Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a3a2f33322d3430203d3e203532353331.roa
File:                     323830343a6466343a3a2f33322d3430203d3e203532353331.roa (raw, json)
Hash identifier:          oA//rjngpHAulWUWXZWGOKdF6Boe+sW8c76iAAk7SDY=
Subject key identifier:   A7:A4:D2:BD:AC:75:A0:B9:A3:78:54:22:DD:F1:7E:65:7E:A8:4B:88
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       04DF0EE403EEB65B7EBBF5C902C4D812FE13CBA5
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a3a2f33322d3430203d3e203532353331.roa
Signing time:             Fri 07 Jul 2023 18:40:02 +0000
ROA not before:           Fri 07 Jul 2023 18:35:02 +0000
ROA not after:            Fri 05 Jul 2024 18:40:02 +0000
asID:                     52531
IP address blocks:        2804:df4::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:df:0e:e4:03:ee:b6:5b:7e:bb:f5:c9:02:c4:d8:12:fe:13:cb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Jul  7 18:35:02 2023 GMT
            Not After : Jul  5 18:40:02 2024 GMT
        Subject: CN=A7A4D2BDAC75A0B9A3785422DDF17E657EA84B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:b7:ff:22:09:7c:2e:ba:ec:65:c9:1d:02:
                    a1:d1:cd:86:aa:0b:ee:e5:15:2c:cc:b2:70:6b:96:
                    8b:24:e9:a3:2c:4e:a4:70:d2:62:ac:13:fe:61:a8:
                    66:12:e8:1d:21:be:c2:6b:b9:9d:b9:28:7c:35:ad:
                    93:24:e5:e6:43:9b:98:bd:c5:80:ef:03:fe:ff:ef:
                    56:77:5a:6c:41:9c:a4:ac:70:c3:76:77:bc:76:4f:
                    f5:32:9a:da:0e:b9:43:92:e9:fe:92:a6:2a:8b:cb:
                    35:3d:89:57:a7:c6:6d:64:1c:00:38:2c:80:f8:43:
                    06:2a:1a:3f:af:5e:32:f1:d9:4e:c9:39:9c:10:a1:
                    9a:33:dc:30:fd:0b:2a:7b:4c:7b:17:e4:1c:d3:f9:
                    42:0d:ac:43:ef:2a:65:ad:07:cf:dd:48:25:c5:b9:
                    58:4b:89:e6:62:9c:76:5e:ad:c5:19:b9:89:03:40:
                    11:9e:15:4f:8e:4b:29:db:0c:01:ed:4d:2a:22:11:
                    f7:42:dc:9f:e2:4c:dd:ce:aa:00:fa:be:fa:e0:fc:
                    44:bf:2d:91:0f:74:81:05:29:4e:7c:7c:a5:fe:0b:
                    33:42:8c:d1:b3:51:cf:e0:9b:91:2c:d0:38:96:41:
                    00:0b:19:2a:f0:6e:22:8e:87:b6:50:86:ea:e2:59:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:D2:BD:AC:75:A0:B9:A3:78:54:22:DD:F1:7E:65:7E:A8:4B:88
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a3a2f33322d3430203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:b4:46:dc:d9:26:39:2d:96:c1:36:89:80:b7:27:90:52:4f:
         7f:a2:ba:b8:15:50:87:1c:a7:b2:3d:f8:b3:55:bf:7f:b0:bd:
         96:8b:2c:d6:e0:2d:5c:ac:93:14:cb:90:0e:0e:c2:bc:86:fa:
         68:b5:b1:04:41:85:7b:b8:06:b9:2a:45:c1:7f:1c:7d:67:f6:
         f1:12:24:f3:a3:bd:1b:81:91:84:6d:af:46:b0:a6:a7:e0:f8:
         3a:5e:79:08:83:b1:85:9a:8d:60:f2:7f:8f:fb:9e:b8:ae:7c:
         df:a6:de:fa:49:c6:9a:2e:1b:53:b9:90:14:0a:6f:60:b2:e6:
         06:8f:0d:c3:9e:0c:4a:f1:b0:89:96:3d:fe:a2:a7:70:ed:60:
         d5:0c:b5:57:a1:1f:d9:ce:90:33:35:13:29:85:3f:88:3e:0a:
         b9:46:db:25:9b:7a:84:21:f4:82:8f:bc:51:61:fc:ba:4e:e1:
         da:11:35:3e:95:80:38:b6:2b:b9:4d:61:a2:c8:72:44:94:b3:
         43:5b:f7:7d:a5:20:fc:e5:03:4b:61:42:3a:ed:ae:69:1d:39:
         02:3b:6b:4d:df:72:fd:42:61:13:0f:b7:02:68:5a:ea:c4:29:
         0b:fd:77:85:d7:e6:fc:be:1c:2c:35:25:95:92:03:58:6d:da:
         37:57:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:07 2025 by rpki-client