Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a383030303a3a2f33332d3333203d3e20323632353337.roa
File:                     323830343a3563303a383030303a3a2f33332d3333203d3e20323632353337.roa (raw, json)
Hash identifier:          ijbU4mDzT6aYTmIAo5r3V4LigNo2DWwf1t5I6okNYG8=
Subject key identifier:   9C:4F:8D:E3:D9:B3:B7:FF:C7:45:B1:A4:6A:BF:CA:ED:EE:73:A1:F9
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       1B7853DD261ECD60B2877E256EB8185A354A53E7
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a383030303a3a2f33332d3333203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:39 +0000
ROA not before:           Fri 06 Oct 2023 18:47:39 +0000
ROA not after:            Fri 04 Oct 2024 18:52:39 +0000
asID:                     262537
IP address blocks:        2804:5c0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:78:53:dd:26:1e:cd:60:b2:87:7e:25:6e:b8:18:5a:35:4a:53:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:39 2023 GMT
            Not After : Oct  4 18:52:39 2024 GMT
        Subject: CN=9C4F8DE3D9B3B7FFC745B1A46ABFCAEDEE73A1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:3b:34:9a:11:3e:90:45:e4:0e:ce:4c:1e:
                    ea:9a:65:4f:3c:16:31:57:ab:d0:4a:f9:79:9e:1b:
                    38:94:d6:9f:da:14:17:88:aa:ea:54:99:d3:da:df:
                    5d:a8:9c:71:9f:53:57:83:04:10:80:97:44:c5:df:
                    c3:f0:39:e2:d6:57:2e:7a:ae:bd:6b:ed:78:29:39:
                    f6:f9:85:34:da:c3:80:d4:6c:97:c4:98:41:4c:4f:
                    b4:7b:70:f0:3d:6a:3e:64:c9:8a:5f:ad:75:ff:7a:
                    58:a8:26:3f:4d:62:ef:60:2e:29:9a:73:ba:24:cc:
                    28:74:02:1f:5d:43:94:55:98:6d:11:b0:15:66:20:
                    06:7e:cf:aa:c1:bb:15:4c:ed:08:5f:5a:5e:bf:82:
                    47:73:5f:0b:0a:7a:a6:c4:49:be:c8:f7:e5:bf:ed:
                    e3:d0:7f:78:5c:a2:83:5a:03:89:11:8b:13:e0:38:
                    c0:85:78:47:34:ef:7c:b0:55:ac:35:05:13:ce:0a:
                    cf:56:1a:9b:c6:7f:9b:47:b2:3a:45:09:1a:d6:b2:
                    2b:ec:25:3a:76:0d:3d:74:c6:bb:18:1e:84:d9:20:
                    78:3b:ef:12:4a:8a:ca:66:98:a3:e0:e3:1d:bb:a0:
                    ef:5c:be:1f:d2:0a:b1:41:15:48:00:3f:a5:a3:cb:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4F:8D:E3:D9:B3:B7:FF:C7:45:B1:A4:6A:BF:CA:ED:EE:73:A1:F9
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a383030303a3a2f33332d3333203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:23:96:e4:73:82:50:67:6b:cb:03:0e:d3:f8:e3:57:37:e6:
         2e:47:ea:da:73:ec:dd:8b:3a:3d:11:2d:67:75:52:25:ee:8b:
         d0:87:0f:79:b4:05:6b:a9:68:9e:bf:ce:01:d9:0d:e6:9f:18:
         9e:54:af:e7:4a:6e:b7:fc:f2:40:13:4d:c5:32:9a:02:0e:08:
         fb:20:6e:53:f3:b2:af:4d:11:ba:75:97:3d:bc:33:66:6d:2f:
         34:ad:2c:80:22:1b:4a:d7:7d:ea:cc:d2:7f:f5:07:03:92:97:
         ac:63:a0:70:b9:b7:ed:f4:aa:e4:35:07:5d:d5:27:de:37:30:
         3e:21:18:f1:cc:e6:4e:7a:25:64:7d:48:82:ff:24:ed:01:c5:
         fe:7f:c8:d2:ba:29:78:3c:e9:e4:39:7b:bd:c0:ff:bc:bc:54:
         ad:25:e3:01:36:cf:3e:fe:2b:f3:14:09:0f:8d:cc:92:d6:b7:
         f0:e0:ec:a3:9b:9f:3a:9a:f8:51:ed:8b:d7:08:c1:ab:a1:f6:
         1e:e6:03:d4:99:87:99:01:b4:cd:ab:c0:86:5f:54:a1:54:86:
         22:e9:03:16:2f:4f:ca:2c:15:8d:aa:69:04:09:6a:ce:9d:0f:
         2e:98:c7:a4:55:18:7b:0a:0a:09:dc:78:5d:8f:03:45:8b:60:
         f5:cf:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:35:04 2025 by rpki-client