Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          XySblSiFdrGSRqhApklCxEbZKqHUAccYddom+tPAYwk=
Subject key identifier:   EE:E7:74:A5:F8:4F:0E:70:3B:A5:BD:51:15:90:C2:55:EF:D8:38:F9
Certificate issuer:       /CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Certificate serial:       470EF883E718CECE8B475879219B6B394A1874F7
Authority key identifier: 78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 05 Oct 2023 19:21:53 +0000
ROA not before:           Thu 05 Oct 2023 19:16:53 +0000
ROA not after:            Thu 03 Oct 2024 19:21:53 +0000
asID:                     265935
IP address blocks:        2804:401c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0e:f8:83:e7:18:ce:ce:8b:47:58:79:21:9b:6b:39:4a:18:74:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
        Validity
            Not Before: Oct  5 19:16:53 2023 GMT
            Not After : Oct  3 19:21:53 2024 GMT
        Subject: CN=EEE774A5F84F0E703BA5BD511590C255EFD838F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:9d:de:b4:ef:66:ca:b0:a7:b4:ca:f1:9c:
                    ac:a0:09:6e:0f:52:64:83:be:ae:39:0d:e5:a9:b8:
                    a1:70:ec:7f:6e:11:04:09:a4:72:c7:ba:c5:d6:df:
                    fb:1d:c2:67:32:81:0e:98:48:d8:36:6f:99:30:d8:
                    16:ea:bb:e0:3a:6d:91:61:c5:23:a0:82:f2:e5:98:
                    de:86:65:68:22:fc:a2:37:20:dd:b7:d3:91:d4:87:
                    8c:ef:ee:b8:fb:08:91:db:ec:de:4a:7d:b2:58:c8:
                    e2:d9:1f:33:c8:2d:1f:3a:40:4e:15:6a:9d:e6:0e:
                    0f:e8:7c:c6:a9:af:d3:e5:3d:80:59:08:0e:e9:8d:
                    10:9a:7e:42:3f:6d:d2:65:22:24:bd:1e:8a:57:15:
                    da:32:9a:e0:57:7d:fd:76:6b:a4:1e:ed:47:3b:64:
                    60:71:0c:9a:80:f5:27:88:f4:83:07:94:da:5e:9e:
                    2c:83:e3:97:ed:c4:e5:77:0b:e2:cf:3d:a2:11:b6:
                    d0:fc:cb:15:e0:52:fa:90:7a:e0:47:89:8a:a4:f1:
                    d2:94:ad:61:85:26:34:57:47:0e:05:31:aa:f8:18:
                    6a:22:92:ab:6c:1b:9e:6b:47:68:e8:24:08:ca:a8:
                    a6:f5:70:ad:1e:d8:5f:de:b0:ef:24:0c:49:fc:a2:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:74:A5:F8:4F:0E:70:3B:A5:BD:51:15:90:C2:55:EF:D8:38:F9
            X509v3 Authority Key Identifier:
                keyid:78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:be:4e:bf:ce:d2:da:f8:f9:2e:1c:01:fb:2c:97:ba:00:
         54:b6:ae:4c:61:47:bd:7f:c2:35:b1:2e:ea:99:d9:99:b6:cd:
         d1:6e:63:23:2a:35:0f:35:48:bd:c8:11:d1:60:e0:f5:46:75:
         0b:b9:d3:60:23:8d:31:4c:4d:90:d3:55:5b:cc:e0:f9:af:f1:
         a8:83:0b:45:b5:73:60:54:94:5a:ce:ee:84:3a:86:f8:a4:d1:
         1e:be:d2:b3:58:c7:b0:fb:7f:e6:3e:91:8a:b4:e2:20:19:f8:
         cc:5e:e0:0b:d5:c8:af:ea:e5:a8:1f:3a:cf:ed:38:74:5d:33:
         9c:63:18:88:ab:cc:1b:cb:8c:9d:e0:39:22:d2:da:36:d3:04:
         17:04:63:fa:df:1c:4a:5b:92:d2:d9:03:e6:e8:3b:91:f2:91:
         67:d1:af:75:6f:77:e7:dc:77:f4:13:af:47:88:8c:33:27:50:
         c3:7b:e0:50:6b:75:03:64:a1:dc:52:71:f8:30:63:0b:5b:7e:
         b6:1a:f8:2b:a3:d5:91:be:aa:5a:10:5d:42:6b:35:e5:fb:06:
         b6:55:4f:04:4f:00:25:00:9a:21:1f:b2:9a:a9:98:11:b6:de:
         78:5d:f3:d5:d7:1c:41:58:5c:25:66:89:24:69:5c:36:43:1d:
         47:d9:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:45 2025 by rpki-client