Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/323830343a383532383a3a2f33322d313238203d3e20323732353631.roa
File:                     323830343a383532383a3a2f33322d313238203d3e20323732353631.roa (raw, json)
Hash identifier:          nUZ5iNfXFzoc2RQzXRwDFSZ4nhgIXN5U2lSg17AJX5g=
Subject key identifier:   6D:18:0E:2B:F6:5D:9C:07:2E:E1:50:98:4C:F2:78:2F:21:01:69:0E
Certificate issuer:       /CN=607CDFBA3079E20B9565366ACED071C47C6991A9
Certificate serial:       0C5F9296EE845306B3340690EEFC302A9DAF92DB
Authority key identifier: 60:7C:DF:BA:30:79:E2:0B:95:65:36:6A:CE:D0:71:C4:7C:69:91:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/607CDFBA3079E20B9565366ACED071C47C6991A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/323830343a383532383a3a2f33322d313238203d3e20323732353631.roa
Signing time:             Fri 24 Mar 2023 01:09:25 +0000
ROA not before:           Fri 24 Mar 2023 01:04:25 +0000
ROA not after:            Fri 22 Mar 2024 01:09:25 +0000
asID:                     272561
IP address blocks:        2804:8528::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5f:92:96:ee:84:53:06:b3:34:06:90:ee:fc:30:2a:9d:af:92:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607CDFBA3079E20B9565366ACED071C47C6991A9
        Validity
            Not Before: Mar 24 01:04:25 2023 GMT
            Not After : Mar 22 01:09:25 2024 GMT
        Subject: CN=6D180E2BF65D9C072EE150984CF2782F2101690E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:8a:8b:8f:24:8f:45:6f:f5:1d:8f:96:52:
                    a2:85:14:e3:e5:b1:67:aa:c9:57:f6:9a:97:38:32:
                    b6:d9:43:ac:08:fd:e8:62:1c:05:b9:be:16:39:f7:
                    01:32:a1:f2:59:c1:0c:4f:6b:71:c7:7a:6d:15:fb:
                    ab:a1:37:ae:76:a5:e8:8c:0d:5e:b5:26:ab:03:cb:
                    14:97:df:b0:ad:00:23:53:8a:9f:62:42:2a:32:b8:
                    c3:03:53:d1:40:87:d7:b5:ec:c2:b7:af:4f:cd:cb:
                    26:fa:f4:e8:69:fa:8e:50:2d:88:ee:ac:0c:26:6e:
                    65:b9:5c:56:6a:8d:5e:7d:66:50:df:7b:c2:f3:87:
                    04:bd:61:7e:e6:17:0e:44:f5:a6:87:eb:a8:f3:a8:
                    63:26:f9:93:af:a5:1e:91:6b:86:c3:d9:e2:2c:01:
                    64:cc:56:3a:50:fb:9a:cb:9d:f7:26:51:19:4e:f4:
                    6a:5b:a5:e4:d6:5c:07:22:9b:15:83:66:70:da:72:
                    95:e0:37:23:e0:c8:2e:a7:25:5d:38:69:13:64:3e:
                    d4:51:78:da:53:c2:b8:89:24:13:f3:3d:b3:e3:40:
                    f9:91:55:fd:97:a4:dc:e2:0d:19:64:9c:67:3d:d4:
                    51:de:28:44:db:ef:c1:3f:4c:51:9c:d9:45:ff:80:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:0E:2B:F6:5D:9C:07:2E:E1:50:98:4C:F2:78:2F:21:01:69:0E
            X509v3 Authority Key Identifier:
                keyid:60:7C:DF:BA:30:79:E2:0B:95:65:36:6A:CE:D0:71:C4:7C:69:91:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/607CDFBA3079E20B9565366ACED071C47C6991A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/607CDFBA3079E20B9565366ACED071C47C6991A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/323830343a383532383a3a2f33322d313238203d3e20323732353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8528::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:f9:5f:4e:86:cb:b8:8b:e2:c7:aa:96:cf:b1:29:fb:06:
         95:b1:fb:c9:6a:06:f3:b8:58:1d:6c:a2:80:48:8e:0a:87:cc:
         57:c4:44:b4:c3:bb:16:64:09:66:0c:3f:f1:32:7a:53:df:b4:
         39:28:96:f6:74:72:f0:c1:a0:32:a7:0c:39:7b:74:a7:09:bd:
         e0:4c:e8:1c:93:47:79:f9:fb:1c:fd:fd:fe:04:91:b1:4a:01:
         53:95:fb:e7:64:ca:e7:41:3b:65:8c:7d:9f:bf:57:2b:4c:b3:
         cc:31:58:4c:05:49:ff:5a:5b:fb:8a:b6:b1:bd:d5:63:14:c6:
         7f:45:a7:b3:d5:5e:c6:1e:0c:0b:15:a9:b2:e4:ea:23:90:44:
         90:78:1d:d8:2b:37:8b:b8:bb:72:a0:6b:14:b3:b4:9d:2f:72:
         2c:98:a1:2c:e5:85:a9:b5:f9:5e:de:52:b4:fd:fa:10:b6:8f:
         e0:a0:63:c3:0e:8a:eb:43:e5:d3:1f:c8:a8:9d:29:91:61:77:
         dc:1f:37:24:51:ec:17:19:77:85:d2:04:3f:00:bd:ec:3c:3c:
         57:63:b3:ed:75:53:bb:fc:03:76:69:34:0e:aa:1d:64:e7:12:
         72:78:a7:ca:a8:08:55:f5:18:47:65:ed:43:65:ea:5a:2a:22:
         2f:86:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:49:15 2025 by rpki-client