Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33322d3332203d3e20323636393131.roa
File:                     323830343a343533343a3a2f33322d3332203d3e20323636393131.roa (raw, json)
Hash identifier:          K4p2XECNVlx8MLEb/13M/CsNRfKY4bhCIvjKEeYKPfg=
Subject key identifier:   5D:8D:EC:96:08:04:20:82:9F:67:AE:06:A0:F0:AC:B9:6F:F7:C8:32
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       3C89BC5BF3F7C8A391F2E1905033293566365C1A
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33322d3332203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:48:53 +0000
ROA not before:           Wed 16 Aug 2023 13:43:53 +0000
ROA not after:            Wed 14 Aug 2024 13:48:53 +0000
asID:                     266911
IP address blocks:        2804:4534::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:89:bc:5b:f3:f7:c8:a3:91:f2:e1:90:50:33:29:35:66:36:5c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:43:53 2023 GMT
            Not After : Aug 14 13:48:53 2024 GMT
        Subject: CN=5D8DEC96080420829F67AE06A0F0ACB96FF7C832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:1b:38:88:ea:5e:73:44:73:e4:8d:33:63:
                    e0:1e:62:87:23:62:2a:dd:22:cb:05:61:0d:ff:75:
                    a7:97:13:d0:b1:c8:c1:3b:83:3d:ef:87:f1:76:13:
                    ac:e8:dc:6b:40:f3:58:7c:21:9e:72:dc:01:a9:db:
                    0e:0b:83:69:35:29:cf:ca:91:76:95:cb:b0:4c:fb:
                    51:6d:7e:43:38:0b:2a:98:41:bd:2e:ed:26:8d:dc:
                    30:d7:aa:bf:fb:d7:3e:10:5e:a6:b4:56:58:ed:bb:
                    99:41:36:39:89:54:4f:73:89:a6:93:0c:1a:2d:2b:
                    6a:b8:88:90:a3:fc:1b:9c:34:c6:22:a4:ca:f3:e7:
                    d6:a9:ac:a2:e9:b8:c3:99:65:f0:9d:b1:48:53:0b:
                    d6:cb:58:29:f7:55:00:9b:64:54:1c:a4:f8:06:ff:
                    84:f2:f4:79:71:6b:82:4b:06:de:d0:6b:49:d6:0d:
                    ad:b6:73:02:cb:66:93:66:8e:d1:35:03:5a:c2:40:
                    42:86:1b:7a:83:ca:9c:23:e4:8e:ca:47:1b:25:d3:
                    ce:42:c4:73:a6:01:a2:66:a9:09:e8:66:50:25:3f:
                    28:6e:e1:54:9c:e3:80:20:b0:37:c9:2c:7d:29:d1:
                    a3:27:f9:9b:aa:ce:99:18:e8:61:22:37:f6:f7:44:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:EC:96:08:04:20:82:9F:67:AE:06:A0:F0:AC:B9:6F:F7:C8:32
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33322d3332203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4534::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:5e:9b:3e:94:80:c2:f0:3a:8e:89:50:85:fe:ef:d2:57:
         40:d3:71:6d:1a:9f:3b:1d:1f:0c:05:47:64:a7:a8:2d:0d:65:
         27:b8:f8:fb:41:f0:80:bd:01:ec:af:91:65:e7:ef:d7:64:09:
         df:82:da:7d:6d:bc:cf:35:70:c2:20:ac:7c:c9:a0:64:8e:17:
         ba:8e:7d:7d:48:4c:e1:d7:16:32:a9:cd:c3:ba:72:82:c6:04:
         83:cc:57:8b:65:9b:46:f2:74:17:30:f6:85:47:b8:dc:4c:96:
         e6:d2:48:c4:0f:45:6e:75:80:17:2a:68:25:e1:f3:5c:28:c8:
         4f:2e:1f:08:ff:b7:28:3a:08:e7:86:3a:da:8c:5f:ac:a5:5c:
         56:1c:90:28:f9:6b:97:4a:fe:e7:74:b9:fe:c2:e7:7c:bd:57:
         83:85:c1:db:36:b5:02:8c:a6:9c:92:b8:23:e3:58:dc:dd:56:
         d3:8d:62:8d:4e:0a:d8:c8:ef:0c:35:f7:82:e9:ff:15:a4:cc:
         10:9b:08:22:54:07:2e:ae:5f:90:4e:98:34:6f:9d:2b:54:a0:
         08:98:da:9b:23:44:b4:67:51:a8:b3:40:ec:20:5a:9d:5e:7c:
         3c:b9:95:8a:26:c7:89:11:4f:4b:49:1a:71:36:55:1d:9a:32:
         99:e3:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:35 2025 by rpki-client