Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          Jb7DSd5HVepsWH7t/BfcLMlSncHjOXvqcwmFc5igbJE=
Subject key identifier:   E5:13:61:D2:CE:67:09:36:88:25:67:BF:92:DB:33:E8:72:E2:1C:E6
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       7739A4A0F54737E6C97EF802FA8C71851A32B5D5
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:09 +0000
ROA not before:           Sat 31 Aug 2024 14:08:09 +0000
ROA not after:            Sat 30 Aug 2025 14:13:09 +0000
asID:                     52772
IP address blocks:        2804:259c:ba00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:39:a4:a0:f5:47:37:e6:c9:7e:f8:02:fa:8c:71:85:1a:32:b5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:09 2024 GMT
            Not After : Aug 30 14:13:09 2025 GMT
        Subject: CN=E51361D2CE670936882567BF92DB33E872E21CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:90:d9:ee:bf:c4:d3:7a:c2:33:eb:59:f6:a2:
                    87:57:f1:a8:e8:13:aa:a7:24:0b:8f:ce:df:d8:98:
                    40:03:44:2d:3f:53:a5:8a:ef:5c:94:f8:52:59:7a:
                    b6:e9:62:1b:1b:b7:b6:51:ec:99:88:8b:8d:8f:85:
                    b7:7a:e5:df:0b:46:b4:5e:de:dc:8e:d0:1d:c3:e1:
                    af:99:2d:ea:ab:78:da:66:0e:bc:20:93:f8:ad:aa:
                    ce:7d:7b:2b:e3:2b:df:ec:aa:e0:e8:c1:cc:54:4e:
                    74:0f:f2:f1:cb:1b:f4:00:96:d5:f8:4c:9c:27:6d:
                    fb:57:7b:e9:e2:00:90:e6:d9:e5:f5:b3:f8:1f:6f:
                    6c:34:c2:62:7e:d7:65:12:fe:6a:6e:a0:f5:ad:73:
                    99:06:0d:bf:f5:1b:44:44:78:8e:9d:92:32:e2:8d:
                    93:e9:ae:94:2c:73:e6:39:68:9b:7a:76:e6:51:c7:
                    7b:8c:03:06:72:52:ba:0a:6c:38:c9:45:8d:92:2e:
                    d1:b6:6d:ca:c9:c7:0f:24:b5:e1:dc:64:78:b6:a4:
                    de:43:f3:93:fb:99:4c:6a:2a:93:97:a2:63:e1:2c:
                    00:3b:1c:24:0e:1e:9c:4a:ce:19:7a:14:d7:d2:0e:
                    73:6e:cb:34:39:ee:d0:b4:9b:89:bc:15:17:4a:dd:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:13:61:D2:CE:67:09:36:88:25:67:BF:92:DB:33:E8:72:E2:1C:E6
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:87:3e:5c:c3:70:38:2c:4c:cb:1e:25:16:f9:7d:b3:36:
         78:62:76:f6:d7:c0:63:6a:70:df:59:c3:ba:43:34:af:e8:1c:
         19:fb:6f:66:4a:72:7c:22:9a:93:fb:64:cd:f5:7c:ff:89:01:
         fe:70:b7:7e:07:e5:54:d6:06:79:5f:73:15:c0:40:3f:25:6e:
         94:00:a3:5a:5c:de:87:03:03:33:d6:12:d8:bc:1c:48:f5:bc:
         6a:42:5c:8e:54:5a:13:b6:08:3a:6e:ac:62:05:2c:85:48:f6:
         9e:98:3d:2c:ce:a2:26:b6:d0:7a:d5:d6:29:b5:79:27:70:4c:
         8b:97:57:9a:7e:dc:4f:6c:7e:10:1f:f8:d8:2a:b2:8a:78:b6:
         46:b6:ca:6d:9f:7d:8a:4e:f8:42:ff:52:34:f7:20:7d:42:cf:
         7c:1f:1e:51:84:cf:ed:39:07:9d:4a:17:a1:4e:41:75:3f:df:
         d8:b7:3b:dd:dd:b8:19:9c:22:15:1f:7a:30:3d:42:3c:28:3f:
         b6:ed:5b:b7:f4:34:43:6b:ce:c7:d0:c2:a6:53:9a:a7:c4:fe:
         f5:62:20:9f:62:ce:bf:7e:21:2c:26:68:51:eb:d4:23:f8:92:
         7a:fa:d6:cd:12:84:92:a2:a1:9b:93:50:84:fe:60:f9:38:d6:
         f7:a8:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:58:01 2025 by rpki-client