Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/323830343a343537383a383030303a3a2f33332d3333203d3e20323636393238.roa
File:                     323830343a343537383a383030303a3a2f33332d3333203d3e20323636393238.roa (raw, json)
Hash identifier:          d1wxL8Nb5IYsCQAE2BsUEpJB8jyskBdecOGHPKqh05g=
Subject key identifier:   2C:9D:7C:00:C2:7B:4B:C9:C0:08:8A:6F:4E:7E:B6:21:88:CB:E1:16
Certificate issuer:       /CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
Certificate serial:       330056B03D69D4C8BBAC58F368FAC5721DBA3331
Authority key identifier: E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/323830343a343537383a383030303a3a2f33332d3333203d3e20323636393238.roa
Signing time:             Mon 10 Jul 2023 19:14:29 +0000
ROA not before:           Mon 10 Jul 2023 19:09:29 +0000
ROA not after:            Mon 08 Jul 2024 19:14:29 +0000
asID:                     266928
IP address blocks:        2804:4578:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:56:b0:3d:69:d4:c8:bb:ac:58:f3:68:fa:c5:72:1d:ba:33:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
        Validity
            Not Before: Jul 10 19:09:29 2023 GMT
            Not After : Jul  8 19:14:29 2024 GMT
        Subject: CN=2C9D7C00C27B4BC9C0088A6F4E7EB62188CBE116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:aa:d9:07:9e:cd:a5:fd:91:12:56:05:9d:
                    ad:c0:66:7b:a1:a0:87:6f:a4:1b:b3:aa:db:7c:9d:
                    6a:c4:49:11:3c:d3:3b:cd:45:53:7f:d7:15:c7:1d:
                    7f:df:8f:c0:60:63:a3:c5:bd:ff:89:7d:8e:79:46:
                    2a:49:87:6e:c3:01:51:62:04:66:ed:24:59:79:0d:
                    e4:8a:15:ce:cf:b5:a0:62:b2:35:5f:d5:8e:91:55:
                    d2:a8:7d:89:99:65:99:1b:37:7e:bc:f6:94:e4:b2:
                    84:af:41:78:b1:59:c1:3d:b3:2a:cb:09:89:dc:87:
                    b6:7c:2b:c6:3a:bd:20:3e:19:10:ab:99:42:b4:b0:
                    6c:54:89:71:b4:11:c5:04:98:d0:bf:9c:a6:ad:35:
                    3e:70:89:91:ea:c3:5f:1c:9f:c2:c1:3a:00:04:a1:
                    d2:83:82:1d:a1:51:2f:84:97:9b:f1:7b:9e:88:62:
                    bd:a2:48:87:98:11:7a:fe:99:9b:f8:b6:fc:81:96:
                    20:59:19:e4:c1:f5:08:5b:17:b3:77:15:8d:4d:d7:
                    3d:f0:32:04:1d:92:55:f9:b0:5f:2c:89:f9:b1:30:
                    9b:1a:9a:19:9e:4b:df:4e:90:73:60:57:2e:10:a9:
                    13:80:b7:ab:5a:72:0f:05:1b:ec:34:fe:9b:c5:21:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9D:7C:00:C2:7B:4B:C9:C0:08:8A:6F:4E:7E:B6:21:88:CB:E1:16
            X509v3 Authority Key Identifier:
                keyid:E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/323830343a343537383a383030303a3a2f33332d3333203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4578:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:df:55:72:2a:14:df:7b:7c:a4:0a:c1:d9:74:2f:d4:77:
         25:94:5a:bd:60:4a:54:ef:6e:68:53:7c:e0:5d:26:4b:3e:fe:
         69:47:19:c4:3e:11:57:98:ca:59:c9:7e:15:c1:51:93:7c:17:
         39:de:71:a6:12:88:1e:c5:1f:9c:af:b0:2e:c3:9a:25:64:d4:
         97:87:e1:28:d5:5c:20:44:3c:32:34:4c:75:12:0e:fb:d7:d7:
         d0:4b:ba:e4:c3:9a:d9:10:09:d3:81:41:6a:93:4d:03:35:3c:
         49:ef:51:65:a7:c3:43:bd:48:71:80:62:65:21:46:85:91:53:
         cf:1d:7c:10:b2:c1:7c:83:41:24:4b:30:03:e0:c9:8b:92:78:
         7f:f7:38:a8:3c:83:05:2d:73:c5:73:db:03:5a:b8:4a:2b:62:
         38:dc:c4:3c:15:0d:ad:db:c8:f4:ad:31:85:6c:4e:37:a4:8b:
         72:4c:40:df:6f:ac:eb:d5:36:b6:2d:02:fe:1f:25:0c:6f:d8:
         6c:a5:42:29:56:c5:08:f5:f0:1c:fa:d8:8c:e8:46:24:fe:2e:
         f1:5c:d4:22:ea:96:d1:d2:11:1a:5f:c9:79:b8:ff:03:7b:fd:
         0a:63:ae:48:34:31:a5:62:02:4b:b1:5e:4c:83:ba:c7:9b:b3:
         e1:05:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:32:12 2025 by rpki-client