Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a633030303a3a2f33342d3334203d3e20323633343131.roa
File:                     323830343a313563633a633030303a3a2f33342d3334203d3e20323633343131.roa (raw, json)
Hash identifier:          Z73jOti1jJBMY+nbKyJbDv9bWkCt44H9SqmNROjls7c=
Subject key identifier:   7A:3E:DD:2B:4F:37:CE:80:49:72:6F:BD:F4:8D:21:D8:B5:5B:96:53
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       21BB12E569E3306E65906744DE1CAA58A46CED56
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a633030303a3a2f33342d3334203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:03 +0000
ROA not before:           Tue 30 Jan 2024 14:51:03 +0000
ROA not after:            Tue 28 Jan 2025 14:56:03 +0000
asID:                     263411
IP address blocks:        2804:15cc:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bb:12:e5:69:e3:30:6e:65:90:67:44:de:1c:aa:58:a4:6c:ed:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:03 2024 GMT
            Not After : Jan 28 14:56:03 2025 GMT
        Subject: CN=7A3EDD2B4F37CE8049726FBDF48D21D8B55B9653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:9f:65:bd:d3:2d:c2:bb:5c:d2:67:6d:e5:
                    f8:39:d4:7f:83:b6:2a:99:39:cf:2e:99:da:b4:3d:
                    f0:df:50:a8:a2:d3:59:f7:a0:4e:69:b4:05:4a:cc:
                    88:51:2a:2a:33:37:fe:93:69:de:23:23:6a:32:11:
                    af:b6:18:af:a2:7a:3a:37:81:1a:08:9d:53:80:3c:
                    c7:a3:19:48:2d:6d:71:2e:85:7c:20:78:79:80:18:
                    ff:05:51:e2:57:a0:d7:2c:4b:8c:70:db:83:3e:90:
                    9b:a0:d9:91:48:a9:71:5d:ae:83:11:a3:6f:cb:8d:
                    f1:e7:c7:80:4e:71:27:95:2a:b5:d0:b7:15:f6:94:
                    41:18:0d:44:84:9b:d4:99:63:1e:e3:e7:8d:aa:15:
                    d6:84:07:09:4c:bc:86:41:38:0b:3b:be:41:26:02:
                    71:5b:7f:7e:0c:3a:5a:29:a0:3d:c0:56:01:eb:35:
                    af:31:fd:b1:b0:f4:26:51:76:6d:6f:04:bb:ef:4d:
                    51:0c:98:cf:04:95:f1:41:0d:8f:74:72:ee:7f:20:
                    8e:b4:3a:56:4f:09:ea:8f:d6:6a:02:ae:27:8f:a8:
                    cd:c3:58:f9:8f:26:18:48:6e:26:bb:e2:03:6b:dd:
                    d1:4e:a0:79:4d:30:4a:82:94:f0:a6:3f:27:88:db:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:DD:2B:4F:37:CE:80:49:72:6F:BD:F4:8D:21:D8:B5:5B:96:53
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a633030303a3a2f33342d3334203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15cc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:62:a4:0f:ac:d3:2f:5f:c7:b2:ec:83:48:8f:ca:8e:98:77:
         11:6f:d4:cd:84:98:60:82:10:d7:53:5b:e0:b9:42:28:5f:e7:
         1d:e8:cb:24:ea:8d:2d:6c:0b:12:48:e6:00:cf:6b:7a:08:05:
         6c:a2:d3:14:4f:5a:45:ac:4d:88:8d:6b:79:6e:90:1e:6a:68:
         41:45:04:ab:2b:12:f8:db:73:22:b5:50:ca:0b:9a:13:26:31:
         9b:19:6a:1b:de:18:26:ad:65:5a:5b:fe:94:8e:67:a8:b6:b3:
         03:b7:e8:a4:47:d8:83:f2:42:99:9f:38:ff:11:2d:98:99:f2:
         40:3c:18:c4:97:3a:e8:01:5b:f2:f6:da:7a:4a:08:0b:6e:65:
         12:b4:69:91:f5:55:3b:c1:5f:85:a8:c1:e4:ca:5a:21:86:3e:
         72:5b:f7:a8:89:78:41:bf:cc:a5:83:48:29:ba:16:a3:ff:b2:
         ce:e7:a1:99:c9:f9:44:9e:22:f7:1f:f8:74:83:78:1f:e4:df:
         f5:1a:7f:ca:3c:3f:a8:f5:d4:c5:ea:c5:4c:8b:01:e4:f5:b6:
         f5:9c:87:09:47:79:fa:47:d0:c9:4d:b6:f1:b3:77:2c:28:6b:
         b9:41:6e:d1:3a:eb:0d:6a:76:58:36:44:0b:33:26:b4:5a:b4:
         81:11:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:03 2025 by rpki-client