Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a613030303a3a2f33352d3335203d3e20323636303736.roa
File:                     323830343a336133303a613030303a3a2f33352d3335203d3e20323636303736.roa (raw, json)
Hash identifier:          XmUrfe9yM3XsUztv5pfS2iNGo3hj688SGrg72qZTpRY=
Subject key identifier:   DA:39:A3:C5:2D:1E:5A:70:81:25:5A:87:9E:63:81:CF:40:9E:95:11
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       6B3741F9D0B1D91B703BA02B101F573A93E43EBC
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a613030303a3a2f33352d3335203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:36 +0000
ROA not before:           Mon 03 Apr 2023 18:45:36 +0000
ROA not after:            Mon 01 Apr 2024 18:50:36 +0000
asID:                     266076
IP address blocks:        2804:3a30:a000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:41:f9:d0:b1:d9:1b:70:3b:a0:2b:10:1f:57:3a:93:e4:3e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:36 2023 GMT
            Not After : Apr  1 18:50:36 2024 GMT
        Subject: CN=DA39A3C52D1E5A7081255A879E6381CF409E9511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:d4:f7:ab:53:fc:de:3e:64:fd:f2:0b:53:
                    6b:ac:ab:4b:7a:ce:3f:d2:a0:c6:b2:fc:9f:48:35:
                    62:6b:f4:2a:28:ec:6b:1f:76:93:07:c5:81:10:82:
                    b7:d0:2d:cd:cd:9a:81:84:46:f0:16:32:4a:d7:7d:
                    e4:13:d0:18:00:43:00:b4:56:a3:af:e4:cf:18:42:
                    be:71:3a:66:79:c3:5d:f1:73:8a:2d:19:7c:b4:c8:
                    5c:a1:ab:78:67:16:e1:a4:52:54:07:0e:19:0c:d2:
                    80:40:f1:04:fe:20:a0:ff:04:44:bd:bf:0d:ee:e8:
                    86:03:f1:80:08:ef:96:45:5d:ee:9d:e6:de:12:cb:
                    db:6a:df:16:80:66:ba:ae:44:a8:c5:aa:54:5e:c9:
                    2e:06:28:ef:cf:48:2b:b4:30:e8:c2:ff:37:dd:e2:
                    ed:25:a8:e5:68:83:3c:6f:56:3f:d0:e3:ee:2c:4f:
                    99:ca:20:ef:41:ec:19:a2:20:48:47:25:1a:84:ba:
                    4d:f6:87:5f:9b:92:6b:a4:b7:7f:35:85:39:ce:2f:
                    03:e9:3e:a4:c7:aa:8c:b2:bd:bf:59:ad:fb:88:c3:
                    84:71:94:4e:10:f8:8d:58:40:36:7d:70:02:32:69:
                    81:ef:4b:f2:82:23:3f:64:c3:e9:48:5b:b8:de:a9:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:39:A3:C5:2D:1E:5A:70:81:25:5A:87:9E:63:81:CF:40:9E:95:11
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a613030303a3a2f33352d3335203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a30:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:b0:5e:fc:d6:9c:f6:fc:8a:7a:71:df:6f:90:05:bf:f7:
         c9:ba:b7:a7:e1:86:95:8c:4f:92:25:26:e6:36:2a:99:43:93:
         50:3f:52:17:68:db:b2:df:13:44:10:c1:31:0c:1f:37:21:0a:
         48:ed:52:c9:6b:5d:6e:1e:30:00:15:a3:c4:25:25:a1:fb:12:
         76:cf:aa:3d:2f:d0:65:a4:2e:1f:56:e1:21:a5:90:1b:e4:8c:
         5c:e5:53:68:af:78:33:ae:eb:56:3d:57:b3:3d:9d:63:cf:01:
         25:63:a6:ae:98:4a:c7:93:90:71:eb:74:fa:9f:a6:13:29:99:
         43:3f:fb:73:c8:0e:a0:65:62:f4:3a:e8:72:80:5d:95:18:e0:
         28:3d:1e:1d:39:3f:b1:3a:5e:b8:b5:bd:fa:bc:11:30:68:e5:
         b0:5e:c1:0e:f6:67:7a:16:ba:79:de:de:76:9e:90:ef:b2:8b:
         68:94:95:22:24:7c:c8:cd:f6:5e:97:46:2e:51:d0:04:87:90:
         79:62:d5:95:b9:a3:79:ee:24:ae:2e:df:36:fe:e1:cd:6d:12:
         01:74:61:5e:44:50:3f:6d:61:90:6a:6b:d9:56:69:c4:06:04:
         32:ef:29:0f:18:0e:9d:2e:14:c7:b2:08:e6:22:dc:53:e7:28:
         c6:b1:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:27 2025 by rpki-client