Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a3a2f33322d3332203d3e20323632353337.roa
File:                     323830343a3563303a3a2f33322d3332203d3e20323632353337.roa (raw, json)
Hash identifier:          44JVPEcE4Kt10VRafYBAG5pUeUC2NPcOXUNfvGR3rqc=
Subject key identifier:   79:6F:1F:F2:F0:CE:11:7D:04:3B:EF:84:29:E5:44:C5:56:02:51:EF
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       44C034493DB5F47C6508B6C2F2321D743471C0E6
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a3a2f33322d3332203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:38 +0000
ROA not before:           Fri 06 Oct 2023 18:47:38 +0000
ROA not after:            Fri 04 Oct 2024 18:52:38 +0000
asID:                     262537
IP address blocks:        2804:5c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c0:34:49:3d:b5:f4:7c:65:08:b6:c2:f2:32:1d:74:34:71:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:38 2023 GMT
            Not After : Oct  4 18:52:38 2024 GMT
        Subject: CN=796F1FF2F0CE117D043BEF8429E544C5560251EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:7b:91:d3:db:6a:5c:41:6f:86:4d:94:86:
                    11:fd:a3:a9:6b:e1:60:2a:ed:b5:aa:bf:56:ac:4a:
                    5b:f0:c7:f6:45:fc:1d:d3:f9:fe:2b:0e:86:08:f1:
                    62:45:7c:8b:ea:2a:6b:ac:b9:8d:4f:7c:7d:09:97:
                    bd:08:ca:2a:8c:b8:36:dd:26:55:46:9d:db:ac:5e:
                    77:c9:a7:bf:88:8d:b2:f1:14:db:da:6c:6c:bc:7b:
                    8d:12:8f:d4:72:78:5b:5e:b9:5a:22:ab:2b:21:66:
                    05:5d:e4:6d:d7:72:09:62:16:ed:c0:03:27:92:3a:
                    07:b8:9c:dc:25:19:f7:c8:28:32:61:a4:c9:98:25:
                    d9:8b:44:17:25:09:c9:87:87:d4:d5:51:d9:e7:92:
                    36:91:f4:f2:09:46:87:5e:87:7f:64:0d:8a:e3:ea:
                    31:b5:4c:86:05:82:8b:04:f8:26:5e:67:13:0f:08:
                    83:c8:b6:dd:c0:4d:3d:39:bb:1f:df:69:82:b9:76:
                    13:18:36:1b:94:ad:cd:5a:93:54:c9:a2:06:a9:d4:
                    3e:a6:34:40:a3:64:71:33:bf:ae:e6:90:24:c9:fb:
                    39:f9:da:9e:7f:8e:2e:2d:fd:57:56:78:38:aa:d6:
                    96:01:d3:07:83:3e:dd:21:c7:37:0d:d5:21:6b:d8:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:1F:F2:F0:CE:11:7D:04:3B:EF:84:29:E5:44:C5:56:02:51:EF
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a3a2f33322d3332203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:93:cf:02:49:09:01:b1:2e:60:e5:f7:13:3b:b2:83:cd:ca:
         04:13:4c:d6:39:84:16:19:20:3e:fd:7f:b9:2b:18:a1:41:8a:
         f0:9f:45:f1:93:c9:08:45:8b:82:9c:82:13:dd:82:f9:3f:b0:
         e7:2f:62:ee:9e:66:83:c5:07:6f:3a:02:40:6a:d1:1b:ba:4f:
         e7:f5:c3:fc:4b:69:7e:9a:77:b4:80:3d:33:e2:d0:c2:ac:b6:
         98:81:58:2d:aa:b9:27:4d:fb:0a:5a:d5:18:81:21:07:89:ad:
         b7:2e:58:fc:d2:66:72:f0:43:5f:68:e5:57:77:04:65:23:3f:
         c3:b6:4d:b9:dd:7f:41:d3:7f:0e:c3:47:e6:c4:11:1a:04:a8:
         77:38:f2:79:5c:a8:a3:b2:e2:d9:d5:ec:be:72:f2:4b:96:8d:
         81:42:f2:57:3e:7b:cb:0d:91:d6:ec:0c:83:7d:1b:66:d8:f9:
         e5:1a:3d:ed:c4:80:6c:a9:55:f9:5e:c4:9f:14:08:b6:6c:bf:
         18:c8:06:a3:23:b8:e9:af:39:54:a0:aa:c4:e9:62:a4:f9:63:
         80:77:6b:3d:4d:5d:63:39:67:37:72:05:fd:0d:7c:e5:15:a3:
         e1:e4:37:24:86:78:f9:39:9b:66:4f:73:73:03:f4:c2:8c:42:
         b2:f0:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:51 2025 by rpki-client