Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/323830343a313333303a3a2f33322d3332203d3e20323633353230.roa
File:                     323830343a313333303a3a2f33322d3332203d3e20323633353230.roa (raw, json)
Hash identifier:          Fy6kiBi+S5+q+ck2UdWvt7vuW7e7m/IFs6nnVf8u1uA=
Subject key identifier:   E3:68:38:67:74:FA:24:4A:45:39:49:8F:46:71:BD:45:54:6C:C9:B6
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       11AB8556A30D7510B397F8CF6D6DB90E80CE0287
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/323830343a313333303a3a2f33322d3332203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:32 +0000
ROA not before:           Thu 15 Aug 2024 18:35:32 +0000
ROA not after:            Thu 14 Aug 2025 18:40:32 +0000
asID:                     263520
IP address blocks:        2804:1330::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ab:85:56:a3:0d:75:10:b3:97:f8:cf:6d:6d:b9:0e:80:ce:02:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:32 2024 GMT
            Not After : Aug 14 18:40:32 2025 GMT
        Subject: CN=E368386774FA244A4539498F4671BD45546CC9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:32:b5:a2:2d:f6:74:c6:fd:fb:b0:2c:71:
                    ba:08:44:93:b8:f1:e3:1b:17:75:56:4d:68:48:36:
                    1c:01:8b:13:b1:fc:9d:35:60:ea:51:86:d5:44:10:
                    1d:1b:4a:64:a4:b1:6c:81:54:63:7f:5a:73:52:28:
                    95:00:39:f5:76:b3:99:a3:8f:b3:c1:91:68:5f:68:
                    83:b1:69:f9:91:1f:42:4d:1e:3b:b7:4c:9c:b8:5f:
                    af:a5:02:3c:60:ac:88:c4:9d:f1:88:72:7b:37:7d:
                    03:f7:18:8f:01:d1:8e:1c:7d:de:87:17:aa:55:35:
                    c4:4a:06:d3:83:45:cc:2c:63:5a:f1:3d:4c:95:11:
                    2f:7a:29:d0:d4:7d:ea:89:01:e0:ad:e2:b2:be:34:
                    5b:1a:2f:36:02:e9:3a:11:c3:4d:9f:e4:38:5c:f8:
                    d3:f0:a4:14:04:66:ee:3c:4e:00:d7:95:39:23:53:
                    0c:40:a8:ce:24:6d:fb:02:ef:aa:1f:30:ad:99:c3:
                    f7:64:cc:48:5c:2c:d8:5f:0d:d2:71:9d:0e:28:83:
                    60:5b:4f:29:34:91:49:bf:46:e6:36:7a:46:8e:39:
                    1e:5a:06:b4:69:98:d7:cf:f3:74:fe:0b:e8:3b:c7:
                    d4:3a:99:30:2c:d6:16:65:e9:3b:aa:a9:15:f8:63:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:38:67:74:FA:24:4A:45:39:49:8F:46:71:BD:45:54:6C:C9:B6
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/323830343a313333303a3a2f33322d3332203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1330::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:ec:55:ec:8c:b9:e9:ac:db:18:7c:18:6c:48:c3:81:55:
         bb:c7:fb:b9:2b:aa:72:36:83:b7:24:a8:e1:4b:45:40:2b:00:
         ed:d4:2c:04:bc:e6:6c:a6:c3:ee:80:7e:94:07:ad:62:36:71:
         47:3d:ce:92:53:c0:86:37:5f:28:78:00:76:f9:62:b1:10:9f:
         33:ad:57:b8:ab:f6:62:cf:b4:d0:fb:3b:17:06:78:76:4e:0f:
         d2:00:ff:69:78:bf:18:43:29:41:75:13:8b:ba:21:93:72:ed:
         5b:54:b4:31:f7:08:4c:47:c1:43:c3:50:3d:6a:af:46:da:3f:
         f6:9c:c1:d5:42:c6:65:e8:22:54:a0:18:ae:a7:4d:46:c5:bb:
         b9:c1:89:2f:2a:9f:73:ea:aa:f8:1e:c1:36:82:ef:53:2a:e0:
         4f:97:46:ab:45:81:23:60:e2:db:50:c3:19:bf:b7:d5:9c:e4:
         5c:4a:f5:db:7d:63:95:f0:b1:a3:e1:b7:06:09:33:39:0f:4a:
         88:91:6e:14:98:e9:4a:a9:0c:c3:8a:33:69:cf:ce:48:ce:dc:
         3e:63:ce:a0:74:18:6c:d4:b7:b1:fa:81:e8:41:66:66:b2:38:
         be:dc:55:f3:bd:99:73:a1:ab:c1:6c:a2:15:86:c0:c6:7e:fd:
         a9:e0:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:28 2025 by rpki-client