Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33332d3333203d3e20323634323136.roa
File:                     323830343a323435383a3a2f33332d3333203d3e20323634323136.roa (raw, json)
Hash identifier:          kkBmGypjtkDMmTuNxPcz9j1DnEurLpg2eQO7CfnuSsU=
Subject key identifier:   2A:31:13:82:86:9C:EE:16:B2:AD:1D:18:C1:CD:C8:91:BB:CD:F7:7B
Certificate issuer:       /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial:       17021D15B9F93A0D0F4974A7AD0C9B307DDC2608
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33332d3333203d3e20323634323136.roa
Signing time:             Tue 20 Feb 2024 12:18:24 +0000
ROA not before:           Tue 20 Feb 2024 12:13:24 +0000
ROA not after:            Tue 18 Feb 2025 12:18:24 +0000
asID:                     264216
IP address blocks:        2804:2458::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:02:1d:15:b9:f9:3a:0d:0f:49:74:a7:ad:0c:9b:30:7d:dc:26:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
        Validity
            Not Before: Feb 20 12:13:24 2024 GMT
            Not After : Feb 18 12:18:24 2025 GMT
        Subject: CN=2A311382869CEE16B2AD1D18C1CDC891BBCDF77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:28:85:48:ad:32:fc:d6:5e:46:0b:23:35:b1:
                    31:95:df:78:ad:41:be:f3:dc:a0:e0:62:03:ab:ef:
                    e0:d9:5a:db:f6:05:e5:07:89:40:23:6f:ac:4c:b1:
                    a9:ea:a7:2f:93:af:49:bc:07:8d:44:3a:1d:c3:7f:
                    50:f5:f7:5c:7d:03:e5:f2:60:df:47:70:76:6d:fe:
                    5c:45:71:8c:d0:0b:99:5b:f7:cc:e1:03:e4:03:af:
                    42:1c:2a:91:3d:87:5e:e3:c4:81:b9:1d:dd:9c:77:
                    44:2c:4d:5b:7b:38:98:da:84:8a:36:b0:17:37:3e:
                    ab:4e:4d:17:94:5f:60:fc:c0:c0:4e:fb:0d:56:84:
                    2a:72:96:5b:bc:b8:1c:80:95:9a:03:c0:c7:6c:bb:
                    a7:ca:82:55:66:82:66:ef:42:38:7a:ee:19:24:f8:
                    90:36:dc:a6:32:e1:01:1f:9f:76:29:cc:89:53:fb:
                    31:5b:f4:8b:56:f3:54:c7:3a:a1:3d:f5:9c:3b:28:
                    03:13:70:2f:78:34:4b:ba:51:8e:89:4d:a3:57:50:
                    c7:53:e6:33:7f:a9:1a:e6:a5:e3:f1:85:49:76:9b:
                    e6:0f:10:41:ec:b2:89:eb:fa:7f:52:d0:d5:88:d4:
                    f9:68:46:f5:54:d7:e3:db:a0:20:c2:24:ce:ff:9c:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:31:13:82:86:9C:EE:16:B2:AD:1D:18:C1:CD:C8:91:BB:CD:F7:7B
            X509v3 Authority Key Identifier:
                keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33332d3333203d3e20323634323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2458::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:35:d1:41:2b:7f:22:27:b7:26:cb:ca:5e:30:e8:53:09:0c:
         dc:62:95:87:24:4c:46:5d:f7:c1:2b:1b:99:9f:76:18:86:55:
         93:04:8c:45:f1:a5:ec:a5:56:02:b2:05:6c:f2:06:b9:79:d9:
         d8:e7:7b:ac:0a:11:5a:25:ba:a3:ba:35:1a:17:21:32:0a:23:
         0a:0c:81:fc:b6:2e:92:85:12:92:f4:87:db:65:20:3f:4b:c1:
         24:b6:00:1e:63:07:48:d3:69:fa:79:b2:3e:47:10:b3:f7:52:
         23:55:d7:ea:f5:50:fa:30:b3:57:ab:e9:b1:6e:65:25:26:c8:
         15:45:ec:a3:f7:c3:10:e5:e4:a4:c2:ad:b9:fc:06:08:fe:12:
         61:5c:a9:6a:7a:bc:9d:65:66:27:9d:a0:4c:6e:2c:b4:c1:6e:
         da:df:22:46:7a:8e:2e:f4:ba:bf:78:71:e9:0d:6b:91:10:f7:
         60:18:aa:9b:b3:0b:cd:d2:78:f7:46:aa:c8:0e:48:56:20:02:
         f2:ba:6c:c7:66:f7:ba:3a:d2:6a:b3:c1:88:9c:08:1b:e1:3f:
         fc:6a:6c:c4:3e:79:7c:39:67:92:29:df:9f:c6:d6:3f:02:69:
         93:9d:ab:36:72:f5:28:2e:4e:b4:57:fd:20:57:54:cb:d9:d7:
         b1:08:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:19:09 2025 by rpki-client