Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/323830343a383462303a3a2f33322d3334203d3e20323732323735.roa
File:                     323830343a383462303a3a2f33322d3334203d3e20323732323735.roa (raw, json)
Hash identifier:          kLolesxzozVxik74Y4oQoa/2woErE7Q8s65OX9ZuvRg=
Subject key identifier:   C2:87:2E:12:E4:35:3C:10:1B:F1:70:BF:C1:17:71:48:84:29:07:7F
Certificate issuer:       /CN=F028B63E804948E6DFBA9BFD8B098AD61DF68992
Certificate serial:       385C2E769B5612F1E40226AA72699E29AEA39D45
Authority key identifier: F0:28:B6:3E:80:49:48:E6:DF:BA:9B:FD:8B:09:8A:D6:1D:F6:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F028B63E804948E6DFBA9BFD8B098AD61DF68992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/323830343a383462303a3a2f33322d3334203d3e20323732323735.roa
Signing time:             Mon 19 Dec 2022 21:25:39 +0000
ROA not before:           Mon 19 Dec 2022 21:20:39 +0000
ROA not after:            Mon 18 Dec 2023 21:25:39 +0000
asID:                     272275
IP address blocks:        2804:84b0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5c:2e:76:9b:56:12:f1:e4:02:26:aa:72:69:9e:29:ae:a3:9d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F028B63E804948E6DFBA9BFD8B098AD61DF68992
        Validity
            Not Before: Dec 19 21:20:39 2022 GMT
            Not After : Dec 18 21:25:39 2023 GMT
        Subject: CN=C2872E12E4353C101BF170BFC11771488429077F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:3e:f6:9f:42:38:98:ed:84:94:f7:d0:23:
                    96:6e:84:a4:ab:e4:c6:5f:6f:71:e9:3d:0b:54:d7:
                    ec:19:54:18:cc:e4:f4:d0:92:cb:94:92:ce:f8:13:
                    49:b3:bf:d4:35:c4:0a:a4:0e:51:3c:d1:fd:7a:b5:
                    91:65:70:88:e2:bb:57:75:96:c6:69:57:d8:f9:d2:
                    33:16:4c:40:01:3b:1d:7a:22:22:2c:75:92:f8:95:
                    e4:ef:c6:5d:3a:99:b9:ec:b1:f0:a0:29:a2:a7:dd:
                    2e:8f:23:e3:2b:4f:3b:3d:50:2e:ed:6f:2d:ed:fb:
                    31:16:6c:c6:ed:16:b3:04:48:7e:0d:12:93:af:c1:
                    d7:d6:cb:84:93:6f:53:05:db:4a:f2:0d:66:01:0a:
                    55:c6:d5:fc:27:1f:25:d9:60:23:20:42:55:ca:c2:
                    6b:b5:de:cb:14:e7:13:7b:28:68:17:47:b4:29:9d:
                    e3:c9:6a:3b:1c:8b:c0:dc:ae:3a:12:83:a8:5e:0a:
                    65:4d:b2:5e:ff:7c:aa:f3:11:d7:e3:ab:1b:e0:ee:
                    cd:8a:5c:c1:8f:7d:61:7c:b6:00:f2:e7:19:35:4e:
                    4f:d3:ff:f4:ac:ca:6a:61:a8:e1:56:1e:19:88:f9:
                    26:45:e3:b8:67:e1:aa:15:be:79:fb:f1:7f:de:c4:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:2E:12:E4:35:3C:10:1B:F1:70:BF:C1:17:71:48:84:29:07:7F
            X509v3 Authority Key Identifier:
                keyid:F0:28:B6:3E:80:49:48:E6:DF:BA:9B:FD:8B:09:8A:D6:1D:F6:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/F028B63E804948E6DFBA9BFD8B098AD61DF68992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F028B63E804948E6DFBA9BFD8B098AD61DF68992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/323830343a383462303a3a2f33322d3334203d3e20323732323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:65:88:f6:9c:7c:ac:31:ca:3c:63:bf:ef:d7:ea:53:98:7c:
         c1:85:82:22:2e:67:b6:77:1e:51:58:47:ff:aa:7b:aa:27:54:
         08:d8:7c:6d:78:3c:ad:c3:cd:1c:6a:e6:a6:fd:d6:df:b4:df:
         4f:84:65:25:bb:6a:a9:fe:10:90:53:9b:5b:87:35:df:28:8d:
         4b:c8:28:f5:6c:c7:c7:c4:da:7e:5a:30:25:a0:bc:46:4a:6e:
         6c:63:20:6e:84:58:47:3c:1e:09:e1:41:da:e7:00:76:89:f9:
         7d:bc:9c:00:9e:e7:cc:41:6f:bc:d7:37:b4:58:e0:28:c8:5e:
         40:56:21:b7:58:23:1f:4d:6f:bb:e8:ca:ff:16:33:60:23:21:
         36:ac:93:f1:fb:d8:0c:f6:7a:8b:83:65:cc:be:af:b4:34:78:
         99:74:85:9d:3d:6d:39:1d:05:b9:13:8f:fb:f4:86:31:ba:9f:
         fa:4c:21:37:16:eb:48:4e:d1:e3:03:96:51:7a:e4:92:d9:ff:
         5d:00:5f:10:fd:0c:9c:6c:17:83:6d:26:24:fd:f4:bd:51:b0:
         e6:91:fc:de:9c:4f:bf:d6:dd:0a:d4:c1:44:c6:d9:61:3b:6b:
         93:8d:36:24:04:71:28:8c:e9:72:51:f9:a4:6a:ba:a4:37:e0:
         44:20:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:49 2025 by rpki-client