Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a333a3a2f34382d3438203d3e203532393637.roa
File:                     323830343a3364633a333a3a2f34382d3438203d3e203532393637.roa (raw, json)
Hash identifier:          8mpOLFCa//6kZyFn3+E0xqrc9h6FRFRbGR+dRZ5s8QE=
Subject key identifier:   4A:24:D6:04:AD:E0:02:4D:55:00:61:D8:0F:AF:B8:CF:37:5D:A4:53
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       6087F22193992DF6E4FCA9A2861ABFBA5FB13340
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a333a3a2f34382d3438203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:50:32 +0000
ROA not before:           Thu 01 Sep 2022 13:45:32 +0000
ROA not after:            Thu 31 Aug 2023 13:50:32 +0000
asID:                     52967
IP address blocks:        2804:3dc:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:87:f2:21:93:99:2d:f6:e4:fc:a9:a2:86:1a:bf:ba:5f:b1:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:45:32 2022 GMT
            Not After : Aug 31 13:50:32 2023 GMT
        Subject: CN=4A24D604ADE0024D550061D80FAFB8CF375DA453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:a3:0b:45:b1:11:f5:e1:4d:a4:31:99:ca:
                    5c:b2:1e:ec:28:55:0c:c0:77:8b:86:8d:db:af:13:
                    4a:37:c6:3a:28:8e:be:52:1a:57:1d:4d:5e:f8:4f:
                    3d:e5:2e:e8:e6:7c:58:e6:3d:e9:42:84:47:f2:0d:
                    f9:25:de:29:22:05:ef:6f:d9:c4:da:67:20:34:e0:
                    d8:5b:e1:d8:03:fb:8b:59:aa:40:e4:16:b9:67:1d:
                    3c:d3:67:1b:cd:2c:66:56:eb:d1:4f:d3:1b:f0:01:
                    17:dd:34:ec:e6:ad:e2:15:bf:39:7c:28:d0:a4:79:
                    4a:bb:db:14:89:3e:04:64:4a:cd:f3:7c:e0:49:84:
                    3b:79:e2:63:0f:f0:a5:0b:e1:ee:c4:a8:2c:0c:12:
                    5c:10:24:28:bb:f2:fa:c3:7c:73:20:a4:dd:b2:82:
                    5f:e6:66:57:00:27:8f:07:8d:87:ae:12:58:20:28:
                    43:4f:9f:12:99:fa:1f:cc:6d:93:4d:2b:50:c1:ae:
                    e3:be:45:36:86:2f:08:07:c5:ad:86:6d:38:16:1f:
                    c2:26:b9:52:25:3f:b3:56:e0:1f:e8:67:d0:87:08:
                    03:c4:61:96:77:d1:80:24:51:48:b3:29:ab:1f:1b:
                    39:38:ed:3c:5d:a8:26:5a:43:8d:86:38:fd:03:12:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:24:D6:04:AD:E0:02:4D:55:00:61:D8:0F:AF:B8:CF:37:5D:A4:53
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a333a3a2f34382d3438203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:a9:cb:5b:c6:80:d3:27:5d:e2:60:7e:ad:2b:8b:04:da:
         49:cd:b8:b5:ad:61:27:4b:f0:f9:0f:cc:f7:6c:cb:72:df:36:
         b5:72:83:3b:f5:b1:03:30:73:c7:cb:99:db:27:e4:3e:33:42:
         74:f3:2c:50:59:0e:21:51:1c:5a:89:e0:cc:af:0a:7d:ad:66:
         a0:fb:f9:a8:14:d6:93:20:0c:52:a3:ea:ed:11:c6:67:41:6f:
         34:d1:58:bd:5a:29:c2:53:c3:9d:ea:d5:2d:f8:be:12:74:1f:
         f3:1f:db:46:b3:2f:6a:a3:25:44:31:61:c1:32:5c:fb:61:e6:
         c4:15:53:2e:94:13:59:4b:29:63:53:3c:cd:ea:08:40:0e:e1:
         8b:d3:02:8e:0d:64:3f:9c:b0:95:af:2c:0e:f0:f1:38:82:da:
         ae:f6:70:d2:c4:9a:bc:61:f7:e3:f3:74:fc:c6:10:45:9a:94:
         bf:b7:4a:12:1c:69:3c:55:b0:85:c8:23:bc:1a:fd:3b:32:1d:
         8e:f2:65:ab:bc:e5:5e:aa:23:88:f8:10:c0:02:6f:3b:e6:28:
         60:12:4b:c9:86:b3:de:74:a1:77:e8:3f:31:46:2e:7a:fa:b2:
         81:91:20:5b:c1:02:b7:c4:2f:35:12:4c:82:f4:85:bb:54:eb:
         31:5d:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:42:09 2025 by rpki-client