Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a343030303a3a2f33342d3334203d3e20323732373632.roa
File:                     323830343a383834633a343030303a3a2f33342d3334203d3e20323732373632.roa (raw, json)
Hash identifier:          U0YZGJjC4XMeh20IoQoSJYgxn6SvsMtKpw6/7yDv+uc=
Subject key identifier:   C3:6B:EA:28:B8:03:58:BC:12:CE:C7:41:B7:3F:D7:8B:1D:0B:16:01
Certificate issuer:       /CN=41BE088D7BE0BD2192424318F3299100619CFF6C
Certificate serial:       5C7D0F58E483AE55499332E3864CF1F41148BEE7
Authority key identifier: 41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a343030303a3a2f33342d3334203d3e20323732373632.roa
Signing time:             Fri 06 Oct 2023 21:21:09 +0000
ROA not before:           Fri 06 Oct 2023 21:16:09 +0000
ROA not after:            Fri 04 Oct 2024 21:21:09 +0000
asID:                     272762
IP address blocks:        2804:884c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:0f:58:e4:83:ae:55:49:93:32:e3:86:4c:f1:f4:11:48:be:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BE088D7BE0BD2192424318F3299100619CFF6C
        Validity
            Not Before: Oct  6 21:16:09 2023 GMT
            Not After : Oct  4 21:21:09 2024 GMT
        Subject: CN=C36BEA28B80358BC12CEC741B73FD78B1D0B1601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:a4:39:d8:52:51:ee:2f:0a:1b:ec:a6:be:
                    fa:0c:50:c3:e0:60:8c:64:18:c0:bc:a5:cf:c8:02:
                    66:b8:d0:3f:0c:2a:06:61:df:8b:53:71:b8:2d:34:
                    04:ce:d7:7b:be:3c:db:99:b0:29:4d:03:a9:9f:13:
                    c3:8b:bb:1f:a0:d1:87:bc:03:96:59:3d:6c:df:75:
                    1e:aa:3e:54:4e:3a:00:a9:07:8b:32:65:e5:2d:bc:
                    07:b3:0a:39:bf:8c:e8:fd:10:8a:6c:9e:b8:e3:c0:
                    12:e0:ac:37:a9:ca:4b:81:e0:31:b6:e1:cb:61:e1:
                    c2:45:f2:6b:f0:05:87:bb:f5:e6:53:f4:10:6c:f8:
                    b9:fc:f8:82:7e:6c:23:ec:d2:73:c2:99:30:71:4a:
                    f5:52:58:a5:e8:c5:07:ae:ec:b9:3d:c2:fb:f1:05:
                    81:de:25:af:d2:d2:8c:55:58:b6:6d:f1:e1:19:e3:
                    9e:35:0e:30:e8:a0:19:67:f6:84:56:5e:b4:7a:ce:
                    32:e9:17:d0:24:ac:d0:f6:db:37:a9:0c:76:1d:bd:
                    60:1c:b1:04:38:57:f8:0d:58:ae:03:c5:86:ab:68:
                    00:52:e5:97:a1:5b:6e:18:d2:80:54:31:40:09:80:
                    a4:2f:62:a1:b4:11:2a:6d:4c:f0:73:43:75:ea:6c:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:EA:28:B8:03:58:BC:12:CE:C7:41:B7:3F:D7:8B:1D:0B:16:01
            X509v3 Authority Key Identifier:
                keyid:41:BE:08:8D:7B:E0:BD:21:92:42:43:18:F3:29:91:00:61:9C:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/41BE088D7BE0BD2192424318F3299100619CFF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BE088D7BE0BD2192424318F3299100619CFF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/323830343a383834633a343030303a3a2f33342d3334203d3e20323732373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:69:ae:3b:7d:07:55:b0:60:54:a1:2c:bc:b4:16:a6:3a:a7:
         8c:3b:ef:70:13:34:a5:cb:ff:ba:9a:8c:3b:50:8d:2b:92:31:
         39:79:b4:66:cd:40:44:b2:44:8c:a7:23:b8:af:5e:c9:f4:db:
         d7:6a:f6:35:91:cd:b4:fc:23:68:93:2f:0d:b4:fa:83:08:54:
         e3:26:63:16:b4:70:1b:2f:2f:3f:43:68:bf:51:3b:fc:4e:2b:
         3b:f2:09:c4:d7:3e:e5:ea:7c:11:d4:1f:ba:77:51:19:08:6d:
         0a:d2:cd:4c:59:69:fd:d6:f2:14:c1:57:b5:34:ed:ab:f7:99:
         61:3b:5e:f9:50:89:da:13:ac:ca:76:fe:a6:4f:ae:e0:b6:90:
         2f:75:0e:39:8b:0d:ee:0e:26:8b:0a:48:6a:d1:af:f5:6a:8b:
         9b:56:d9:e2:96:22:c0:a4:c4:dc:ce:70:82:1e:f7:03:34:3d:
         7a:db:df:c3:88:0f:ba:59:66:d3:84:3a:7f:17:f7:8b:4d:8a:
         b1:d6:4d:fb:e9:08:6f:de:be:77:90:c1:fc:07:01:e7:d3:a1:
         0d:b7:33:64:b7:45:d2:7a:84:5c:1b:8f:76:8b:a5:eb:79:74:
         34:b3:7e:c0:30:2d:57:66:ee:c0:49:16:a2:1b:cd:18:c2:18:
         4a:e1:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:40 2025 by rpki-client