Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d3332203d3e20323638383431.roa
File:                     323830343a356236383a3a2f33322d3332203d3e20323638383431.roa (raw, json)
Hash identifier:          T2S40GaAMD6a7LuBbb/CglczfwWEXJdLmZqH4xN04EQ=
Subject key identifier:   F4:05:58:55:BE:90:23:7B:1A:88:81:13:D5:53:83:3C:29:CB:8C:02
Certificate issuer:       /CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
Certificate serial:       24D82B8AB13043BD7F233E0328362B5A0C47D76E
Authority key identifier: 89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d3332203d3e20323638383431.roa
Signing time:             Thu 06 Jul 2023 21:53:44 +0000
ROA not before:           Thu 06 Jul 2023 21:48:44 +0000
ROA not after:            Thu 04 Jul 2024 21:53:44 +0000
asID:                     268841
IP address blocks:        2804:5b68::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d8:2b:8a:b1:30:43:bd:7f:23:3e:03:28:36:2b:5a:0c:47:d7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
        Validity
            Not Before: Jul  6 21:48:44 2023 GMT
            Not After : Jul  4 21:53:44 2024 GMT
        Subject: CN=F4055855BE90237B1A888113D553833C29CB8C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:b3:7f:50:46:09:16:94:81:87:a5:bd:5a:
                    1c:26:e1:ef:f0:e7:64:25:56:ca:7e:46:62:15:0a:
                    52:d6:ae:d1:3c:63:4f:c8:86:3f:ae:f3:28:ea:e1:
                    44:79:d4:c7:0c:98:58:63:23:43:42:bf:79:12:7d:
                    77:eb:15:d2:ef:78:e5:15:9f:d1:ad:9d:d9:90:09:
                    a5:13:04:e5:ca:39:27:3c:3f:1b:5d:dd:03:fd:cf:
                    6d:99:45:be:be:32:e6:fe:73:2b:8b:a6:99:bc:9f:
                    b9:ed:83:f0:0f:ca:82:54:37:8d:18:ef:d9:59:7c:
                    ec:58:6e:a3:ef:b4:40:77:25:5b:f5:40:c3:02:5b:
                    69:3f:fd:c4:e5:12:47:e1:b1:88:ae:31:07:99:45:
                    51:c7:56:2b:43:90:36:cd:a9:91:04:8b:3d:db:93:
                    ef:34:a2:9f:12:18:eb:a8:b4:0a:f0:ff:fc:0c:f4:
                    0e:1c:9f:3f:00:98:1c:2d:42:b6:2c:d2:79:c5:1f:
                    bc:94:2e:e2:d1:cf:c8:05:be:3a:78:96:99:e4:8f:
                    0c:6b:fc:9a:07:8c:83:98:ef:1b:6c:2d:ea:30:fd:
                    6e:67:25:dd:bd:d0:44:cf:55:26:54:87:e3:d0:d8:
                    c9:96:df:2f:ef:1e:69:5e:7a:32:d8:a4:dd:43:71:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:58:55:BE:90:23:7B:1A:88:81:13:D5:53:83:3C:29:CB:8C:02
            X509v3 Authority Key Identifier:
                keyid:89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d3332203d3e20323638383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:62:31:1e:80:a0:f3:e7:53:0a:0f:62:14:0e:22:ea:94:
         19:ce:62:9d:22:4a:db:de:56:e1:81:e9:d4:19:d0:7b:15:82:
         a0:ac:ea:65:4d:1e:3f:ac:30:26:06:2c:6f:d0:83:0e:d0:fe:
         57:45:ce:4c:96:13:e3:e9:79:b8:93:3e:46:bc:2a:d4:c0:b9:
         16:ff:b4:61:b7:ec:da:15:af:17:54:d5:fa:cc:0f:e3:28:0d:
         43:de:de:28:ba:19:78:c3:6f:54:ec:16:85:7d:ef:f8:8c:89:
         84:e3:7a:db:51:1c:e7:62:1f:c2:ee:a1:7a:ec:9f:1d:e5:13:
         08:3a:7c:09:43:e3:48:b7:46:27:34:ed:fa:55:1d:2f:05:d0:
         a4:13:8b:e9:cb:74:34:b0:25:d5:74:c2:de:6e:af:a1:fa:49:
         60:b1:1c:84:c8:a2:f0:b3:f9:1c:49:6b:96:90:0c:91:be:cf:
         59:03:f0:2b:36:ba:cf:49:f1:8f:43:5d:39:85:2c:5d:d2:23:
         0d:dd:15:da:c1:dc:80:51:b5:8f:8d:7e:bc:64:b8:a7:d3:c2:
         3d:28:92:d6:76:d0:9b:d1:4f:f2:25:39:a6:7a:b5:2a:97:7e:
         79:3c:a6:80:4d:c4:08:0c:cb:5a:33:d2:49:14:db:c5:88:ae:
         8c:71:af:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:32 2025 by rpki-client