Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a343030303a3a2f33352d3335203d3e20323636303736.roa
File:                     323830343a336133303a343030303a3a2f33352d3335203d3e20323636303736.roa (raw, json)
Hash identifier:          o2GShWJXpiw8ERmvQwdFROunuv3MUEp8A2/QLecBPH8=
Subject key identifier:   23:5F:CC:69:1A:4C:97:C9:B6:D3:62:61:EF:4E:ED:21:5F:B4:DB:D1
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       451D2F62AE675E64B0AEC5F7FBFBA73DCC51DEA8
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a343030303a3a2f33352d3335203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:34 +0000
ROA not before:           Mon 03 Apr 2023 18:45:34 +0000
ROA not after:            Mon 01 Apr 2024 18:50:34 +0000
asID:                     266076
IP address blocks:        2804:3a30:4000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1d:2f:62:ae:67:5e:64:b0:ae:c5:f7:fb:fb:a7:3d:cc:51:de:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:34 2023 GMT
            Not After : Apr  1 18:50:34 2024 GMT
        Subject: CN=235FCC691A4C97C9B6D36261EF4EED215FB4DBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:b8:7b:12:ea:8b:ac:9d:e0:f2:da:da:45:
                    80:f7:8b:05:09:28:8f:b0:00:67:18:9d:bd:47:cf:
                    cf:b7:46:ff:e3:2d:b1:52:58:ee:dc:59:cf:c7:13:
                    5b:f7:e5:6d:2b:52:a5:d7:c3:c8:2c:16:2b:34:e3:
                    3e:c8:62:24:af:8d:4c:10:79:ae:2f:f8:77:9d:63:
                    0f:d6:7d:56:5a:cb:76:1f:51:9f:91:74:b3:08:ac:
                    28:be:e1:0d:d5:0a:ac:29:e6:52:2a:8a:3f:0b:8f:
                    a0:66:0e:94:ca:4b:bb:99:f8:42:6e:f8:b5:96:50:
                    0d:a9:dc:d5:60:cb:dd:b8:64:3f:a2:e5:d4:6d:09:
                    25:74:8e:ef:d6:ef:aa:a5:d5:33:7e:e0:28:e6:b9:
                    f5:09:ba:56:4f:1c:b2:26:99:2d:6b:34:3c:28:6b:
                    7d:f4:9e:bf:32:00:e0:40:2f:00:5f:cc:fd:72:1a:
                    40:60:24:74:c0:25:2f:57:1a:96:a4:df:bb:47:a6:
                    2b:d5:9b:90:b3:4a:df:47:76:5a:04:0d:e0:aa:0c:
                    1e:ce:bd:b5:b7:b4:0c:b2:69:94:8c:b6:18:27:05:
                    54:9e:5f:0a:e9:af:f3:e9:0d:5f:46:a4:64:94:6e:
                    2e:f1:60:4e:10:b9:12:65:cf:a5:91:15:73:3d:b7:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5F:CC:69:1A:4C:97:C9:B6:D3:62:61:EF:4E:ED:21:5F:B4:DB:D1
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a343030303a3a2f33352d3335203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a30:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:cd:5f:bb:32:50:f6:e4:c8:45:80:e2:ec:5f:00:98:2f:
         0a:de:00:52:6e:c9:3e:c9:d7:72:1c:5e:24:87:fa:7d:02:70:
         fd:77:19:7c:cb:75:b1:38:e0:3c:ae:09:64:67:2d:e5:34:6b:
         b4:b3:98:b3:22:69:95:ab:5c:9a:19:97:e2:aa:88:75:1b:41:
         c7:88:f7:38:92:7c:20:fc:a2:20:2a:a6:a2:4b:41:38:64:d5:
         f1:24:be:7a:64:25:60:cd:32:e5:08:bc:9b:7d:4a:fa:47:42:
         7a:49:82:14:d9:34:50:a0:9a:a3:24:21:f9:59:b2:b3:90:12:
         96:5f:a1:cd:ca:fc:fb:d5:6b:5f:de:51:b3:9b:9e:7d:ac:f7:
         74:22:43:07:0c:7d:8d:ef:5a:81:0a:f8:20:9b:d6:65:5e:cb:
         c3:56:0e:34:dd:04:12:b5:6d:f9:c2:19:4b:79:aa:f5:a0:6c:
         77:93:0a:a8:0e:82:1c:5a:27:18:df:3d:f4:1f:9a:07:fa:e0:
         75:a6:34:7c:84:93:77:05:bf:df:19:95:1b:e9:d9:3e:fa:fc:
         bf:20:b5:c2:17:ac:9b:42:58:2d:f9:8e:bb:36:f7:a5:18:06:
         4f:6d:eb:b0:4e:39:95:ae:3f:32:15:49:6b:45:fa:db:6a:c8:
         c9:6a:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:43 2025 by rpki-client