Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a3a2f33322d3332203d3e20323634333031.roa
File:                     323830343a323563343a3a2f33322d3332203d3e20323634333031.roa (raw, json)
Hash identifier:          u7NV6QpjniM8QMs2eUSkuPwwLCWqP84QNxBf/AkALKA=
Subject key identifier:   08:EC:C8:33:97:2E:C6:9B:E2:AF:8F:C1:BA:F3:D4:22:D5:DC:DC:A2
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       68BABB71881625AAB32D96D484987CF63E59C45E
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a3a2f33322d3332203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:10:08 +0000
ROA not before:           Sat 08 Apr 2023 03:05:08 +0000
ROA not after:            Sat 06 Apr 2024 03:10:08 +0000
asID:                     264301
IP address blocks:        2804:25c4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ba:bb:71:88:16:25:aa:b3:2d:96:d4:84:98:7c:f6:3e:59:c4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:05:08 2023 GMT
            Not After : Apr  6 03:10:08 2024 GMT
        Subject: CN=08ECC833972EC69BE2AF8FC1BAF3D422D5DCDCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:9b:57:15:11:5f:da:9c:d5:1d:3a:a7:27:
                    f4:2d:ac:db:ed:e8:9b:ad:71:b7:3f:ce:c3:76:01:
                    f5:f7:2c:f2:a3:29:98:2d:89:ef:bf:f2:dd:40:e7:
                    38:58:5d:2b:5b:1c:dc:35:a3:89:c5:02:61:c9:db:
                    17:c1:d3:4c:ab:f9:a2:52:32:36:04:9c:35:5c:a5:
                    33:31:87:66:63:f9:5e:c9:a6:b4:1d:e7:2c:c6:54:
                    e5:48:32:47:f5:8a:e2:a1:8f:db:59:68:e3:39:16:
                    4f:f7:31:50:c5:6b:39:c2:95:d4:b5:3e:2c:6c:ab:
                    d8:4a:48:bc:07:26:39:95:d8:3e:29:74:1f:e3:b1:
                    8f:19:38:c2:22:f6:ad:3e:a4:f6:1a:1a:de:c9:b3:
                    d9:cd:88:74:cc:ab:ce:a5:e3:65:1b:0b:92:1b:93:
                    d4:40:db:de:21:dd:5f:82:c1:d4:b3:f1:08:98:d3:
                    a4:70:08:1a:ca:17:56:a6:a8:e0:3d:bb:ee:fc:1c:
                    7f:d9:a5:6f:dc:88:7c:9a:8a:a5:0e:3b:e5:22:76:
                    45:f9:6c:f1:01:06:6c:b1:c6:ef:46:e8:fc:d1:e9:
                    9f:53:a3:9b:ec:2f:7e:3b:ee:d8:0f:a8:c3:ab:3d:
                    8a:65:1a:98:b2:0c:7b:0f:d7:10:a4:24:68:d3:15:
                    ec:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:C8:33:97:2E:C6:9B:E2:AF:8F:C1:BA:F3:D4:22:D5:DC:DC:A2
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/323830343a323563343a3a2f33322d3332203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:66:4b:93:9e:e2:31:bd:b3:02:aa:45:ab:09:0d:b9:a9:92:
         bc:1d:c7:10:42:49:86:98:21:cf:17:0b:5b:7f:95:cc:3d:c6:
         04:f9:1a:4f:70:8d:df:bc:4a:2c:9c:a9:44:f7:c8:16:be:ef:
         c6:70:1e:ac:b7:2f:10:9d:17:ac:92:4a:ab:f0:fd:84:51:5b:
         03:31:e6:49:a6:87:ae:83:0d:0a:ba:92:b6:1a:be:03:c9:03:
         f0:ed:04:72:3a:81:92:be:7f:eb:33:b6:6f:fb:c2:99:44:36:
         fb:a8:34:6b:0b:24:f4:65:93:3c:8d:df:18:48:e4:96:6e:eb:
         ad:f8:04:3b:b0:d9:f8:8d:3c:3b:0c:51:6c:7f:07:a3:ef:a2:
         1b:09:fa:9c:d3:2f:00:10:1a:84:69:95:b4:a9:69:0a:73:21:
         95:46:8c:2c:58:5b:07:28:aa:00:d3:63:4d:91:74:fc:e6:41:
         d4:06:ce:10:d9:a5:f0:6a:93:f9:72:ed:7d:97:2e:9a:e7:8e:
         60:49:93:73:2b:a2:46:e8:dc:c4:d3:e6:8f:8d:40:ab:93:6f:
         79:65:c2:49:fa:f9:7e:5c:80:97:11:a9:23:53:8d:ba:f4:1d:
         3a:b6:50:4b:c8:f2:5e:04:b4:2d:c6:bf:1e:06:1c:60:6d:0f:
         81:be:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:17 2025 by rpki-client