Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3332203d3e20323638393239.roa
File:                     323830343a356363343a3a2f33322d3332203d3e20323638393239.roa (raw, json)
Hash identifier:          u4e0aT6+uwCOQbRRtrI0fau2J8I7gA1sM1MeSH2Fw4U=
Subject key identifier:   78:5F:B5:F4:B6:46:80:1E:3D:73:A3:26:6C:82:6C:C5:78:56:BC:89
Certificate issuer:       /CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
Certificate serial:       138BD7A4D3CA16EAA1FB5C4E87D7EAE511D4AC35
Authority key identifier: 65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3332203d3e20323638393239.roa
Signing time:             Thu 22 Jun 2023 16:50:26 +0000
ROA not before:           Thu 22 Jun 2023 16:45:26 +0000
ROA not after:            Thu 20 Jun 2024 16:50:26 +0000
asID:                     268929
IP address blocks:        2804:5cc4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8b:d7:a4:d3:ca:16:ea:a1:fb:5c:4e:87:d7:ea:e5:11:d4:ac:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
        Validity
            Not Before: Jun 22 16:45:26 2023 GMT
            Not After : Jun 20 16:50:26 2024 GMT
        Subject: CN=785FB5F4B646801E3D73A3266C826CC57856BC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:b1:ea:d9:4b:0d:e2:00:b8:62:cc:37:9d:
                    b4:09:c6:50:a9:6a:ad:75:27:af:f7:8a:bd:28:b0:
                    1d:75:5d:da:ce:b3:d2:58:13:c5:89:ea:37:a6:d1:
                    cd:47:3d:84:8f:61:ca:a6:3a:cc:97:66:90:d7:1e:
                    43:f5:41:40:77:ae:fc:12:e1:b6:e2:df:14:a2:e3:
                    1d:31:78:45:8f:28:bd:46:2f:9e:bc:ef:03:e8:52:
                    94:84:e9:54:98:2e:cd:51:80:bb:60:df:18:d8:d2:
                    75:a9:67:44:42:06:f1:5b:f7:71:77:5c:51:f0:74:
                    63:7a:9a:74:d9:37:fc:2f:a7:24:d2:53:56:4a:7d:
                    78:07:ee:a3:70:a5:69:cf:38:61:11:5a:ab:56:05:
                    40:97:38:fd:12:b5:19:d6:cc:d1:49:fd:58:24:1f:
                    04:19:b2:be:e0:63:1c:ba:f4:b8:24:51:dc:2d:78:
                    54:36:58:9f:28:36:67:85:f4:4e:2b:13:19:f7:25:
                    9f:33:06:4d:12:03:bd:19:c2:8b:a8:50:bd:e5:f2:
                    4a:ae:1d:19:1b:6d:bf:e4:db:88:c6:9b:26:d8:66:
                    5e:a6:e9:8e:cb:f3:96:f8:30:b7:91:f3:de:3b:14:
                    7f:f7:46:b5:27:73:6b:17:fb:10:ba:f2:b8:ec:28:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5F:B5:F4:B6:46:80:1E:3D:73:A3:26:6C:82:6C:C5:78:56:BC:89
            X509v3 Authority Key Identifier:
                keyid:65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3332203d3e20323638393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:a9:ca:f2:fc:fb:86:e6:06:ce:0d:34:0d:c2:0a:93:a5:c1:
         66:f7:fe:5e:4c:0d:06:5b:c2:23:ea:3a:2d:dd:9e:77:5f:31:
         d1:fe:7b:df:aa:f7:6b:7b:16:89:13:6e:44:0b:11:2b:9f:99:
         47:63:0a:20:53:33:e9:26:37:02:d3:cc:94:e2:df:c9:79:cb:
         d1:31:45:ce:9d:0d:ba:63:38:2e:f5:06:99:7f:3b:82:c4:ef:
         d8:07:bd:c2:26:40:15:60:35:14:c4:3f:46:40:bd:b3:90:81:
         2f:60:8c:08:13:ce:93:c1:d5:07:fe:7a:a0:bc:d0:0c:1e:78:
         d1:39:6f:48:e0:34:b6:2d:33:b9:85:6b:da:0c:3e:ee:77:da:
         44:ce:55:01:f1:65:b2:5f:4e:fa:0c:b5:6c:ad:24:3e:c2:02:
         c4:c6:5f:5e:63:ec:97:88:d2:56:a5:41:68:81:6c:5c:4a:77:
         62:f0:71:8a:50:9a:86:47:a6:06:5b:f5:f5:ce:fc:80:8e:a6:
         fe:a1:56:83:92:08:17:77:2f:99:fd:3d:49:4c:b7:22:27:b3:
         d1:23:75:94:2c:d9:bb:56:fd:ec:71:f8:88:1e:61:03:66:9f:
         e0:64:cc:bf:82:c8:3b:17:99:40:91:e7:3f:c4:13:24:0f:f5:
         dd:7c:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:33 2025 by rpki-client