Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a3a2f33322d3332203d3e203532393637.roa
File:                     323830343a3364633a3a2f33322d3332203d3e203532393637.roa (raw, json)
Hash identifier:          tdfND/t1CtqL1gDOSwl9PndfyJviUsBy3HxsFS7SCHI=
Subject key identifier:   45:D7:8D:FC:FC:E9:8F:5A:A3:06:03:B2:60:3A:EF:85:1D:71:C5:B9
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       0F23AD087C3723C94CD963F8061A17241E485AAF
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a3a2f33322d3332203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:50:29 +0000
ROA not before:           Thu 01 Sep 2022 13:45:29 +0000
ROA not after:            Thu 31 Aug 2023 13:50:29 +0000
asID:                     52967
IP address blocks:        2804:3dc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:23:ad:08:7c:37:23:c9:4c:d9:63:f8:06:1a:17:24:1e:48:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:45:29 2022 GMT
            Not After : Aug 31 13:50:29 2023 GMT
        Subject: CN=45D78DFCFCE98F5AA30603B2603AEF851D71C5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:eb:a6:86:b6:42:89:e1:8d:96:92:90:84:
                    fe:77:47:d6:18:b8:b8:ee:9e:ea:ae:fd:ff:40:ed:
                    0c:a4:60:12:83:19:55:6d:f1:c9:3e:4d:8a:d3:24:
                    e7:50:84:2e:16:b0:18:a2:47:5a:03:11:48:67:ae:
                    4d:5d:1c:87:ae:81:fc:17:13:51:9f:b1:61:15:45:
                    49:be:fd:2c:c4:f2:8a:0e:77:f5:61:29:dc:17:29:
                    f1:39:2b:20:5a:4d:88:90:77:3f:17:d2:fe:d0:43:
                    ee:11:2c:51:d5:3e:2a:0d:27:1e:26:e1:1e:a0:44:
                    ef:f9:bd:d5:2b:e1:c6:9f:7d:d2:51:71:df:df:a1:
                    87:85:1a:5d:24:8d:76:f9:f5:58:6b:70:96:3c:ad:
                    15:a8:20:f4:57:6c:74:ce:ca:cc:6a:84:9d:c8:83:
                    d9:0b:fe:e4:08:4f:2c:9e:c0:f4:8d:45:40:1a:bb:
                    06:f5:a8:2e:0f:bf:29:33:65:e0:56:fd:d0:0e:dc:
                    68:ac:47:e8:0b:8e:b8:1e:e6:c3:65:63:0b:75:d2:
                    0b:8d:f9:cd:e5:15:30:ab:6b:6e:38:bf:64:26:dd:
                    59:a5:77:29:38:bf:d6:23:ff:59:7a:23:f1:5f:e6:
                    3a:b3:a2:a5:14:75:c0:3f:f2:e7:3e:1e:df:9e:78:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:8D:FC:FC:E9:8F:5A:A3:06:03:B2:60:3A:EF:85:1D:71:C5:B9
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a3a2f33322d3332203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:a2:87:6f:88:ea:7a:55:67:59:e3:60:e7:3c:0a:dc:26:
         bf:00:c3:26:4f:e2:f0:97:93:93:14:42:d7:c7:b6:f5:78:86:
         9d:4c:ca:a6:43:0d:08:13:af:a8:33:53:4a:f9:f5:fe:32:20:
         93:66:23:ac:2b:85:e1:65:1d:cd:53:2e:e5:cc:73:43:97:35:
         20:c3:41:02:fb:f8:b2:b9:4a:c8:d0:d1:f0:68:1f:dc:4f:5a:
         fc:07:10:b0:f6:8c:93:06:ed:25:29:e9:17:7b:1b:fd:25:09:
         0e:24:63:cb:10:66:81:fe:76:a7:5e:03:84:a7:cb:8c:e3:73:
         26:c8:31:e8:55:70:fc:48:65:5b:77:0f:38:cf:10:2e:00:78:
         d0:13:55:13:58:17:82:67:bd:48:dc:f3:b1:c6:b2:46:84:91:
         4c:a4:43:1e:37:40:e8:29:f4:52:81:c5:1a:c6:a1:76:23:c4:
         18:8c:01:ba:d0:c4:47:7b:a8:70:90:0e:71:ac:d6:e9:4e:68:
         4e:8f:af:74:00:22:f7:78:8a:fb:a6:51:cc:2f:7e:36:dc:cb:
         e2:05:7c:4b:3e:a0:d7:e9:28:b7:32:9e:35:82:cf:42:47:de:
         78:01:45:2f:49:6b:be:8f:bb:c4:6c:13:75:c9:37:b0:8b:ad:
         f3:e4:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:21:52 2025 by rpki-client