Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a383030303a3a2f33332d3333203d3e20323638353834.roa
File:                     323830343a353337303a383030303a3a2f33332d3333203d3e20323638353834.roa (raw, json)
Hash identifier:          wJQFFAI8LC1NGCA6Ai1+Gjp3N44zXzbgFV1LDHSK+pU=
Subject key identifier:   57:A2:0E:0F:98:80:68:1B:7C:20:A6:21:2A:69:12:F2:A7:CA:4A:9D
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       74892ACA24807AEAFFE6539A50D04D9C422B0483
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a383030303a3a2f33332d3333203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:07 +0000
ROA not before:           Tue 02 Jan 2024 17:11:07 +0000
ROA not after:            Tue 31 Dec 2024 17:16:07 +0000
asID:                     268584
IP address blocks:        2804:5370:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:2a:ca:24:80:7a:ea:ff:e6:53:9a:50:d0:4d:9c:42:2b:04:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:07 2024 GMT
            Not After : Dec 31 17:16:07 2024 GMT
        Subject: CN=57A20E0F9880681B7C20A6212A6912F2A7CA4A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:70:c2:d9:94:a9:c4:ba:51:3c:75:ce:34:
                    5e:d3:b0:9f:8a:e6:b6:9a:47:29:6f:f2:80:86:c3:
                    1f:c5:cf:29:28:c1:10:cc:f9:87:27:18:67:da:81:
                    8c:be:2d:9a:7d:96:98:b0:52:c1:12:39:e9:2c:a8:
                    33:19:37:47:b5:8f:2f:7a:fd:00:ae:ac:b8:c2:09:
                    71:81:9c:f6:2b:ed:4c:d9:73:c0:72:d7:e9:65:28:
                    da:54:ab:23:85:e7:d7:d1:8b:14:5f:2e:34:b1:65:
                    f2:15:ad:b0:0f:86:50:e4:65:3a:7d:49:47:e1:72:
                    f2:01:b0:ae:ed:13:1a:72:d9:1e:e3:90:d2:58:73:
                    19:5d:5d:fd:d4:bb:5c:71:2d:95:a5:29:41:21:91:
                    43:4a:1f:84:26:e2:f0:78:e7:3a:a0:38:57:7f:7b:
                    48:75:46:bb:95:ae:c7:f4:0e:cc:dd:94:1e:d4:64:
                    3a:ca:76:fc:37:e3:27:61:1a:06:df:a1:68:37:fb:
                    ae:65:01:f2:61:0d:71:8b:d6:63:4a:90:5f:36:38:
                    ce:54:f1:75:44:c1:2e:73:6a:89:82:44:5e:72:a6:
                    d9:fe:9e:fc:0b:4a:2b:0b:db:eb:27:41:f7:1b:83:
                    66:c0:5e:2a:d4:20:46:cd:29:26:05:08:2f:95:a6:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:0E:0F:98:80:68:1B:7C:20:A6:21:2A:69:12:F2:A7:CA:4A:9D
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a383030303a3a2f33332d3333203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5370:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:36:df:6c:53:9b:c8:e7:73:49:d1:1f:b1:0e:a2:57:e6:
         1c:9b:4a:4d:5a:26:1b:7d:6b:d6:87:9e:30:4d:61:eb:d4:9c:
         50:01:44:f6:e1:f2:cf:11:b9:50:34:78:a6:22:5b:f9:69:e8:
         85:85:3d:12:e7:64:74:2c:50:ae:8d:e1:a3:5b:4d:8e:c6:05:
         f7:17:0d:92:02:8f:27:bd:32:46:c9:67:19:3c:af:6a:83:09:
         91:f1:87:10:83:d4:42:2f:ec:dd:22:bf:71:cb:26:c7:d5:87:
         32:e1:31:a1:88:c5:85:35:a7:01:31:95:e1:6a:29:37:cd:7b:
         4f:48:c6:45:64:5b:a7:b5:c1:55:89:e2:3b:6c:62:17:57:0c:
         6e:38:05:a7:1b:5a:cd:27:b2:a9:8f:66:59:34:0c:48:93:95:
         7e:f8:d4:7a:cd:96:71:84:d4:1c:1b:c0:69:1b:68:b9:e5:0e:
         42:31:ef:67:ef:a9:27:e5:08:7b:95:d5:1f:f0:e5:86:34:ae:
         ca:58:a4:c9:d6:a8:1d:be:82:66:27:7d:94:35:a4:f8:ad:82:
         11:1a:98:bd:68:f9:b5:f4:f1:60:a1:1a:1a:af:c5:10:21:59:
         ab:5c:55:c1:61:38:b2:1c:81:aa:8e:ed:6f:e6:9d:0d:ee:e2:
         72:c4:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:06:31 2025 by rpki-client