Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33332d3333203d3e203533323137.roa
File:                     323830343a3237343a3a2f33332d3333203d3e203533323137.roa (raw, json)
Hash identifier:          DHyYNiQq+Qa/gOOGMeaygDUlJDsu1TRb/Hn3ztdyE14=
Subject key identifier:   33:6E:40:00:51:C4:92:90:66:DA:56:2A:9D:E5:2E:77:F4:0E:A9:D9
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       467FC51058E3514C990DE3B29A607B8BA6C7371F
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33332d3333203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:52 +0000
ROA not before:           Sun 28 Jul 2024 18:48:52 +0000
ROA not after:            Sun 27 Jul 2025 18:53:52 +0000
asID:                     53217
IP address blocks:        2804:274::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7f:c5:10:58:e3:51:4c:99:0d:e3:b2:9a:60:7b:8b:a6:c7:37:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:52 2024 GMT
            Not After : Jul 27 18:53:52 2025 GMT
        Subject: CN=336E400051C4929066DA562A9DE52E77F40EA9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:e5:c5:65:9b:86:75:12:1d:0a:61:8a:1b:
                    f0:49:62:83:1f:b5:4d:d0:0a:74:d9:8e:95:a9:b4:
                    70:28:92:c1:25:00:54:a0:bf:74:62:06:cb:50:8d:
                    48:44:85:6e:10:37:4c:dc:25:ab:93:54:b3:d8:2d:
                    37:b3:6d:25:bb:8b:1b:93:a5:41:89:e4:01:ad:36:
                    8c:a1:e4:f5:47:ee:a9:de:9f:1d:85:2d:64:9e:aa:
                    bd:33:83:77:f6:b9:33:91:78:49:cd:de:9e:55:4b:
                    af:dd:4c:73:96:8d:b9:59:d0:53:7e:a2:0b:05:6f:
                    04:b3:3a:6d:ee:6c:ae:d6:1a:27:8f:5c:26:33:97:
                    dd:8d:7d:af:fe:30:50:dc:bc:4a:26:21:9a:69:f8:
                    07:a5:a6:d1:2f:00:3e:e1:6d:e9:47:c2:47:f3:c8:
                    41:7c:ce:e1:69:2d:65:4e:2f:a2:e0:3d:57:28:e6:
                    d7:59:11:c8:9d:b1:0c:51:e8:90:85:84:1f:49:d6:
                    56:2b:88:6f:a6:48:3c:44:fa:4b:a8:c0:c5:5e:c7:
                    22:66:06:d3:87:d8:d0:09:1d:6d:30:c9:ec:e5:60:
                    91:e3:50:ed:6d:40:69:41:a2:cc:36:35:3f:99:59:
                    76:e4:42:f5:78:42:b0:17:6f:ef:35:aa:77:30:a5:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:40:00:51:C4:92:90:66:DA:56:2A:9D:E5:2E:77:F4:0E:A9:D9
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33332d3333203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:274::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:fb:72:d1:69:c3:2a:93:7b:09:25:21:93:93:c6:b1:61:
         87:32:5c:f6:9e:17:3a:b9:0b:8a:2b:f8:0a:e1:67:73:b5:16:
         69:80:75:3c:11:c8:0d:e6:8a:cd:67:34:8b:15:df:a5:c7:ce:
         a4:5e:f9:24:73:55:e6:a8:b3:c5:7e:ae:59:0d:e2:b0:9a:e3:
         8e:5b:c4:21:1b:6b:1a:c1:7b:4b:22:5e:c5:2c:15:fc:ef:48:
         47:d6:c6:0f:fb:b5:9d:14:2d:a0:77:2a:65:3f:fe:f9:c1:3d:
         9c:82:c3:db:01:32:c2:94:06:97:fa:f5:26:1c:7b:19:06:b8:
         7f:39:c2:3d:18:61:81:c4:c8:f1:22:97:5c:f2:e6:ce:27:48:
         93:04:6b:43:6c:46:06:99:ef:2d:96:28:0d:24:5b:97:77:b5:
         ea:59:1b:84:af:7e:65:8b:df:b8:45:01:f6:7f:d9:3f:d5:61:
         a6:82:76:1b:3a:d6:a4:42:fa:0e:7c:48:8b:bf:21:1e:79:9a:
         ad:e5:7b:5b:27:44:0e:97:5c:4d:07:54:c5:4a:d1:24:fd:97:
         fa:dc:5f:6b:7f:c6:78:8f:31:5b:4c:3b:ec:bf:78:7e:28:b2:
         b7:f5:3a:99:1c:b2:55:02:3a:5d:51:07:c5:d6:9a:ae:9f:e8:
         bc:78:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:23:55 2025 by rpki-client