Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a3a2f33332d3333203d3e20323633393839.roa
File:                     323830343a323866343a3a2f33332d3333203d3e20323633393839.roa (raw, json)
Hash identifier:          qke64be12BMZvc7ej5UN3rZEgckOjTGS9q59bEVlmus=
Subject key identifier:   5B:AB:CA:43:09:11:27:6F:4A:55:A0:50:33:CE:8C:A1:83:5E:7A:D1
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       0BAB08DAFE70533C94F6EAC3497F78A225502080
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a3a2f33332d3333203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:20 +0000
ROA not before:           Wed 20 Mar 2024 18:52:20 +0000
ROA not after:            Wed 19 Mar 2025 18:57:20 +0000
asID:                     263989
IP address blocks:        2804:28f4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ab:08:da:fe:70:53:3c:94:f6:ea:c3:49:7f:78:a2:25:50:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:20 2024 GMT
            Not After : Mar 19 18:57:20 2025 GMT
        Subject: CN=5BABCA430911276F4A55A05033CE8CA1835E7AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:c2:35:97:fc:05:4a:5a:18:b6:86:a5:c0:
                    ba:63:3e:e8:8b:88:40:f2:02:79:b5:03:48:39:fd:
                    00:1b:38:43:69:77:f4:b4:d7:57:6f:36:0b:e8:64:
                    21:88:22:b2:26:57:2c:51:05:95:e8:94:16:d3:d9:
                    19:a2:34:72:77:83:18:39:ff:d9:c9:31:f0:43:73:
                    1f:41:f6:a5:66:8c:31:27:09:8d:dc:ec:7e:28:f3:
                    3a:e5:83:0f:68:c3:c1:64:9b:5d:00:04:78:5f:d3:
                    c5:8f:a7:17:7d:83:c3:94:32:52:6a:85:60:67:7e:
                    7b:a1:98:e5:36:e7:e6:1a:f8:4f:18:76:5e:49:3a:
                    00:fc:91:19:e7:69:66:22:9f:d5:55:d9:b0:9a:6e:
                    47:fa:c6:da:be:37:cd:af:b8:db:9e:22:d7:ef:2d:
                    1c:79:e7:7a:00:4a:0c:89:25:49:66:35:7c:34:ce:
                    88:0a:ac:57:d2:9f:ee:b7:de:2e:ae:f0:17:d7:3c:
                    61:b5:43:ae:6f:8b:83:25:6b:4b:ee:00:73:9c:60:
                    3a:39:67:e2:a5:e2:24:73:d8:2f:61:13:6b:8b:5d:
                    28:04:9d:d8:d7:8a:e9:ca:a6:e9:64:36:81:22:04:
                    18:e1:68:cc:cf:52:5f:0e:da:4d:06:1f:f6:ea:9e:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AB:CA:43:09:11:27:6F:4A:55:A0:50:33:CE:8C:A1:83:5E:7A:D1
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a3a2f33332d3333203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:a7:a5:e6:de:6e:b1:0f:c5:fa:2e:62:cc:e2:3c:a1:7f:0c:
         a4:2a:51:12:c0:44:0d:c9:bf:38:80:13:9c:76:c4:1a:00:de:
         ec:9e:4c:20:d7:77:e1:ae:56:ca:91:47:7e:e9:f3:40:e9:34:
         fd:1e:fd:a8:e8:ff:62:7f:46:7b:fd:1b:e0:17:2b:fe:42:75:
         ed:e6:cb:64:60:ef:37:93:5f:6d:2e:8e:91:27:e4:38:4c:27:
         f3:0e:1d:e0:7c:55:f6:ef:df:ec:14:1f:2d:12:fc:9c:0d:ba:
         e7:e1:5f:89:d4:7f:06:51:f4:9b:44:d9:34:b1:86:1e:75:97:
         e0:69:5e:e2:0a:a7:d1:72:28:30:68:24:e9:2f:85:e2:e3:9b:
         47:49:ab:92:0d:a7:4d:02:48:a9:7f:7a:fa:10:ad:49:ad:90:
         b0:b8:55:11:56:73:31:b0:cf:06:0f:47:f8:1d:32:ab:35:8c:
         24:eb:4f:3d:7e:af:dc:48:be:94:11:97:59:82:5d:79:a0:3f:
         3b:3e:6b:29:26:95:9e:e9:dc:14:2f:fa:3d:e3:22:d2:c7:bc:
         a6:c5:f0:95:9f:f2:3d:aa:18:00:b0:4a:2c:6d:6c:92:de:2b:
         fe:d4:34:a3:23:f8:6b:8c:f9:f4:de:2c:14:4d:5b:32:84:f5:
         b4:cb:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:23 2025 by rpki-client