:
         10:86:8d:b7:c0:55:b2:0e:8b:6a:d9:66:ea:57:b6:d8:fb:2e:
         f8:87:19:a0:57:3c:5d:c0:74:a6:ea:94:49:52:0b:13:94:8c:
         4d:1b:35:8b:10:da:43:91:13:27:aa:9a:b5:bd:0b:8a:e3:40:
         f5:62:7e:18:62:06:b0:7f:bc:94:62:1c:cb:f6:74:b6:3c:6a:
         f0:f1:2c:fc:ba:9f:68:3e:64:3a:cf:16:c5:b9:aa:8e:01:d8:
         ba:02:7e:21:15:b8:78:a0:c7:13:9b:1e:38:2d:2d:55:25:61:
         62:d8:ee:4f:37:f0:50:36:9e:a3:25:4f:a8:57:9e:f3:a5:b4:
         63:7b:ce:f5:91:ca:94:40:cf:d3:7d:b4:0f:2a:a1:0d:0e:5e:
         93:b3:a1:4c:13:57:f5:02:05:e4:20:36:18:a6:74:09:db:d3:
         a0:79:21:b1:3e:6b:07:fe:bb:6b:2d:53:4c:fc:35:19:6f:a8:
         5f:e1:25:cd:a3:a5:2e:0f:e8:22:b1:e0:48:12:f8:91:ac:b3:
         10:6d:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:27 2025 by rpki-client