Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa
File:                     323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa (raw, json)
Hash identifier:          LZYmlVXWyjmR6sgwLb5OMrgvjTGNfSMcBlvP7nul0LI=
Subject key identifier:   15:D0:87:69:E0:63:C3:22:BE:6E:FC:22:06:A7:92:FB:43:77:70:CA
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       0B369569D8DF8F4E83B74BEBACF115902F6B26D1
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa
Signing time:             Fri 08 Dec 2023 13:46:39 +0000
ROA not before:           Fri 08 Dec 2023 13:41:39 +0000
ROA not after:            Fri 06 Dec 2024 13:46:39 +0000
asID:                     52531
IP address blocks:        2804:df4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:36:95:69:d8:df:8f:4e:83:b7:4b:eb:ac:f1:15:90:2f:6b:26:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Dec  8 13:41:39 2023 GMT
            Not After : Dec  6 13:46:39 2024 GMT
        Subject: CN=15D08769E063C322BE6EFC2206A792FB437770CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:90:c2:78:48:9d:0b:8d:21:70:0b:93:81:e6:
                    82:3c:59:ed:24:18:3b:8f:ee:38:97:93:14:58:6d:
                    b4:43:72:8e:49:b8:f4:4a:43:64:20:aa:28:51:0a:
                    dc:cf:85:d1:0d:ca:76:42:36:9c:3f:ed:00:b0:66:
                    c7:e2:52:b6:04:1a:c9:c9:d9:fb:fd:d0:5f:51:31:
                    be:b0:71:22:1a:e3:df:94:4a:1b:8e:92:9e:c4:3d:
                    d0:a4:6d:e7:1f:4a:ac:52:8b:2c:32:89:c8:9e:a2:
                    0d:c2:66:62:98:c0:27:11:1d:2b:f8:52:3f:69:a5:
                    eb:50:0f:bb:14:2d:7a:cd:38:ca:b9:f8:0a:14:ec:
                    d2:94:cf:51:d7:13:e8:22:2e:99:79:bd:c3:ad:8d:
                    89:fd:d5:10:57:1d:bf:08:aa:a3:b8:f7:c2:9c:92:
                    1a:be:48:67:55:d1:dc:30:97:a0:83:7d:c8:c2:81:
                    e6:87:bf:e2:b4:bc:8a:ad:cf:7a:a1:09:d2:c0:12:
                    20:0d:cc:4b:0a:3b:d3:b8:e8:ec:18:c9:ca:ea:a4:
                    ea:3e:34:ab:4a:93:15:66:37:4f:25:0d:f9:13:4c:
                    f6:09:fd:14:96:89:34:6a:fb:d9:fe:e5:ee:b4:11:
                    59:0a:1f:f0:40:52:3d:6f:cc:28:13:36:65:bc:21:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D0:87:69:E0:63:C3:22:BE:6E:FC:22:06:A7:92:FB:43:77:70:CA
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:74:b4:cf:8c:13:c4:fb:44:2e:df:06:50:50:47:b8:04:
         a8:ad:aa:cf:9d:f5:89:46:6b:0b:3e:d8:2f:89:fd:d0:7d:62:
         d7:d3:62:8f:ec:e8:30:16:43:e2:28:6c:7e:9d:ce:ee:c7:3d:
         17:3f:ac:c3:8d:21:7d:a5:2d:10:54:40:a9:45:11:96:52:27:
         6b:74:84:4c:81:cc:e3:17:cc:a5:62:3a:b7:db:a6:14:e5:09:
         bd:dd:cc:a6:c7:39:d8:92:fa:32:48:be:0c:2e:b2:d8:bc:4d:
         26:41:c8:8f:50:c0:c0:e2:40:78:7b:c2:9b:9f:43:cf:00:ea:
         4e:63:15:4e:81:a6:d8:bb:13:a0:19:dd:6f:93:81:83:72:07:
         af:34:83:87:f8:c6:8b:4c:51:ac:34:2f:4e:55:5a:98:86:15:
         5a:c4:bf:e2:ff:cc:4d:f5:4a:1f:74:01:2f:9c:bc:02:08:24:
         b1:61:cf:6c:a6:96:86:34:4c:da:47:e3:e1:f3:3b:b5:e2:4f:
         72:46:80:23:ba:4d:e3:a2:dd:ca:c4:ea:05:e9:f0:c2:da:96:
         d5:fe:13:74:a4:f9:92:13:9c:68:97:24:81:2d:bf:b2:81:1e:
         e4:95:cd:9c:c8:34:58:8c:4d:84:3c:c7:74:28:93:61:79:de:
         6c:96:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:20 2025 by rpki-client