Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3335203d3e203631363936.roa
File:                     323830343a316165303a3a2f33322d3335203d3e203631363936.roa (raw, json)
Hash identifier:          iDE+FOM4JhFlLJXsbmVURpa4/hcEqFYTXXFjCB40GcU=
Subject key identifier:   E1:0C:DB:01:B2:B3:AC:C0:BD:89:50:9C:9F:22:D7:8B:E1:AC:0E:A7
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       035543D70737732D724E1058A9EB567B5F6BDC67
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3335203d3e203631363936.roa
Signing time:             Sun 15 Oct 2023 01:25:02 +0000
ROA not before:           Sun 15 Oct 2023 01:20:02 +0000
ROA not after:            Sun 13 Oct 2024 01:25:02 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:55:43:d7:07:37:73:2d:72:4e:10:58:a9:eb:56:7b:5f:6b:dc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct 15 01:20:02 2023 GMT
            Not After : Oct 13 01:25:02 2024 GMT
        Subject: CN=E10CDB01B2B3ACC0BD89509C9F22D78BE1AC0EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:b5:e6:91:2b:83:47:a3:55:80:9e:04:3a:
                    45:14:10:3f:f3:b2:57:bd:f3:57:b6:ba:91:c2:bd:
                    ce:c3:b0:e9:9b:60:e1:a2:f2:52:94:e6:23:a9:13:
                    71:a6:6a:e9:65:9d:a5:fa:51:c4:e9:b2:70:7a:66:
                    00:7d:99:49:00:4b:02:68:c3:d0:15:44:35:e9:af:
                    2e:e0:17:6b:94:25:28:7b:62:ec:90:ff:27:83:2c:
                    49:63:67:c0:97:d6:67:91:ca:23:b4:0d:c6:9d:05:
                    9d:d7:07:a8:77:27:07:c2:15:ba:cc:bb:ad:06:26:
                    7f:e2:ed:b4:03:9f:02:6f:d1:a5:87:6d:94:6b:3c:
                    72:6d:a2:1d:02:40:ad:3b:64:2d:39:b9:06:df:dd:
                    04:fd:e9:d2:c3:61:36:dd:cb:ee:bf:9c:fb:ef:ef:
                    fe:a8:48:66:c8:a1:8e:9a:2d:2d:10:8c:4d:10:80:
                    93:c7:92:eb:6e:e7:97:bb:09:5a:e0:48:5a:67:c2:
                    1d:33:2c:5a:ee:63:ea:af:80:7b:b0:3a:f5:93:ab:
                    37:0a:fa:94:7a:20:1c:0f:ca:00:8a:f4:7f:b3:7f:
                    0d:e2:1f:71:13:94:99:ff:8f:c9:ed:65:0a:4a:0d:
                    dd:78:8f:3b:0b:45:0b:1d:98:9c:03:37:d2:f8:86:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:DB:01:B2:B3:AC:C0:BD:89:50:9C:9F:22:D7:8B:E1:AC:0E:A7
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3335203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:a2:38:4c:59:06:44:04:75:ac:12:77:39:18:cb:4c:74:
         31:38:63:7b:f3:05:6c:1f:92:2a:de:74:82:9c:4a:b6:b8:9c:
         78:fb:1e:fa:15:31:5c:72:e7:29:ea:20:96:c0:bd:ce:f7:02:
         1c:9d:51:3f:d8:9e:7b:9c:8b:99:99:17:03:ad:53:d5:4c:af:
         b6:7b:65:2d:d0:4b:d7:bb:68:ee:2a:30:7c:e4:44:37:82:4f:
         fc:a7:0a:36:26:87:d2:d2:a6:b8:b3:20:ac:a6:c4:60:bb:e6:
         f5:2d:42:e7:f4:39:0a:3b:37:67:67:09:1b:53:a3:3c:9b:d4:
         19:d1:bc:a0:b5:8b:fc:38:a8:fa:64:88:21:5f:e4:df:b7:93:
         a7:5b:3f:cf:68:c0:c6:8e:1a:51:28:4f:5a:55:af:61:b9:da:
         3d:8d:ee:c5:c8:6d:96:1d:f2:d2:9a:3d:f3:b7:17:a5:8d:06:
         4c:e7:27:b8:06:96:43:e3:72:0e:41:42:aa:e0:9c:76:54:d9:
         d2:55:4c:40:98:77:b0:9d:07:f2:18:70:ec:bf:1d:e1:0e:38:
         24:66:8a:50:72:24:c6:b5:1d:05:f0:a1:53:d0:db:02:0c:48:
         9b:9d:01:b5:7c:f6:38:88:59:cb:40:7d:1c:ce:2d:e6:de:17:
         90:c9:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:14 2025 by rpki-client