Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa
File:                     323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa (raw, json)
Hash identifier:          e/ZPNblkWBcLbExNxFVs0KxOFu297Clxh+kvIKeiUD4=
Subject key identifier:   F8:0E:E6:80:FD:60:71:60:1E:C0:D2:2B:27:60:34:A7:9A:B0:49:E6
Certificate issuer:       /CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Certificate serial:       2C23C1D2315781987DE6C9FC3F3F1544924C5430
Authority key identifier: F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa
Signing time:             Sat 31 Aug 2024 14:14:50 +0000
ROA not before:           Sat 31 Aug 2024 14:09:50 +0000
ROA not after:            Sat 30 Aug 2025 14:14:50 +0000
asID:                     268091
IP address blocks:        2804:57dc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:c1:d2:31:57:81:98:7d:e6:c9:fc:3f:3f:15:44:92:4c:54:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
        Validity
            Not Before: Aug 31 14:09:50 2024 GMT
            Not After : Aug 30 14:14:50 2025 GMT
        Subject: CN=F80EE680FD6071601EC0D22B276034A79AB049E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:71:ee:a5:01:a8:48:df:d2:94:66:cf:1d:
                    ec:f0:36:ff:06:9d:b5:31:68:1f:8d:31:9d:8e:24:
                    1b:ef:06:9c:1d:fe:93:98:5c:7a:27:e5:11:2a:9f:
                    0d:b3:46:4a:5a:3c:30:82:8d:e3:2d:39:0f:75:97:
                    9d:75:1c:f1:32:4d:5d:c5:63:33:5c:64:69:3c:2f:
                    6a:03:3f:4e:88:b5:58:e3:a3:aa:2d:41:58:df:17:
                    38:d9:d9:26:f4:f7:d8:cc:ce:57:bc:b3:81:2b:17:
                    2e:aa:f9:95:5b:1f:d5:80:37:59:58:df:53:10:56:
                    e3:30:68:29:ed:55:a1:bc:2a:36:f9:8d:7b:0f:5d:
                    d8:ba:5b:fd:47:1d:d4:1a:ba:8e:f5:da:05:7d:c4:
                    32:58:a6:bd:0f:55:13:5c:a7:47:d5:8a:38:72:16:
                    34:d5:22:38:1b:2f:8f:58:06:7a:be:7f:6c:d7:3c:
                    83:68:55:27:ec:78:4a:51:ce:a0:80:c3:19:0b:5a:
                    39:1f:95:34:11:cf:a3:0e:8d:9d:86:3f:34:c4:0f:
                    c8:0d:6e:d3:ff:ee:fd:90:4d:9c:e6:75:56:d4:b6:
                    68:1f:10:76:49:4a:02:ed:2c:51:43:2a:ea:c6:56:
                    7e:b9:90:36:5d:6c:f7:7b:71:37:b9:be:12:a3:75:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:E6:80:FD:60:71:60:1E:C0:D2:2B:27:60:34:A7:9A:B0:49:E6
            X509v3 Authority Key Identifier:
                keyid:F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57dc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:12:3c:98:6a:3d:61:ca:f1:f2:ae:24:3c:c3:72:2f:8e:d8:
         62:01:9e:10:0b:9b:13:0a:64:62:25:c1:ef:de:71:c1:4c:fa:
         3f:d0:73:28:84:49:cb:13:75:81:7e:9d:c2:4a:48:8a:e7:19:
         26:c9:cb:e1:41:09:29:63:ab:fc:cd:2f:c5:f2:2b:6f:96:fe:
         94:68:ba:ed:02:f9:86:d7:da:d4:5e:c9:6b:31:fb:a7:1f:5b:
         48:a9:34:70:62:75:c1:46:20:09:a8:ee:fe:84:71:cf:12:0b:
         2b:2a:b3:be:dd:6e:06:8e:d2:59:21:8e:e2:db:4b:6f:ac:10:
         09:b5:22:b2:ea:fd:7c:05:f4:1e:73:d7:a8:9b:e7:35:e2:1a:
         3c:67:db:d4:d6:dc:c2:ec:77:2d:9a:61:4e:6f:b9:c5:ce:4c:
         49:09:bf:fd:60:cb:88:91:47:44:6b:c3:5c:a5:84:2d:37:4c:
         d5:af:2c:69:43:0b:b5:57:70:e3:1f:63:af:2f:af:d9:01:de:
         0c:28:17:bc:7f:95:10:bb:dc:1b:a0:01:16:b9:ff:90:e1:cc:
         ee:6d:b0:be:63:8c:b0:4e:51:03:dc:20:31:a3:c9:f3:7b:90:
         3d:1c:3e:2b:fe:d6:ab:b2:e5:6f:17:5d:95:ee:e5:1a:4a:4e:
         fd:6c:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:13:01 2025 by rpki-client