Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a383030333a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a383030333a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          v8aF80C0G424HfSYOZsPvSGwEdGqn0QN9feicEnWzaU=
Subject key identifier:   96:FA:57:22:15:3B:2E:03:38:FC:84:23:31:87:99:81:46:5E:73:90
Certificate issuer:       /CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
Certificate serial:       3505F2D792385A2B0211864866BA1560C0B7C330
Authority key identifier: 03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a383030333a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 13 Jun 2022 13:07:12 +0000
ROA not before:           Mon 13 Jun 2022 13:02:12 +0000
ROA not after:            Mon 12 Jun 2023 13:07:12 +0000
asID:                     266437
IP address blocks:        2804:37d0:8003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:05:f2:d7:92:38:5a:2b:02:11:86:48:66:ba:15:60:c0:b7:c3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
        Validity
            Not Before: Jun 13 13:02:12 2022 GMT
            Not After : Jun 12 13:07:12 2023 GMT
        Subject: CN=96FA5722153B2E0338FC842331879981465E7390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:5f:ac:51:74:b7:5b:6f:50:98:b5:95:14:
                    21:98:6e:c3:7e:4c:8c:d2:1c:68:24:b8:2c:f8:36:
                    6f:28:09:b3:34:67:83:10:ac:04:12:74:a3:d6:34:
                    bc:84:fc:ae:f7:d0:cf:04:29:8e:d4:14:ec:14:25:
                    af:a5:cb:27:99:a5:20:9e:bb:ad:28:9b:a8:cc:89:
                    ea:c7:6e:6c:9b:45:54:eb:70:e7:1a:54:cf:6d:e4:
                    55:78:99:32:93:24:39:8d:f7:0f:0f:fe:f6:cb:13:
                    4b:2b:d1:49:9d:5a:a5:b1:e8:e4:be:17:0f:61:05:
                    26:29:e3:77:47:b0:e9:e6:a1:83:ea:c2:65:ec:06:
                    87:fc:c0:eb:3f:99:0b:45:50:13:5c:3c:54:d9:89:
                    6b:d4:0a:26:71:dd:71:9d:8c:75:ae:bc:8c:8c:3b:
                    f7:01:08:33:99:b8:31:de:46:e8:43:dd:18:69:13:
                    5c:5d:b0:b5:19:5b:0c:ba:d9:0d:16:d7:ca:45:29:
                    b9:36:37:45:8a:0d:61:f6:84:e4:eb:86:89:99:aa:
                    ca:06:55:2c:0c:67:01:47:90:54:5c:2e:9a:5c:57:
                    dd:eb:e9:8b:3f:be:4f:f1:8d:cb:54:64:68:21:c4:
                    f6:54:d8:37:31:28:de:46:c9:9f:a0:7c:8d:74:b6:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:57:22:15:3B:2E:03:38:FC:84:23:31:87:99:81:46:5E:73:90
            X509v3 Authority Key Identifier:
                keyid:03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a383030333a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:31:19:ef:8e:a6:be:fa:6a:87:8d:35:06:fe:0d:e8:68:
         85:8c:49:78:64:9a:fa:c1:68:09:25:73:05:69:8f:39:0f:25:
         8f:06:4d:e7:bd:ac:17:92:dc:3b:3c:4d:1f:6b:63:8d:d6:3e:
         d5:70:25:96:fd:ac:b1:1b:a4:3e:54:6e:1c:7f:e6:b0:58:e7:
         9b:b0:f8:81:22:b5:dc:9e:3b:aa:a9:84:f7:2f:e4:41:a9:92:
         b3:be:30:5a:ef:63:d3:c0:57:bb:0c:3a:5e:32:ad:9e:52:e7:
         62:d4:67:0b:cd:55:9f:12:6a:e5:bf:33:cf:45:2f:2c:ce:a1:
         42:a6:c5:71:c9:07:c8:6c:41:da:dc:33:05:c9:b8:2f:8f:fa:
         f4:8e:07:e3:7f:6a:ab:cd:7b:d9:9a:04:e4:d9:90:c8:1b:d2:
         6c:94:6a:3b:94:48:ba:d4:a0:b0:1e:cc:35:6d:77:85:b0:f3:
         26:ea:b5:f4:bd:4e:f8:0f:9f:63:7f:da:e2:ba:72:b2:fb:f6:
         e2:3b:a9:7e:a3:f8:b7:b8:2c:9f:61:7b:97:d9:3a:f8:59:bd:
         2f:a4:8e:2b:5c:bd:96:21:fd:f3:37:55:41:8d:29:36:88:b4:
         17:3b:7d:a6:b8:74:18:55:5a:7f:ff:35:33:3a:6c:e0:5a:0d:
         1b:c9:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:42 2025 by rpki-client