Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
File:                     323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (raw, json)
Hash identifier:          slnPY7Wmum+t5hFpsSadiEDmMHl2WuSvJsS52edlZc0=
Subject key identifier:   DF:D3:64:0F:11:0B:67:7A:C8:F1:6E:F1:C8:91:94:85:DE:24:51:23
Certificate issuer:       /CN=D10EF815EAD486C0A38260587180EFB1D6A0DE5B
Certificate serial:       772C3095D92A5FDF3C4A448BBDD49748B5DCF820
Authority key identifier: D1:0E:F8:15:EA:D4:86:C0:A3:82:60:58:71:80:EF:B1:D6:A0:DE:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
Signing time:             Mon 10 Mar 2025 16:38:31 +0000
ROA not before:           Mon 10 Mar 2025 16:33:31 +0000
ROA not after:            Mon 09 Mar 2026 16:38:31 +0000
asID:                     268929
IP address blocks:        2804:5cc4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2c:30:95:d9:2a:5f:df:3c:4a:44:8b:bd:d4:97:48:b5:dc:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10EF815EAD486C0A38260587180EFB1D6A0DE5B
        Validity
            Not Before: Mar 10 16:33:31 2025 GMT
            Not After : Mar  9 16:38:31 2026 GMT
        Subject: CN=DFD3640F110B677AC8F16EF1C8919485DE245123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:ba:91:ff:f8:f7:57:4d:ae:92:62:a9:88:
                    d5:dc:6f:a9:52:bf:4e:a0:94:10:77:0f:97:e3:a6:
                    9e:59:b4:d2:87:45:f2:46:f1:28:42:75:66:48:dd:
                    59:94:55:9e:52:85:61:02:2f:93:51:da:bf:c8:61:
                    9d:8c:52:8c:5a:d6:d4:5b:08:43:28:66:53:6d:5e:
                    ae:2c:c4:61:d4:df:3a:52:ba:e4:d5:f9:c9:6f:75:
                    31:15:22:8a:76:bb:cf:35:49:44:45:a9:7c:b6:5f:
                    c4:de:fe:89:91:36:36:93:1b:77:be:e4:c2:0c:69:
                    00:79:1d:2d:aa:0e:b7:71:04:72:83:38:16:68:06:
                    fb:a7:ba:b6:a7:a7:a4:3a:ed:0a:cc:c3:17:c7:d6:
                    83:21:2d:a6:d8:14:45:97:17:0e:d8:23:e4:5c:a6:
                    b0:18:e7:67:f7:10:3b:cb:00:c6:e0:ec:df:3f:ce:
                    9e:51:d6:d3:5c:d9:be:59:74:5d:fb:dd:82:a7:1d:
                    97:71:ea:35:5e:55:59:38:93:e3:63:a8:b9:63:6b:
                    ae:2c:0c:2d:5d:93:b0:e1:99:5d:cf:a5:1b:3a:3d:
                    78:65:df:b0:24:a0:a4:a7:9d:42:1f:03:89:d7:12:
                    ec:42:df:18:20:5d:9f:f3:fb:94:ba:08:48:e1:57:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:64:0F:11:0B:67:7A:C8:F1:6E:F1:C8:91:94:85:DE:24:51:23
            X509v3 Authority Key Identifier:
                keyid:D1:0E:F8:15:EA:D4:86:C0:A3:82:60:58:71:80:EF:B1:D6:A0:DE:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:c4:1f:b7:2a:3b:66:5e:74:ae:14:f1:9a:fa:12:4a:16:
         a6:30:b9:0c:33:ce:e7:fa:c4:60:3d:d4:9b:f3:40:93:25:c0:
         2a:76:1d:1c:fc:88:e1:9f:43:2c:9b:a7:cb:dd:58:f1:c8:67:
         35:40:e4:cc:54:2d:75:80:15:c5:d0:37:cd:96:dd:7a:c8:2f:
         98:3d:f6:ee:85:b0:80:b9:ad:8b:e2:ef:b0:b4:67:40:64:7d:
         cb:0a:c4:b3:dc:61:f2:1b:10:a7:c9:2f:66:7f:32:a1:79:57:
         5c:20:22:f9:92:ed:11:72:3a:0c:6e:6a:ab:2c:01:98:97:ba:
         90:f6:09:0f:a5:be:6c:06:06:1a:28:8e:22:55:d9:05:14:ce:
         80:25:f0:ce:41:fc:bf:01:14:a8:27:4b:e5:82:16:55:3e:fb:
         5f:fd:b2:63:ae:86:38:34:c5:b9:cf:3f:db:58:9f:5b:e9:26:
         38:c0:c4:15:0d:9c:19:b3:10:2e:12:e2:f0:34:35:fe:27:d6:
         5d:46:05:77:cf:af:a4:2b:47:87:12:a4:ef:03:91:8c:08:62:
         91:47:56:1b:62:18:18:73:90:4e:14:93:20:33:64:ef:82:94:
         40:39:7b:9c:dd:28:e1:ec:f0:e9:2b:c2:f4:f7:bb:d4:b6:2a:
         33:e6:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 23:32:22 2025 by rpki-client on console.sobornost.net