Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3a2f33332d3333203d3e20323637353633.roa
File:                     323830343a343335343a3a2f33332d3333203d3e20323637353633.roa (raw, json)
Hash identifier:          BqBItVsV/QQF+hKcBXAkLoAxpC7UacqSrXUWjeGPuks=
Subject key identifier:   C0:A5:59:65:90:C0:34:B6:17:5D:4F:11:4A:34:DA:B8:13:36:49:78
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       03E7D86A94C6096D3262A4D26A3C9597409575AB
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3a2f33332d3333203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:55 +0000
ROA not before:           Tue 08 Aug 2023 12:54:55 +0000
ROA not after:            Tue 06 Aug 2024 12:59:55 +0000
asID:                     267563
IP address blocks:        2804:4354::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e7:d8:6a:94:c6:09:6d:32:62:a4:d2:6a:3c:95:97:40:95:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:55 2023 GMT
            Not After : Aug  6 12:59:55 2024 GMT
        Subject: CN=C0A5596590C034B6175D4F114A34DAB813364978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:2b:b5:36:e8:52:51:c4:b8:d7:0f:d3:b0:
                    44:1d:14:dc:43:ac:b8:ee:8c:b9:c2:eb:e0:81:67:
                    08:7c:b3:7f:a2:59:80:78:f1:a2:6b:7a:32:bc:50:
                    5e:ae:3f:bd:5a:04:84:7c:ef:62:68:fa:a1:a6:58:
                    b3:23:fd:1e:7f:6b:21:3f:d6:c5:d1:89:6d:a6:36:
                    89:2d:c9:f0:78:c8:27:5d:41:07:51:73:3f:0c:fe:
                    5c:7e:e7:68:65:d3:71:8c:cf:28:b5:a8:17:53:6a:
                    ad:ac:68:b2:5d:2e:6e:bc:4b:06:21:a8:11:e6:55:
                    e0:65:c5:6b:3d:1f:24:7c:dc:9e:fd:5f:47:9f:7a:
                    5b:8f:82:0f:cb:a2:0c:02:f9:ee:85:15:71:24:50:
                    62:7a:9f:83:7d:e9:f6:a1:29:d0:65:10:99:79:d4:
                    86:61:14:94:1b:01:bc:7b:26:f4:3e:0a:7f:dd:de:
                    48:73:ae:d8:ff:83:bc:b6:f0:4b:16:30:27:e2:a9:
                    2e:44:41:2f:b2:fd:84:e5:ed:55:91:ef:17:38:c4:
                    15:82:9b:07:61:61:56:89:7a:8c:4a:2c:52:06:93:
                    63:8d:cc:38:e2:49:67:c8:ce:b6:1d:b2:a3:31:d8:
                    1f:09:d9:43:58:81:43:f4:62:94:16:c4:de:34:d1:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A5:59:65:90:C0:34:B6:17:5D:4F:11:4A:34:DA:B8:13:36:49:78
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3a2f33332d3333203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4354::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:9b:88:f6:c0:14:49:bf:03:b6:7a:b1:be:1c:4d:59:06:
         6b:4e:b0:11:95:36:6d:0a:62:33:42:a4:5b:0c:ff:76:0e:20:
         30:64:25:02:73:c8:77:f5:27:c9:3b:70:a7:08:ce:f0:e8:56:
         99:91:dd:93:b1:ce:4e:84:89:8d:ab:82:70:bd:87:ab:28:1c:
         7e:2a:33:d4:70:f1:bf:81:37:c9:8c:cc:ef:7f:92:c6:07:da:
         c4:ed:91:15:fa:54:13:82:b8:f8:c2:64:2f:f4:00:30:9d:b9:
         b6:b4:f9:ab:8a:0d:ef:ec:31:85:49:97:9c:4c:9d:96:e7:7a:
         86:b5:6d:2a:42:bf:0a:34:6e:e0:18:83:d0:b5:3c:d0:df:57:
         da:37:f4:4b:ab:0c:fa:82:41:92:57:f1:61:ea:7b:51:24:28:
         e5:5a:30:7d:d2:e5:83:20:7b:c7:f2:d1:ea:2b:cc:b1:5b:d4:
         03:3b:58:3a:05:c4:c4:9c:b4:1b:ec:b5:e2:8d:5b:bc:78:44:
         0f:6a:c1:c6:f3:f5:72:05:5c:15:dc:57:e5:f8:90:ca:5d:44:
         45:b6:4a:8e:85:2c:0e:34:65:43:2d:17:f7:d4:77:0c:1f:c9:
         f6:b4:6a:49:3a:29:b1:f0:96:57:fc:4a:cb:47:01:d0:02:f4:
         e2:68:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:26:29 2025 by rpki-client