Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666666663a3a2f34382d3438203d3e20323639373139.roa
File:                     323830343a363864343a666666663a3a2f34382d3438203d3e20323639373139.roa (raw, json)
Hash identifier:          Ru+wIQXaOEhGGVZFKL0FsNKtTF5N2+X6+zssvNN6Dmo=
Subject key identifier:   DD:48:EB:63:5A:3C:7C:3E:26:7D:AF:09:22:7F:CE:58:4D:9D:00:C9
Certificate issuer:       /CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
Certificate serial:       4194BB2FEFB7E4871EEAAAFC094D09948BA4FBC2
Authority key identifier: 0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666666663a3a2f34382d3438203d3e20323639373139.roa
Signing time:             Fri 23 Aug 2024 15:24:36 +0000
ROA not before:           Fri 23 Aug 2024 15:19:36 +0000
ROA not after:            Fri 22 Aug 2025 15:24:36 +0000
asID:                     269719
IP address blocks:        2804:68d4:ffff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:94:bb:2f:ef:b7:e4:87:1e:ea:aa:fc:09:4d:09:94:8b:a4:fb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
        Validity
            Not Before: Aug 23 15:19:36 2024 GMT
            Not After : Aug 22 15:24:36 2025 GMT
        Subject: CN=DD48EB635A3C7C3E267DAF09227FCE584D9D00C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:a7:95:a6:63:36:35:93:97:51:fe:af:49:
                    90:99:ad:0f:5e:b2:06:cf:75:bb:c5:63:a0:90:22:
                    7f:79:7f:db:0a:d6:22:25:85:89:fc:ce:ed:bf:7a:
                    09:88:b1:6a:47:a8:94:28:49:14:c8:1e:04:83:64:
                    fc:21:f7:68:33:01:91:b8:80:1b:b2:28:86:bd:b7:
                    fe:c4:08:9d:a6:83:a6:93:09:0e:5a:48:69:72:2c:
                    17:19:34:dd:46:b2:90:f1:34:bc:ab:eb:55:c5:d5:
                    57:b1:3c:0a:93:84:a0:c3:4e:f0:8d:1c:ad:32:fc:
                    24:43:1b:b4:98:af:7a:12:8d:3a:a8:7b:1a:35:9f:
                    61:1f:9c:03:96:73:c8:ff:40:99:d6:05:e3:73:c5:
                    0f:85:5b:a3:7c:56:6e:88:d1:57:63:2d:17:5f:99:
                    29:d0:aa:56:23:51:0f:04:25:7f:55:7b:2c:57:2d:
                    23:83:35:a4:81:e1:7d:64:c3:f5:e4:67:8d:05:35:
                    10:10:f1:60:b7:aa:e2:e5:ea:55:64:8d:dc:f5:35:
                    f2:50:a7:f2:e5:5a:d2:87:2f:b9:88:05:40:fc:81:
                    25:6e:e9:97:31:78:40:ee:c1:ea:ff:63:89:49:f7:
                    75:e2:da:25:5b:c5:78:f1:59:de:0d:16:c1:e8:69:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:EB:63:5A:3C:7C:3E:26:7D:AF:09:22:7F:CE:58:4D:9D:00:C9
            X509v3 Authority Key Identifier:
                keyid:0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666666663a3a2f34382d3438203d3e20323639373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68d4:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:9e:0a:0d:92:8b:2b:48:9b:ec:b4:49:64:02:77:5f:4b:
         b0:81:8a:e1:85:04:db:7c:12:f1:8f:36:a4:eb:ec:b0:95:1b:
         75:8c:a9:67:2f:72:6e:45:5c:8d:07:74:fa:e1:bf:60:0b:3e:
         f1:5d:7e:d6:f5:6b:58:b1:85:96:61:0a:76:44:9c:53:56:e2:
         68:47:29:a3:6b:3d:cc:37:16:ef:a7:bb:10:93:c4:dd:50:6c:
         20:c1:4f:d5:7b:2c:27:d5:8b:71:5b:72:65:a0:96:ee:f1:e9:
         d3:cf:3a:08:47:88:9d:e9:85:bc:6d:14:04:b3:e1:0e:7b:a6:
         72:ba:d8:ae:48:f0:4c:a4:0c:9e:43:fb:cb:0e:77:0f:05:93:
         d2:f1:8c:12:2b:45:31:2d:b4:7e:34:b1:1b:45:43:5a:d9:10:
         c2:59:39:86:25:4e:c6:87:e2:b3:f5:e7:d2:49:4f:0c:67:6b:
         46:d0:61:8a:51:e8:b8:1e:1e:32:83:2a:a7:f8:5d:21:58:42:
         8f:bc:16:17:ed:92:ae:9f:74:ce:e0:59:e2:79:94:f9:75:46:
         f9:db:75:bc:28:d7:ff:bf:ea:ec:f5:b5:94:82:d2:a0:8c:62:
         dd:a8:f2:a4:bd:a5:e1:cf:b7:8f:4c:54:28:7a:69:8a:af:44:
         70:14:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:45 2025 by rpki-client