Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa
File:                     323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier:          HTBt4QnSL3Etbg4kYS/t4g9a2GDuS0W8TKMQfxdKckE=
Subject key identifier:   3F:A1:F1:82:F7:7B:51:62:E2:8F:48:6C:6B:E5:E5:B5:EB:B3:95:50
Certificate issuer:       /CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
Certificate serial:       23A5F378AA557EFE9AE71BC95D6D5235C6E1F1FF
Authority key identifier: 85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa
Signing time:             Sat 31 Aug 2024 14:16:17 +0000
ROA not before:           Sat 31 Aug 2024 14:11:17 +0000
ROA not after:            Sat 30 Aug 2025 14:16:17 +0000
asID:                     273663
IP address blocks:        2804:8a58:aa00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a5:f3:78:aa:55:7e:fe:9a:e7:1b:c9:5d:6d:52:35:c6:e1:f1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
        Validity
            Not Before: Aug 31 14:11:17 2024 GMT
            Not After : Aug 30 14:16:17 2025 GMT
        Subject: CN=3FA1F182F77B5162E28F486C6BE5E5B5EBB39550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:19:8b:95:aa:23:22:19:59:f1:38:99:25:
                    d5:c1:3b:e2:37:2e:13:67:e1:30:54:6e:b8:c3:60:
                    52:45:87:cd:56:f2:65:90:16:15:c1:f5:36:ef:95:
                    cc:2d:85:b7:97:a1:d0:db:26:40:65:d8:62:fb:cd:
                    f9:64:f3:f9:27:43:84:e9:58:c6:a7:bf:fe:25:77:
                    44:cc:52:30:de:83:40:34:34:34:98:ef:1e:c3:a7:
                    c4:f5:96:45:ec:c7:0f:da:cc:76:84:c1:27:e1:72:
                    91:5f:19:10:45:3a:2b:ea:7e:2e:55:2e:81:e8:0b:
                    f6:68:72:6a:f7:96:b4:32:4b:fc:a5:84:b6:ee:06:
                    82:d1:fc:fa:5c:35:d0:20:6d:e9:42:b4:00:a2:98:
                    d4:ce:fc:6f:54:34:f3:05:1b:3a:6e:1e:ab:e4:5d:
                    d5:34:b6:b0:e4:08:51:9e:e6:d3:59:64:76:84:d9:
                    9d:b5:a0:9d:4e:7e:17:a0:f0:a4:12:c0:fd:17:c0:
                    fe:c8:0a:9e:31:a0:fb:06:13:54:33:c3:de:ba:95:
                    a7:f9:14:90:b6:ac:4e:ba:78:a9:78:84:28:8e:17:
                    38:df:91:b3:eb:41:39:18:d6:7e:1a:15:da:ed:98:
                    a3:bb:8c:9b:a7:7b:a9:ef:c6:89:65:51:4d:6e:b9:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A1:F1:82:F7:7B:51:62:E2:8F:48:6C:6B:E5:E5:B5:EB:B3:95:50
            X509v3 Authority Key Identifier:
                keyid:85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:8a:50:95:d9:72:00:72:8a:de:f4:4a:4f:d2:32:b1:e0:
         b6:3f:72:da:fd:c2:80:db:6c:92:04:ad:98:ce:0c:cd:9b:cb:
         9c:14:87:5e:91:b4:06:18:62:41:4c:18:89:7c:76:43:8e:fa:
         89:48:b5:af:2c:5f:66:d2:6e:df:d1:5d:26:9f:d7:41:e3:63:
         21:d5:8a:cf:55:28:2a:30:7e:a3:28:8e:65:9f:50:6c:90:d4:
         8a:79:57:cd:2c:6c:00:22:59:30:5b:8f:d4:3a:2b:ce:cb:b2:
         46:5d:0a:95:e8:b6:de:28:43:7e:20:a6:bd:ba:ec:60:d0:2f:
         72:80:16:ea:d9:96:65:37:67:78:05:44:ca:64:65:50:6e:7b:
         01:18:c9:7d:39:6b:64:1e:5b:40:ec:8b:14:e7:2c:51:d4:a0:
         2e:4b:23:f7:f9:1e:a4:d3:d5:a3:78:f7:90:55:cf:ad:0a:a9:
         a4:ea:04:55:dd:19:bb:a0:24:23:f4:a3:83:e5:f7:80:53:cb:
         3e:4a:e2:45:29:2b:71:c6:1c:87:2d:e5:86:20:93:36:96:eb:
         24:17:ef:9d:c9:e2:87:db:aa:76:ed:93:e6:fd:4e:f1:57:3f:
         ea:49:12:b3:7b:5d:d4:04:c7:ba:59:1c:c5:11:52:f9:ce:4c:
         10:cc:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:58:04 2025 by rpki-client